by GanyuanRan
Make AI coding agents architecture-aware: baseline-first, evidence-verified, drift-checked, and safe across long tasks.
# Add to your Claude Code skills
git clone https://github.com/GanyuanRan/AegisLast scanned: 5/27/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-27T08:04:01.086Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}See how Aegis compares with popular alternatives.
Aegis is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by GanyuanRan. Make AI coding agents architecture-aware: baseline-first, evidence-verified, drift-checked, and safe across long tasks. It has 1,349 GitHub stars.
Yes. Aegis passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/GanyuanRan/Aegis" and add it to your Claude Code skills directory (see the Installation section above).
Aegis is primarily written in Python. It is open-source under GanyuanRan on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh Aegis against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
Stop babysitting your agent. Aegis makes your agent plan against your real baseline before it edits, prove completion with fresh evidence, and leave simple tasks alone — you get fewer reworks, safer changes, and less blind trust in "done".
Aegis is a method pack that makes AI coding agents work like disciplined engineers — so you don't have to watch them.
These numbers are bounded advisory evidence from Aegis 2.7.6 (2026-08-11), not a measurement of this release, a universal-quality claim, or completion authority. See the full benchmark and its limitations.
New here? The fastest start is one prompt to your agent — the full install-and-verify flow is below.
Give this prompt to your AI coding agent:
Read https://github.com/GanyuanRan/Aegis, identify my current AI coding host, and install Aegis globally using the correct host guide. If the host is the official DeepSeek Harness (`dsh`), treat global/minimal installation as native profile-plugin installation with `dsh plugin --profile <profile> add "git+https://github.com/GanyuanRan/Aegis.git"`; do not silently substitute the direct-child compatibility path unless the plugin manager is unavailable and I explicitly approve compatibility mode. Restart or reload the host if needed, then run complete-install verification from the installed Aegis method-pack root. Do not run the doctor command from the target project directory. First locate `<aegis-method-pack-root>`, then run `cd <aegis-method-pack-root> && python scripts/aegis-doctor.py --write-config --json`. Treat the install as complete only if the JSON includes `"ok": true`, `"workspaceSupport": "available"`, and `"configStatus": "configured"`; if the host uses a separate skill discovery directory, also verify it with `--discovery-root <path>`; if the host guide declares a skill directory name prefix, also pass `--discovery-name-prefix <prefix>`. Also complete the selected host guide's native activation and automatic-entry checks; file discovery or a generic doctor result alone is not sufficient when the host provides a plugin, hook, or session-start bootstrap contract.
A frozen held-out A/B benchmark for Aegis 2.7.6 (2026-08-11) kept the Codex client, prompts, projects, tool policy, and requested the same gpt-5.6-sol / xhigh setting in both arms; only the Aegis projection differed. Across 120 valid runs on 20 cases,
contract pass rate was 61.67% → 93.33% (+31.67 pp) and unsafe outcomes were 13.33% → 0%. The 95% case-cluster interval was +15.00 pp to +50.00 pp. This is bounded advisory evidence; review was arm-hidden technical review, not independent human review, and host events did not return the observed model identity.
Sanitized JSON · English table · 中文表格 · Methodology
A newer matrix-v7 standard snapshot for Aegis 2.10.8 covers 22 cases with one observation per arm and case. It uses a different run profile from the extended snapshot above and does not measure the changes in this release.
Autoloom is our AI coding desktop client. It brings Aegis's change necessity analysis, complexity governance, and delivery review into development execution, helping you spend less time repeating instructions and inspect the evidence behind delivered changes.
Currently available as a Windows x64 Alpha. The client is free; choose your model provider, which bills model usage separately.
Explore Autoloom · Download Alpha
After a complete install has registered the current host, later updates can use
natural language such as update Aegis or the explicit skill request
aegis:update. The agent can route either form through the local update path:
locate the installed method-pack root, use the host-scoped registry, and call
scripts/aegis-update.py for the current host by default. Updating every
registered host requires an explicit --all request. Aegis does not run
background automatic updates by default.
Aegis is currently:
Aegis Method Pack (runtime-ready)
It is not the full Aegis Platform, a daemon, a background runner, a runtime
core, an authoritative GateDecision, an authoritative PolicySnapshot, or
final completion authority. User instructions and target-project rules outrank
Aegis guidance.
The global routing prefix is an optional, manually copied host/profile projection. It does not install Aegis or prove skill discovery. If the host already has reliable Aegis bootstrap and routing, no extra global rule is usually needed. Otherwise, add the prefix at the very beginning of the existing global user rules without changing unrelated content.
This copied prefix is not managed by aegis:update. Users who previously
copied the retired Lite / Advanced profiles should replace only those old
Aegis blocks with the unified prefix. The prefix follows the host or session
activation mode, defaults to auto when none is declared, and leaves detailed
workflow governance to the loaded Aegis skills. Host-native skill matching may
still remain host-controlled.
Activation mode defaults