Free offline CLI

Audit the project, not the docs.

1stStep OS Audit is a local CLI for existing repositories. It prefers evidence over documentation theater, keeps a zero metered API cost path, and never rewrites the target tree. A SECURITY.md is not proof of security. Run --help after clone.

Open GitHub → CLI with --help 1stStep OS concept All tools

Evidence over docsFindings need citations against a snapshot, not README claims.

Zero metered API costThe free path is local and deterministic. No paid model call is required.

Does not rewrite your repoCapture is read-only. Audit home stays outside the target.

Get it

Clone and run --help

The public repo is the install. Node 24 or newer. Nothing here requires an email, account, or paid API key.

Works today

GitHub

Public source. Clone, install, then ask the CLI for help. This is the live listing.

Free path

audit:free and check:free-cost

Deterministic offline audit and a gate that fails if a metered API dependency appears.

Local commands

Audit output is written to an audit home outside the target (default ~/.osaudit for osaudit). The target tree is not rewritten.

git clone https://github.com/1ststepai/1ststep-os-audit
cd 1ststep-os-audit
npm install
node engine/src/cli.ts --help
npm run audit:free -- --help
npm run check:free-cost

osaudit — 1stStep OS Audit local CLI

Commands:
  validate | lock [--update] | init <path> --target ID --name NAME
  confirm | baseline | score | report | finalize
  help

Global:
  --home ~/.osaudit   --target TGT-ID   --by user.owner
  -h, --help

Never writes into the target project tree.