AI Company Framework

• Risk level: Low
• Analyzed: Apr 26, 2026, 7:19 AM
• Findings: 0
• Version: 3.0.2

Overview

The skill is an instruction-only framework that is internally consistent with its stated purpose, but it requests broad runtime permissions (file read/write, network API, and subagent/session capabilities) that you should review before enabling in production.

This skill is primarily documentation, prompts, and standards for an internal 'AI Company' framework — its content matches that purpose and it asks for no secrets or installs. Before enabling it for autonomous use, check the following: 1) Verify the skill source/homepage and that you trust the owner (source is 'unknown' in the registry metadata). 2) Confirm your platform policy for permissions: file read/write, network API access, and mcp subagent/session capabilities are relatively powerful — restrict them or sandbox the skill if you don't want it spawning subagents or calling external APIs. 3) Audit and sandbox any integration with ai-company-hq or harness dependencies before granting production access. 4) If you need higher assurance, run the prompts in an isolated environment (developer sandbox) and inspect any runtime interactions with HQ/registry. If you want more confidence about network endpoints or exact runtime behavior, provide additional details about the platform's HQ/registry endpoints and the ai-company-hq/ai-company-harness skills for a deeper review.