by gonemedia
AI cursor assistant for macOS, Windows, Linux. Hold a hotkey, ask a question about what's on your screen, get an instant answer. Vision-capable AI overlay with OpenRouter, Anthropic, OpenAI, Gemini. Local-first, BYO key, no telemetry.
# Add to your Claude Code skills
git clone https://github.com/gonemedia/aipointerLast scanned: 5/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "app-builder-lib: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dmg-builder: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron: Electron has ASAR Integrity Bypass via resource modification",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-builder: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-builder-squirrel-windows: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "tmp: tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-05-30T15:06:32.357Z",
"npmAuditRan": true,
"pipAuditRan": true
}aipointer is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by gonemedia. AI cursor assistant for macOS, Windows, Linux. Hold a hotkey, ask a question about what's on your screen, get an instant answer. Vision-capable AI overlay with OpenRouter, Anthropic, OpenAI, Gemini. Local-first, BYO key, no telemetry. It has 267 GitHub stars.
aipointer returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/gonemedia/aipointer" and add it to your Claude Code skills directory (see the Installation section above).
aipointer is primarily written in TypeScript. It is open-source under gonemedia on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh aipointer against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
If AIPointer ⦿ is useful to you, a star 🌟 on GitHub helps the project stay alive.
AIPointer is an open-source desktop overlay. You hold a key (default: Right-Cmd on macOS, Right-Ctrl on Windows/Linux), a glassmorphism box pops up next to your cursor, you ask a question, and a vision-capable LLM answers about whatever's around the cursor. A screenshot of the cursor region, your prompt, and (optionally) your clipboard get sent to the provider you configured. You keep your own API key, you pay for your own tokens, nothing is logged anywhere.
BSL-1.1 source-available, no framework lock-in, no cloud account. For longer autonomous tasks, AIPointer points you at Skales, the same author's larger AI agent.
AIPointer is useful when you want to ask an AI about something on your screen without copying, pasting, or switching apps:
It works as an alternative to switching to ChatGPT, Claude, or Gemini in a browser tab — you stay where you are, the answer comes to you.
↻ Refresh models button that pulls the live model list with your saved key. Or leave it on Auto and let AIPointer pick the cheapest viable one./attach). Images go in as vision, text / JSON / CSV / Markdown / code is inlined, PDFs and Office docs are referenced by name. Press Enter with files queued and no prompt, and it summarizes them./summary, /brief, /translate, /explain, /code, /improve, /define, /solve, /reply, /identify. Plain prose works too — AIPointer detects intent across languages.Version-by-version detail lives in CHANGELOG.md.
Download a signed build for your OS at aipointer.app, or build from source:
git clone https://github.com/gonemedia/aipointer
cd aipointer
npm install
npm run dev
On first launch you'll be prompted to grant Accessibility (for the global key listener) and Screen Recording (for the cursor-region screenshot). Both are required on macOS. The Settings panel opens automatically the first time so you can paste an API key. Get one at:
AIPointer asks for the minimum required to do its job. Nothing else is touched.
macOS
Windows
Shell.Application via PowerShell. Some Defender configurations block this — it degrades gracefully to the paperclip button.Linux
libsecret (gnome-keyring) or KWallet for OS-encrypted API key storage. Without one, keys store base64-encoded with a warning banner.All platforms — network access
Your prompts, screenshots, queued files, and voice recordings (if used) go directly to the LLM provider you configured. The auto-updater fetches aipointer.app/updates/latest.json. Nothing else leaves your machine. No telemetry, no analytics.
AIPointer ships a 3-state Voice engine picker in Settings → Voice. Fresh installs land on System so read-aloud and voice input work for 100% of users without any setup. Local and Cloud are explicit opt-ins.
| Engine | TTS | STT | Setup | Cost | Quality |
|---|---|---|---|---|---|
| System (default) | OS Web Speech API | OS Web Speech Recognition | None — works out of the box | Free | OS-native |
| Local (opt-in) | Kokoro 82M (ONNX) | Whisper (GGML), on-device since v1.1.8 | One-time download, offline forever after | Free | High |
| Cloud (opt-in) | OpenAI/Gemini/OpenRouter cascade | Same cascade | User API key | Per-token | Max |
The Local engine, in detail. Settings → Voice → Local discloses the download size before pulling anything and shows live progress; atomic writes prevent a partial file from