founder-coach
v0.0.1AI-powered startup mindset coach that helps founders upgrade their thinking patterns, track mental model progress, and set weekly challenges. Use when: - User is a startup founder seeking to improve their entrepreneurial mindset - User wants to detect and overcome low-level thinking patterns - User needs guidance on applying mental models (PMF, 4Ps, NFX frameworks) - User wants to set and track weekly challenges - User requests a weekly progress report - User is discussing startup challenges and needs Socratic questioning
⭐ 4· 2.4k·10 current·10 all-time
bybetterest@goforu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (startup mindset coach) aligns with the skill creating a persistent founder profile, tracking weekly challenges, and reading journals for context. However, the skill expects to write files into the user's home and (optionally) into a PhoenixClaw vault (~/PhoenixClaw/Startup/founder-profile.md and weekly reports). Writing into another app's directory (PhoenixClaw) is plausible for deep integration but is a scope decision users may not expect.
Instruction Scope
SKILL.md instructs the agent to detect and create local config (~/.founder-coach/config.yaml), create and append to a founder-profile at ~/PhoenixClaw/Startup/founder-profile.md, read PhoenixClaw's config and daily journals, and aggregate session logs. Those file reads/writes are within a coaching use case but are broader than a stateless chat skill. Additionally, the weekly-report guide claims 'Automatic: Every Sunday at 10 PM (via cron)' without any install mechanism or explanation of how scheduling is set up — ambiguous and potentially misleading. The skill states strict 'do not modify PhoenixClaw core data' yet also suggests adding coaching insights into PhoenixClaw journals (conditional on configuration), which is inconsistent and needs clarification.
Install Mechanism
This is an instruction-only skill with no install spec or third-party downloads, so it does not install binaries or fetch remote code. That minimizes supply-chain risk.
Credentials
The skill requests no environment variables, no credentials, and no special binaries. It only requires filesystem access under the user's home directory, which is proportionate for a persistent, local coaching assistant that stores a profile and reports.
Persistence & Privilege
The skill persists data by creating ~/.founder-coach/config.yaml and files under ~/PhoenixClaw/Startup and weekly report files. It does not declare 'always: true'. Persistence in user home is expected for this purpose, but writing into another application's data directory (PhoenixClaw) and the ambiguous cron-based automatic scheduling raise persistence/privilege concerns that should be clarified and consented to by the user.
What to consider before installing
This skill is generally coherent for a coach that keeps a local profile and reads your journal files, but there are a few things to check before installing:
1) File writes: It will create ~/.founder-coach/config.yaml and files under ~/PhoenixClaw/Startup (founder-profile.md and weekly reports). If you use PhoenixClaw, confirm you want this skill to write into that vault rather than keeping coach data in a separate folder.
2) Automatic scheduling: The docs mention an automatic weekly report via cron, but there is no install step showing how a cron job would be added. Ask the author how automatic scheduling is implemented and whether it requires explicit user approval to create cron entries or background tasks.
3) Read access: The skill reads ~/.phoenixclaw/config.yaml and daily journal files to provide context. If you keep sensitive information in those journals, be aware the coach will read them when integration is enabled.
4) Guardrails clarity: The skill repeatedly states it 'must not' modify PhoenixClaw core data but also suggests optionally injecting coaching insights into journals—get clarification on exact write behavior and seek an explicit opt-in toggle for any writes to PhoenixClaw files.
If you are comfortable with local file persistence and explicitly grant access to your PhoenixClaw vault (or keep the coach in standalone mode), the design is reasonable. If you prefer stricter separation, ask the maintainer to confine all coach files to ~/.founder-coach or another user-approved directory and to require an explicit opt-in before creating cron jobs or modifying any PhoenixClaw files.Like a lobster shell, security has layers — review code before you run it.
latestvk972872a3gqwj93x8jz2hkmzc580cxcf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
