let-fate-decide
Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated.
Skill by trailofbits
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/trailofbits-let-fate-decide
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: writing
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
- Runs as
- Python package
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/let-fate-decide
Tools it pre-approves 4
From allowed-tools in SKILL.md: the agent may use these without asking you each time.
BashReadGrepGlob
What's inside
- Skill name
let-fate-decide- Description
- Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated. Interprets the spread to guide next steps. Use when the user says 'let fate decide', 'YOLO', 'whatever', 'idk', or other nonchalant phrases, makes Yu-Gi-Oh references, or when you are about to arbitrarily pick between multiple reasonable approaches. Prefer over asking clarifying questions when the user's tone is casual or playful rather than precision-seeking.
- License
- CC-BY-SA-4.0
- Allowed tools
- Bash, Read, Grep, Glob
- Instructions
- 191 lines in SKILL.md · view on GitHub
Before installing
- Ships executable scripts
- Pre-approves any shell command
Files (98)
- SKILL.md
- openai.yaml · agents/
- trail-of-bits-mark.svg · assets/
- ace-of-cups.md · cards/cups/
- eight-of-cups.md · cards/cups/
- five-of-cups.md · cards/cups/
- four-of-cups.md · cards/cups/
- king-of-cups.md · cards/cups/
- knight-of-cups.md · cards/cups/
- nine-of-cups.md · cards/cups/
- page-of-cups.md · cards/cups/
- queen-of-cups.md · cards/cups/
- seven-of-cups.md · cards/cups/
- six-of-cups.md · cards/cups/
- ten-of-cups.md · cards/cups/
- three-of-cups.md · cards/cups/
- two-of-cups.md · cards/cups/
- 00-the-fool.md · cards/major/
- 01-the-magician.md · cards/major/
- 02-the-high-priestess.md · cards/major/
- 03-the-empress.md · cards/major/
- 04-the-emperor.md · cards/major/
- 05-the-hierophant.md · cards/major/
- 06-the-lovers.md · cards/major/
- 07-the-chariot.md · cards/major/
- 08-strength.md · cards/major/
- 09-the-hermit.md · cards/major/
- 10-wheel-of-fortune.md · cards/major/
- 11-justice.md · cards/major/
- 12-the-hanged-man.md · cards/major/
- 13-death.md · cards/major/
- 14-temperance.md · cards/major/
- 15-the-devil.md · cards/major/
- 16-the-tower.md · cards/major/
- 17-the-star.md · cards/major/
- 18-the-moon.md · cards/major/
- 19-the-sun.md · cards/major/
- 20-judgement.md · cards/major/
- 21-the-world.md · cards/major/
- ace-of-pentacles.md · cards/pentacles/
- eight-of-pentacles.md · cards/pentacles/
- five-of-pentacles.md · cards/pentacles/
- four-of-pentacles.md · cards/pentacles/
- king-of-pentacles.md · cards/pentacles/
- knight-of-pentacles.md · cards/pentacles/
- nine-of-pentacles.md · cards/pentacles/
- page-of-pentacles.md · cards/pentacles/
- queen-of-pentacles.md · cards/pentacles/
- seven-of-pentacles.md · cards/pentacles/
- six-of-pentacles.md · cards/pentacles/
- ten-of-pentacles.md · cards/pentacles/
- three-of-pentacles.md · cards/pentacles/
- two-of-pentacles.md · cards/pentacles/
- ace-of-swords.md · cards/swords/
- eight-of-swords.md · cards/swords/
- five-of-swords.md · cards/swords/
- four-of-swords.md · cards/swords/
- king-of-swords.md · cards/swords/
- knight-of-swords.md · cards/swords/
- nine-of-swords.md · cards/swords/
- …and 38 more
SKILL.md (first lines)
# Let Fate Decide When the path forward is unclear, let the cards speak. ## Quick Start Resolve [the drawing script](scripts/draw_cards.py) from this `SKILL.md`'s installed location, not the shell's working directory. In the commands below, replace `<resolved-script-path>` with that absolute path, keeping the quotes. Relative links and JSON `file` paths resolve from the directory containing this `SKILL.md`. 1. Run the drawing script: ```bash uv run --no-config "<resolved-script-path>" ``` 2. The script outputs JSON for the default 12 Houses of the Zodiac spread: 12 houses, each with 1 Major Arcana card and 2 Minor Arcana cards. Each house and card includes a `file` path relative to this `SKILL.md`'s directory. 3. Read each house file and each card's meaning file to understand the draw. For faster reads, use `--content` to include house and card text directly in the JSON: ```bash uv run --no-config "<resolved-script-path>" --content ``` 4. Interpret the spread using [the interpretation guide](references/INTERPRETATION_GUIDE.md) 5. When the task belongs to a specialized technical workflow, use [technical context lenses](references/TECHNICAL_CONTEXT_LENSES.md) to translate the reading into an audit, verification, domain, failure-class, or stakeholder lens 6. Apply the interpretation to the task at hand ## When to Use - **Vague prompts**: The user's request is ambiguous and multiple reasonable approaches exist - **Explicit invocations**: "I'm feeling lucky", "let fate decide", "dealer's choice", "surprise me", "whatever you think", "YOLO" - **Casual delegation**: "whatever", "up to you", "your call", "idk", "just do something", "wing it", "I trust you", "doesn't matter", "do what you want", "I don't care", "any approach works", "you pick" - **Yu-Gi-Oh energy**: "Heart of the cards", "I believe in the heart of the cards", "you've activated my trap card", "it's time to duel" - **Shrug-like brevity**: Very short prompts that fully delegate the decision without expressing a preference - **Redraw requests**: "Try again" or "draw again" when no actual system changes occurred (this means draw new cards, not re-run the same approach) - **Tie-breaking**: When you are about to arbitrarily pick between 2+ valid approaches, draw cards instead of silently choosing one ## When NOT to Use - The user has given clear, specific instructions - The task has a single obvious correct approach - As the deciding authority for safety-critical work (security, data integrity, production deployments, release approval, incident response) - The user explicitly asks you NOT to use Tarot - The user's tone is precision-seeking rather than casual -- ask clarifying questions instead to gather actual requirements ## Security and Correctness Use This skill may be used inside a security, audit, or correctness pipeline as a