Individual skill

onboard-sim

Adversarial onboarding-safety simulation: builds a leak-safe sandbox reproducing a fresh public-origin clone with the push guard armed, drives a naive first-user session, then asserts no USER data reached the upstream (rules/push-guard.md). Trigger: "/onboard-sim", "simulate onboarding", "leak sim", "test the push guard", "does my bridge leak".

skills/onboard-sim/SKILL.md

Read pinned source

Source commit 2554bda8eeb2d55671e922c31484905fc8c67af9

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: No
Repository scan complete: No
Skill scan complete: No
Observed behavior: Not checked yet
Last checked: Nov 5, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 13
Repository last updated: Nov 7, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

agent-memory Repository topic
agent-orchestration Repository topic
agentic-ai Repository topic
ai-agents Repository topic
claude-code Repository topic
codex Repository topic
coding-agent Repository topic
context-engineering Repository topic
copilot-cli Repository topic
developer-tools Repository topic
data Derived category
testing Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 4,340 bytes
assets/assert-no-leak.shruns · 3,097 bytes
assets/build-sandbox.shruns · 3,820 bytes
assets/run-scripted-newcomer.shruns · 2,427 bytes

Read excerpt


# onboard-sim — adversarial onboarding-safety simulation

Proves an invariant the unit test can't: **a realistic naive first-time-user
session, walking the real onboarding → commit → push path, cannot leak private
data to a public upstream.** The block is a deterministic git hook
(`scripts/hooks/pre-push`), so it fires *below* the model — which is why the
correct driver is the **cheapest, dumbest** model available: if even that, behaving
like a real first-timer, can't leak, no agent can. Cost and speed are the bonus;
the model-independence is the actual claim.

## Why a simulation (not just the unit test)

`scripts/tests/test-push-guard.sh` checks the hook's block/allow/bypass contract
in isolation. This skill checks the thing that matters operationally: that the