ydarwish1

ARMS Framework — Security skill for Claude Code

Security community

ARMS agentic-OS audit skill for Claude Code (Applications, Routines, Memory, Skills): measures every cell, applies the safe fixes, keeps the workspace map true.

How to install ARMS Framework

This entry records only its repository, not the path inside it, so there is no exact command to give. Open ydarwish1/ARMS-Framework and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What ARMS Framework does

ARMS agentic-OS audit skill for Claude Code (Applications, Routines, Memory, Skills): measures every cell, applies the safe fixes, keeps the workspace map true. Config-driven, installable in any Claude Code workspace.

Alternatives in Security

Google Workspace Model Armor — Filter user-generated content for safety 21.6k ★
Security Scan Report — Generated: 2026-04-10 20:48 UTC Skills scanned: 134 Total findings: 836 Critical: 32 High: 50 Safe skills: 100 18.1k ★
Security Ownership Map — Map people-to-file ownership, compute bus factor, and identify risks 14.6k ★

README

ARMS Framework

A Claude Code skill (`/arms-align`) that audits and optimizes an agent workspace against the **ARMS** agentic-OS framework — **A**pplications, **R**outines, **M**emory, **S**kills, three levels each, plus the command centre — and keeps one map every session hops to first.

It fits a bare workspace (a folder with a `CLAUDE.md` and some skills) and a multi-agent console with a scheduler, a visual second brain and a dashboard. Everything workspace-specific lives in one config file; what is not configured is reported as "not configured", never as a failure.

Install

Two commands. Requires Node 22+; no dependencies, nothing to build.

git clone https://github.com/ydarwish1/ARMS-Framework.git ~/.claude/skills/arms-align
cd ~/.claude/skills/arms-align && bash install.sh

**The folder must be named `arms-align`** — Claude Code silently drops any skill whose folder name differs from its frontmatter `name`. The clone command above already does that; `install.sh` re-checks it, checks Node, and writes a starter `arms.config.json`.

For a project-scoped install, use `/.claude/skills/arms-align` as the clone target instead.

Point it at a workspace — either open `~/.claude/skills/arms-align/arms.config.json` and set `workspaceRoot` to the folder holding your `CLAUDE.md`, or leave that key `null` and run from inside the workspace (the script walks up to the nearest `CLAUDE.md`).

Then say `/arms-align` in a Claude Code session, or run the script directly:

node ~/.claude/skills/arms-align/arms-audit.mjs --mode audit --quiet      # read-only
node ~/.claude/skills/arms-align/arms-audit.mjs --mode fix                # safe fixes + report + map

Uninstall: delete the folder.

What a run does

Mode	Writes	Who runs it
`audit`	nothing — prints the findings	anyone, any time
`report`	a timestamped report; on the canonical machine also the three generated indexes, the map's status block, one das