creative lens for discovery: choosing which angle to inspect next, breaking analysis paralysis, generating hypotheses, or surfacing blind spots. It is never sufficient by itself. In security and correctness contexts, the reading must be followed by ordinary engineering evidence: source review, tests, proofs, traces, reproduction steps, exploitability analysis, or other domain-appropriate verification. Do not treat a favorable card as permission to ship, suppress a finding, skip validation, or overrule a concrete risk. ## How It Works ### The Draw The script uses `secrets` for cryptographic randomness: 1. Builds separate Major Arcana (22 cards) and Minor Arcana (56 cards) decks 2. Performs Fisher-Yates shuffles via `secrets.randbelow()` (no modulo bias) 3. Deals the default 12 Houses of the Zodiac spread 4. Each house receives 1 Major Arcana card followed by 2 Minor Arcana cards 5. Each of the 36 cards independently has a 50% chance of being reversed The default spread records a conservative unordered-card entropy budget exceeding 100 bits: roughly `log2(C(22,12))` bits from Major Arcana selection, `log2(C(56,24))` bits from Minor Arcana selection (assuming `secrets.randbelow()` is cryptographically secure), plus 36 reversal bits. The exact values are computed and reported in the JSON output under `entropy_bits`. The actual ordered assignment of cards to houses contains more entropy. ### The Spread The default spread is **12 Houses of the Zodiac**: | House | Represents | Question It Answers | |-------|------------|---------------------| | 1 | **Self** | How should this work begin? | | 2 | **Resources** | What values, assets, or constraints matter? | | 3 | **Communication** | What needs to be clarified or connected? | | 4 | **Foundations** | What context or dependency anchors the task? | | 5 | **Creativity** | Where should experimentation or delight shape the work? | | 6 | **Practice** | What quality, maintenance, or execution concern matters? | | 7 | **Partnership** | Who or what must this integrate with? | | 8 | **Transformation** | What risk, shared state, or deep change is present? | | 9 | **Exploration** | What principle or broader strategy guides the path? | | 10 | **Calling** | What delivery or long-term outcome is being served? | | 11 | **Community** | What system, network, or shared aspiration is involved? | | 12 | **The Hidden** | What blind spot, ending, or unconscious factor matters? | Within each house, the Major Arcana card sets the archetypal theme and the two Minor Arcana cards provide practical detail. For compatibility with older workflows, `draw_cards.py --legacy` returns the previous 4-card hand, and `draw_cards.py --legacy <count>` returns a custom hand of 1-78 cards. A positional count without `--legacy` is rejected, because the new default spread has a fixed shape. ### Reference Files Each house's meaning is in its own markdown file under [houses/](houses/). House files describe how the house applies across technical contexts including building new projects, vulnerability discovery, correctness verification, and common audit, verification, domain, failure-class, and stakeholder workflows.
From trailofbits/skills, CC-BY-SA-4.0.
More from trailofbits/skills
- 0.767score
trailmark
trailofbits
Builds and queries multi-language source and binary code graphs for security analysis.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
mermaid-to-proverif
trailofbits
Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv files).
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
semgrep
trailofbits
Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset…
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
slicing-code-context
trailofbits
Selects bounded, graph-informed source slices with Trailmark and delegates focused code analysis or patch-proposal work to a smaller subagent.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
github-triage
trailofbits
Triages a repository's open GitHub issues and pull requests via the gh CLI.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
firebase-apk-scanner
trailofbits
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
dimensional-analysis
trailofbits
Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value.
SkillAFreshness: A★ 7.8KClaude Code - 0.767score
codeql
trailofbits
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
diagramming-code
trailofbits
Generates Mermaid diagrams from Trailmark code graphs.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
interpreting-culture-index
trailofbits
Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
entry-point-analyzer
trailofbits
Analyzes smart contract codebases to identify state-changing entry points for security auditing.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
yara-rule-authoring
trailofbits
Guides authoring of high-quality YARA-X detection rules for malware identification.
SkillAFreshness: A★ 7.8KClaude Code +9
Signals
- Stars
- 7,783
- Forks
- 671
- Open issues
- 30
- Last commit (this folder)
- Oct 13, 2026 (14 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- CC-BY-SA-4.0
- Repository
- github.com/trailofbits/skills
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from trailofbits
- 0.767score
github-triage
trailofbits
Triages a repository's open GitHub issues and pull requests via the gh CLI.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
entry-point-analyzer
trailofbits
Analyzes smart contract codebases to identify state-changing entry points for security auditing.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
interpreting-culture-index
trailofbits
Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
firebase-apk-scanner
trailofbits
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.
SkillAFreshness: A★ 7.8KClaude Code +9 - 0.767score
dimensional-analysis
trailofbits
Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value.
SkillAFreshness: A★ 7.8KClaude Code - 0.767score
codeql
trailofbits
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.
SkillAFreshness: A★ 7.8KClaude Code +9
Cite this page
let-fate-decide skill. Agent Mart. https://agentmart.dev/skills/trailofbits-let-fate-decide (last updated 2026-10-24)