AI Company Framework

Framework skill: ClawHub Schema compliance, naming conventions, skill standardization, modularization, generalization, ecosystem registry, skill learning pip...

Security Scan

The skill is an instruction-only framework that is internally consistent with its stated purpose, but it requests broad runtime permissions (file read/write, network API, and subagent/session capabilities) that you should review before enabling in production.

Purpose & Capability

Name, description, and included prompts/references align with a framework/standardization skill. No unrelated environment variables or binaries are requested. Declared dependencies (ai-company-hq, ai-company-harness) and the documented responsibilities (registry, scaffolding, learning pipeline) coherently explain the need for inter-skill integration and registry access.

Instruction Scope

SKILL.md and the prompts instruct the agent to read the skill index and reference docs, generate templates/prompts, run robustness checks, and integrate with HQ/registry. They do not instruct reading unrelated system files, pulling arbitrary URLs, or exfiltrating secrets. Prompts are copy-paste-ready for human use and the runtime guidance stays within framework/registry/scaffolding responsibilities.

Install Mechanism

This is an instruction-only skill with no install spec and no code files to write or execute. That is the lowest-risk install mechanism and is proportionate for a documentation/patterns framework.

Credentials

The skill requests no environment variables or credentials, which is appropriate. However, its declared permissions include file read/write and network: [api], and mcp: [sessions_send, subagents]. Those permissions are plausible for a framework that registers skills and interacts with HQ, but they are non-trivial privileges and should be justified by your runtime policy.

Persistence & Privilege

always:false (not forced into every agent) and model invocation is allowed (normal). The notable privilege is mcp sessions_send and subagents, which permit creating/communicating with subagents — a powerful capability that increases the skill's blast radius even if it is instruction-only. Confirm that platform-level controls and audit/tracing are in place.

Assessment

This skill is primarily documentation, prompts, and standards for an internal 'AI Company' framework — its content matches that purpose and it asks for no secrets or installs. Before enabling it for autonomous use, check the following: 1) Verify the skill source/homepage and that you trust the owner (source is 'unknown' in the registry metadata). 2) Confirm your platform policy for permissions: file read/write, network API access, and mcp subagent/session capabilities are relatively powerful — restrict them or sandbox the skill if you don't want it spawning subagents or calling external APIs. 3) Audit and sandbox any integration with ai-company-hq or harness dependencies before granting production access. 4) If you need higher assurance, run the prompts in an isolated environment (developer sandbox) and inspect any runtime interactions with HQ/registry. If you want more confidence about network endpoints or exact runtime behavior, provide additional details about the platform's HQ/registry endpoints and the ai-company-hq/ai-company-harness skills for a deeper review.

AI Company Framework v3.0.0

Index & Quick Reference. Full specifications in references/method-patterns.md.

Quick Reference

Role

AI Company Framework — Framework skill: ClawHub Schema compliance, naming conventions, skill standardization, modularization, generalization, ecosystem registry, skill learning pipeline, starter scaffolding.

Department

Framework & Infrastructure

Merged From

[ai-company-standardization, ai-company-modularization, ai-company-generalization, ai-company-ecosystem, ai-company-registry, ai-company-skill-learner, ai-company-starter]

Section Index

• 1. Trigger Scenarios
• 2. Core Identity
• 3. Core Responsibilities
• 4. Constraints

Dependencies

See frontmatter dependencies.skills for complete dependency list.

Error Codes

See frontmatter interface.errors for complete error code reference.

Prompts

Copy-paste ready prompts in prompts/:

• 01-implement-method.md
• 02-robustness-checks.md
• 03-test-cases.md
• 04-documentation.md
• 05-workflow-execution.md

Changelog

Version	Date	Changes
3.0.0	2026-04-26	Full English rewrite; department-aligned structure; merged skills consolidated

---

This skill follows AI Company Governance Framework. See references/method-patterns.md for complete specifications.

Integration & Merge History

v3.0.0 Rebuild (2026-04-26)

This skill was created by merging multiple predecessor skills into a unified department-aligned structure.

Department: Infrastructure

Merged From (8 skills total):

• Framework (primary)
• ai-company-standardization
• ai-company-modularization
• ai-company-generalization
• ai-company-ecosystem
• ai-company-registry
• ai-company-skill-learner
• ai-company-starter

Merge Rationale:

• Consolidate related capabilities under single department owner
• Reduce skill count from 47 to 15 for better maintainability
• Preserve all functionality while improving discoverability
• Standardize structure: SKILL.md (index) + references/method-patterns.md (details)

Integration Points:

• All predecessor skill triggers preserved in unified trigger list
• All predecessor interfaces consolidated with consistent error codes
• Dependencies unified and simplified
• Prompts merged and organized by function

Migration Guide:

• Previous skill users: Use new unified skill slug ai-company-framework
• All functionality from predecessor skills is available
• Error codes may have changed - see Error Codes section
• Prompts are now user copy-paste ready (not auto-call)