by GanyuanRan
Make AI coding agents architecture-aware: baseline-first, evidence-verified, drift-checked, and safe across long tasks.
# Add to your Claude Code skills
git clone https://github.com/GanyuanRan/AegisLast scanned: 5/27/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-27T08:04:01.086Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}See how Aegis compares with popular alternatives.
Aegis is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by GanyuanRan. Make AI coding agents architecture-aware: baseline-first, evidence-verified, drift-checked, and safe across long tasks. It has 1,227 GitHub stars.
Yes. Aegis passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/GanyuanRan/Aegis" and add it to your Claude Code skills directory (see the Installation section above).
Aegis is primarily written in Python. It is open-source under GanyuanRan on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh Aegis against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Stop babysitting your agent. Aegis makes your agent plan against your real baseline before it edits, prove completion with fresh evidence, and leave simple tasks alone — you get fewer reworks, safer changes, and less blind trust in "done".
Aegis is a method pack that makes AI coding agents work like disciplined engineers — so you don't have to watch them.
The numbers above are bounded advisory evidence from the frozen benchmark below, not a universal-quality or completion-authority claim.
A frozen held-out A/B benchmark for Aegis 2.7.6 (2026-08-11) kept the Codex client, prompts, projects, tool policy, and requested the same gpt-5.6-sol / xhigh setting in both arms; only the Aegis projection differed. Across 120 valid runs on 20 cases,
contract pass rate was 61.67% → 93.33% (+31.67 pp) and unsafe outcomes were 13.33% → 0%. The 95% case-cluster interval was +15.00 pp to +50.00 pp. This is bounded advisory evidence; review was arm-hidden technical review, not independent human review, and host events did not return the observed model identity.
Sanitized JSON · English table · 中文表格 · Methodology
New here? The fastest start is one prompt to your agent — the full install-and-verify flow is below.
Give this prompt to your AI coding agent:
Read https://github.com/GanyuanRan/Aegis, identify my current AI coding host, and install Aegis globally using the correct host guide. If the host is the official DeepSeek Harness (`dsh`), treat global/minimal installation as native profile-plugin installation with `dsh plugin --profile <profile> add "git+https://github.com/GanyuanRan/Aegis.git"`; do not silently substitute the direct-child compatibility path unless the plugin manager is unavailable and I explicitly approve compatibility mode. Restart or reload the host if needed, then run complete-install verification from the installed Aegis method-pack root. Do not run the doctor command from the target project directory. First locate `<aegis-method-pack-root>`, then run `cd <aegis-method-pack-root> && python scripts/aegis-doctor.py --write-config --json`. Treat the install as complete only if the JSON includes `"ok": true`, `"workspaceSupport": "available"`, and `"configStatus": "configured"`; if the host uses a separate skill discovery directory, also verify it with `--discovery-root <path>`; if the host guide declares a skill directory name prefix, also pass `--discovery-name-prefix <prefix>`. Also complete the selected host guide's native activation and automatic-entry checks; file discovery or a generic doctor result alone is not sufficient when the host provides a plugin, hook, or session-start bootstrap contract.
After a complete install has registered the current host, later updates can use
natural language such as update Aegis or the explicit skill request
aegis:update. The agent can route either form through the local update path:
locate the installed method-pack root, use the host-scoped registry, and call
scripts/aegis-update.py for the current host by default. Updating every
registered host requires an explicit --all request. Aegis does not run
background automatic updates by default.
Aegis is currently:
Aegis Method Pack (runtime-ready)
It is not the full Aegis Platform, a daemon, a background runner, a runtime
core, an authoritative GateDecision, an authoritative PolicySnapshot, or
final completion authority. User instructions and target-project rules outrank
Aegis guidance.
The global routing prefix is an optional, manually copied host/profile projection. It does not install Aegis or prove skill discovery. If the host already has reliable Aegis bootstrap and routing, no extra global rule is usually needed. Otherwise, add the prefix at the very beginning of the existing global user rules without changing unrelated content.
This copied prefix is not managed by aegis:update. Users who previously
copied the retired Lite / Advanced profiles should replace only those old
Aegis blocks with the unified prefix. The prefix follows the host or session
activation mode, defaults to auto when none is declared, and leaves detailed
workflow governance to the loaded Aegis skills. Host-native skill matching may
still remain host-controlled.
Activation mode defaults to automatic. To switch to explicit mode, run this from the installed method-pack root:
cd <aegis-method-pack-root>
python scripts/aegis-doctor.py activation-mode explicit
Restart the host after changing activation mode. Details and host caveats live in docs/current/AEGIS_ACTIVATION_MODE.md.
TDD mode defaults to off: Aegis does not automatically require TDD, and
completion verification still applies. To enable automatic TDD routing when you
want Aegis to choose strict, light, or skipped by task risk:
cd <aegis-method-pack-root>
python scripts/aegis-doctor.py tdd-mode auto
You can also request strict TDD directly in a query with explicit markers such
as TDD Route: strict, strict TDD, test-first, or
RED / GREEN / REFACTOR.
Details live in docs/current/AEGIS_TDD_MODE.md.
Aegis keeps a multi-host, plugin-installable distribution goal.
| Host group | Current status | Start here |
|---|---|---|
Codex, OpenCode |
Fresh evidence exists for the current method-pack scope | Codex, OpenCode |
Claude Code, CodeBuddy, `Dee |