boost

Name: boost
Author: jfrog

by jfrog

Verified

Save tokens. Maximize context, Safely

441stars

16forks

Shell

Added 5/19/2026

Installation

# Add to your Claude Code skills
git clone https://github.com/jfrog/boost

Getting Started

Guides for using ai agents skills like boost.

Caveman: Cut Claude Token Use by 65%
How agent-side prompt compression works, when to use it, and when not to.
What is an AI Skills Marketplace?
Definitions, how marketplaces work, and how to choose between them in 2026.
Getting Started with AI Skills

Security ReportVerified

Last scanned: 5/30/2026

{
  "issues": [],
  "status": "PASSED",
  "scannedAt": "2026-05-30T15:28:47.215Z",
  "npmAuditRan": true,
  "pipAuditRan": true
}

README.md

Frequently Asked Questions

What is boost?

boost is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by jfrog. Save tokens. Maximize context, Safely. It has 441 GitHub stars.

Is boost safe to use?

Yes. boost passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.

How do I install boost?

Clone the repository with "git clone https://github.com/jfrog/boost" and add it to your Claude Code skills directory (see the Installation section above).

What programming language is boost written in?

boost is primarily written in Shell. It is open-source under jfrog on GitHub, so you can review or fork the full source.

Are there alternatives to boost?

Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh boost against similar tools.

Agentic AI for Beginners

Build your first AI agent from scratch - tool use, ReAct pattern, memory, deployment

41 minBeginner

Comments (0)

to leave a comment.

No comments yet. Be the first to share your thoughts!

Related Skills

ECC

by affaan-m

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

240,740

beever-atlas clawapp

⚠️ Third-Party Software Notice

This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.

Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.

Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.

Read the Terms of Service

Boost wraps the commands your agents already run, turning noisy logs into compact, structured context that keeps the signal — errors, timings, changed counts, cache hits — while cutting the noise.

Boost never trades quality for savings. It trims only what's safe to drop, so agent output stays just as sharp. Our Terminal-Bench 2.0 benchmark shows it: identical task pass rate, ~12% lower cost — Boost keeps agents optimized without ever breaking their stride.

Quick start

Install Boost

macOS / Linux / Windows WSL:

curl -fsSL https://boost.jfrog.com/install.sh | bash

Windows PowerShell:

irm https://boost.jfrog.com/install.ps1 | iex

Wire it into Cursor, Claude Code, GitHub Copilot, and Codex CLI:

boost init

For AI coding agents installing Boost on a user's machine, follow AGENT-INSTALL.md.

When to use Boost

Long coding-agent sessions — Keep context lean across dozens of shell commands so agents spend tokens on the task, not scrollback.
Noisy test, build, and debug loops — Compress npm test, pytest, go test, docker build, linters, and logs while keeping failures and summaries.
CI pipelines — Shorter, easier-to-scan job logs with timing and cache signal for GitHub Actions and other runners.
Custom or internal tools — Add TOML filters for your own CLIs so the same compression loop covers the tools your agents actually run.

Smart token savings

Boost does not just truncate output. It applies command-aware filters that preserve what agents need to reason about the result.

# Without Boost: ~9,800 tokens of install noise
$ npm ci
npm warn deprecated inflight@1.0.6 / rimraf@3.0.2 / glob@7.2.3 …
added 1285 packages, audited 1286 in 45s
found 0 vulnerabilities

# With Boost: ~640 tokens, same outcome, cache-backed
$ boost npm ci
[OK] npm ci · 1,285 packages restored from boost cache in 2.4s · 0 vulnerabilities

The agent sees the useful summary, not the scrollback. On failures, Boost keeps the failing test, compiler error, or stack frame that matters.

How Boost is different

Capability	Boost	RTK	Headroom	Caveman
Command output compression	✓	✓	✓	×
Full-context and RAG compression	×	×	✓	×
Assistant reply compression	×	×	×	✓
Command output recovery	✓	✓	✓	×
Native approval sees original executable	✓	×	—	—
Versioned retrieval feedback	✓	×	×	×
Auto-disable repeatedly retrieved filters	✓	×	×	×
End-to-end agent task + cost A/B	✓	×	×	×

See your savings

After wrapping commands, open the interactive web report:

boost report

For a terminal narrative summary:

boost report -t
# or: boost report --tui

What it wraps

Agents: Cursor, Claude Code, GitHub Copilot, Codex CLI.
Commands: Docker, npm, pytest, Git, GitHub CLI, and other shell commands pass through the same wrapper.

How your agents are using Boost

boost docker build ... — compressed build log and layer-cache summary
boost npm ci — dependency summary, local package cache, retry-safe output
boost pytest — quiet output on green runs, useful failures when tests break

Update

boost update

Documentation

See the full documentation for commands, configuration, and OpenTelemetry export.

Security & Privacy

Boost's source repository is scanned on every push to main — the same commits every release is built from — by Frogbot, running JFrog Xray with JFrog Advanced Security.

	What gets scanned
✓	Dependencies (SCA) — Go modules and npm trees across every module in the repo, matched against JFrog's vulnerability database
✓	Contextual Analysis — checks whether a reported CVE is actually reachable from Boost's code, so real risk is not buried in noise
✓	Malicious packages — dependencies flagged as malicious are caught before they reach a build
✓	Secrets — every tracked file is scanned for leaked credentials and tokens
✓	Source code (SAST) — Boost's own Go and TypeScript sources
✓	Infrastructure as Code — CI workflows and deployment definitions
✓	SBOM — a component inventory is generated per build target on every scan

Findings land as code-scanning alerts and automated fix pull requests on the source repository. See SECURITY.md for the full scanning and disclosure policy.

Local-first. Command history and raw logs stay on your machine.
Only metadata leaves. When Boost sends usage data, it goes only to JFrog to help improve the product. Exported metadata includes timing, exit code, and cache stats, never raw logs, file contents, or env values. Secrets matching patterns like *_TOKEN, *_SECRET, AWS_*, DATABASE_URL are redacted before write or export.
Open protocol, signed binaries. OpenTelemetry-native. Binaries ship signed via GitHub Releases.

Full policy, supported versions, and how to report a vulnerability: see SECURITY.md.

License

Dedicated to the memory of Dima Gershovich — a brilliant engineer, a talented musician, and a dear friend. Read Dima's story