# Strato

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-vivary-dev-vivary-strato-skill`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [vivary-dev](https://agentstack.voostack.com/s/vivary-dev)
- **Installs:** 0
- **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [vivary-dev](https://github.com/vivary-dev)
- **Source:** https://github.com/vivary-dev/vivary/tree/dev/packages/create-vivary/create_vivary_assets/strato-skill
- **Website:** https://vivary.vercel.app/

## Install

```sh
agentstack add skill-vivary-dev-vivary-strato-skill
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# strato — the agent OS skill

strato's model is the per-turn loop (`STRATO.md`). This skill is the executable for the
loop's **slower clock** — the per-heartbeat work that makes a workspace *compound*:
set the workspace up, audit it on a cadence, and turn what was learned into durable
improvement. Read [`../../../STRATO.md`](../../../STRATO.md) for the model.

It never re-embeds file contents: the workspace's starter files live in strato's
[`templates/`](../../../templates/) directory and are the single source of truth.
Module `index.md` files are routers, not second copies of the module detail.

Three modes — pick by the workspace state and the request.

## `bootstrap` — first time in a workspace

Use when `SOUL.md` / `USER.md` / `AGENTS.md` / `MEMORY.md` / `STATE.md` are missing at
the workspace root, or the user says "set up the workspace".

Procedure: **explore → interview → confirm → write**, laying down the `templates/`
populated with the user's answers. The interview uses the loop's opener (`I think I
know / I am inferring / I do not know / please confirm`) at the chosen depth (3 / 5 / 8
/ 10 questions). Full steps in [references/bootstrap.md](references/bootstrap.md).

## `heartbeat` — periodic audit

Use on a schedule or when the user says "run a heartbeat" / "audit the workspace". Two
flavors: **light** (read-only findings report) and **deep** (interactive cleanup,
per-item prompts). Surfaces stale folders, cross-project bleed, skill candidates, dead
skills, automation drift, and playbook gaps. Checklist + report format in
[references/heartbeat.md](references/heartbeat.md).

## `self-improve` — capture, extract, package

Use after a slice, a bug, or a confusing handoff, or when the user says "this happened
again" / "package this into a skill". Three procedures — the bug-risk playbook, the
third-strike skill rule, and workflow-plugin packaging — in
[references/self-improvement.md](references/self-improvement.md).

## 🚦 Gates (mirror STRATO.md — never batch)

- **Never delete or move** a file without showing paths and getting per-item
  confirmation (require the user to type the name for a delete).
- **Never modify** `SOUL.md` / `USER.md` / `AGENTS.md` after bootstrap, or change an
  existing skill, without approval.
- **Never publish, push, or send externally** without explicit per-item approval.
- Creating a new SOP/skill/plugin: show the draft first.

## Done means

- The workspace has a discoverable shared brain (the `templates/` files, populated)
  that survives a session restart.
- The latest heartbeat report is within the configured cadence.
- Lessons from the last session landed in `bug-risk-playbook.md` or a skill — not just
  in chat.
- Any third-strike workflow this session became a skill, a plugin, or an explicit "no".

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [vivary-dev](https://github.com/vivary-dev)
- **Source:** [vivary-dev/vivary](https://github.com/vivary-dev/vivary)
- **License:** MIT
- **Homepage:** https://vivary.vercel.app/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-vivary-dev-vivary-strato-skill
- Seller: https://agentstack.voostack.com/s/vivary-dev
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.