Maintainer of this skill?
by Enderfga
Run Claude Code, Codex, Antigravity, Grok Build and OpenCode behind one runtime, and a run only counts as done when checks it didn't write pass. Cross-engine fan-out, councils, session handoff, spend caps, MCP server, ACP agent.
# Add to your Claude Code skills
git clone https://github.com/Enderfga/claw-orchestratorGuides for using ai agents skills like claw-orchestrator.
Last scanned: 5/18/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@anthropic-ai/sdk: Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/xml-builder: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@protobufjs/utf8: protobufjs has overlong UTF-8 decoding",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "axios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF",
"severity": "high"
},
{
"type": "npm-audit",
"message": "basic-ftp: basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands",
"severity": "high"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-xml-builder: fast-xml-builder allows attribute values with unwanted quotes to bypass malicious or unwanted attributes",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-xml-parser: fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "hono: Hono missing validation of cookie name on write path in setCookie()",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "openclaw: OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "protobufjs: Arbitrary code execution in protobufjs",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
}
],
"status": "FAILED",
"scannedAt": "2026-05-18T08:06:02.875Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}See how claw-orchestrator compares with popular alternatives.
claw-orchestrator is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Enderfga. Run Claude Code, Codex, Antigravity, Grok Build and OpenCode behind one runtime, and a run only counts as done when checks it didn't write pass. Cross-engine fan-out, councils, session handoff, spend caps, MCP server, ACP agent. It has 603 GitHub stars.
claw-orchestrator failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.
Clone the repository with "git clone https://github.com/Enderfga/claw-orchestrator" and add it to your Claude Code skills directory (see the Installation section above).
claw-orchestrator is primarily written in TypeScript. It is open-source under Enderfga on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh claw-orchestrator against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Claw Orchestrator runs Claude Code, Codex, Antigravity, Grok Build, OpenCode and any Agent Client Protocol agent (Kimi Code, dsh) as persistent sessions behind one API. A run counts as done only when checks the agent did not write pass: you declare the checks, the runtime runs them and reads the exit codes, and the evidence stays on disk. Runs are checkpointed workflows that survive a crash, and every turn on every engine is recorded with its model, tokens and cost.
https://github.com/user-attachments/assets/5bf9bea8-e5ac-4632-a292-a80a45831dff
clawo goal --engine claude runs a goal on Claude Code's /goal, with the same
checkpointing, resume and verification as a Codex goal.engine: 'acp'), with presets for
Kimi Code and dsh.clawo goal keeps a Codex /goal running for hours on one thread, reattaches it after a
crash, and judges the result with your checks.verified, refuted or unverified, and editing the tests its contract
runs refutes it (guide).clawo fanout asks several at once; session_handoff moves a live conversation to another engine in the same
workspace (guide).clawo goal runs a Codex /goal unattended on one thread, resumes it after usage limits within a
bound, optionally inside your own sandbox (guide).clawo runs) and a maxBudgetUsd cap the runtime enforces on
every engine (guide).claude-squad, Conductor and Vibe Kanban are interfaces for running agents side by side in worktrees; Claude Code subagents and Codex's parallel attempts stay within one vendor. Claw Orchestrator is a headless runtime underneath: several vendors behind one API, durable workflows, and a verification step the agents cannot edit. They can be used together.
Requires Node 22+ and at least one engine CLI installed and logged in (claude, codex, agy, grok or opencode).
npm install -g @enderfga/claw-orchestrator
clawo serve & # local runtime + dashboard on 127.0.0.1:18796
clawo solve "The test fails. Fix price.js." --engine codex \
--check "npm test" --check "node ../holdout/price.spec.mjs" --wait
clawo verify <runId> # each check, why it failed, the files that changed
clawo runs --since 1h # every turn on every engine: model, tokens, cost, verdict
clawo fanout "How would you speed up this test suite?" --engines claude,codex,grok --synthesize --wait
clawo goal --objective-file GOAL.md --check "npm run bench:check" --check-timeout 120 --wait
The server writes an access token to ~/.openclaw/server-token and the CLI reads it from there. To sign in the
browser once, open http://127.0.0.1:18796/login?token=<token>&redirect=/dash.
| For | Start here | |
|---|---|---|
| CLI and dashboard | Terminals and scripts | clawo serve, then cli.md |
| MCP server | Claude Code, Claude Desktop, Cursor, Cline, Continue, Zed, Windsurf, Goose, Hermes Agent | claude mcp add clawo -- clawo-mcp, then mcp.md |
| ACP agent | Zed, JetBrains, Neovim, Emacs, the VS Code ACP extension, dsh | clawo acp, then acp.md |
| OpenAI-compatible endpoint | Any OpenAI SDK client or webchat, without changing call sites | POST /v1/chat/completions (openai-compat.md) |
| TypeScript SDK | Embedding the runtime in your own service | import { SessionManager } from '@enderfga/claw-orchestrator' (below) |
| OpenClaw plugin | Every OpenClaw agent gets all 78 tools | curl -fsSL https://raw.githubusercontent.com/Enderfga/claw-orchestrator/main/install.sh | bash |
import { SessionManager } from '@enderfga/claw-orchestrator';
const manager = new SessionManager();
await manager.startSession({ name: 'fix-tests', engine: 'claude', cwd: '/project' });
const result = await manager.sendMessage('fix-tests', 'Fix the failing tests');
From an MCP host, ask for workflow_start with template solve, a task, and a contract such as
{"checks":[{"type":"command","cmd":"npm","args":["test"]}]}. In an ACP editor, the model selector is grouped by
engine, so one dropdown switches between Claude, Codex, Antigravity and Grok models mid-session.
| Engine | CLI | Tested version |
|---|---|---|
| Claude Code | claude |
2.1.316 |
| Codex | codex |
0.166.0 |
| Antigravity | agy |
1.4.12 |
| Grok Build | grok |
1.0.70 |
| OpenCode | opencode |
1.19.5 |
| ACP agent | any | Kimi Code 2.3.1, dsh 0.2.1-rc.2 |
| Custom CLI | any | — |
An agent that serves the Agent Client Protocol on stdio runs as
engine: 'acp'; any other coding CLI that runs as a
subprocess can be wired up as a custom engine.
The versions above are what the weekly sweep last ran. scripts/sweep.ts measures each core engine's installed,
pi