Maintainer of this skill?
Automated security scan — not a certification.
General-purpose agent in one static Go binary: console TUI, ACP server for editors, OpenAI-compatible API with embedded web UI, Telegram gateway, cron scheduler, swarm relay, remote mode. Rules, skills, subagents, hooks, MCP, background tasks, long-term memory, context compaction. Any OpenAI-compatible provider, distroless-ready.
# Add to your Claude Code skills
git clone https://github.com/coddy-project/coddy-agentLast scanned: 7/22/2026
{
"issues": [
{
"file": "README.md",
"line": 99,
"type": "remote-install",
"message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://coddy.dev/install.sh | bash\"",
"severity": "low"
}
],
"status": "PASSED",
"scannedAt": "2026-07-22T06:27:22.427Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how coddy-agent compares with popular alternatives.
coddy-agent is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by coddy-project. General-purpose agent in one static Go binary: console TUI, ACP server for editors, OpenAI-compatible API with embedded web UI, Telegram gateway, cron scheduler, swarm relay, remote mode. Rules, skills, subagents, hooks, MCP, background tasks, long-term memory, context compaction. Any OpenAI-compatible provider, distroless-ready. It has 179 GitHub stars.
Yes. coddy-agent passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/coddy-project/coddy-agent" and add it to your Claude Code skills directory (see the Installation section above).
coddy-agent is primarily written in Go. It is open-source under coddy-project on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh coddy-agent against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
| Desktop (1920×1080) | Mobile (390×844) |
|---|---|
 |
 |
Coddy is a harness: the same agent core is reachable from a terminal through the console TUI, from an editor over the Agent Client Protocol, from a browser or any OpenAI client over HTTP, from Telegram through the messenger gateway, and from cron through the scheduler. Every surface shares the sessions under ~/.coddy, so a conversation started in a chat is live in the browser and can be continued in either. It runs in scratch and distroless images with a read-only root filesystem, needs no runtime, and is built for fleets of containers as much as for one laptop.
curl -fsSL https://coddy.dev/install.sh | bash
irm https://coddy.dev/install.ps1 | iex
The installer puts coddy on PATH, creates ~/.coddy/config.yaml from the release config.example.yaml when it is missing and, on Linux and macOS, installs the man page and the shell completions. Every release also publishes .deb and .rpm packages, a Homebrew cask in the tap coddy-project/homebrew-coddy-agent, archives for Linux, macOS, Windows and Android under Termux, and the image ghcr.io/coddy-project/coddy-agent for docker compose up -d. The packages and the cask recommend tmux, for a console session that outlives the terminal, without installing it. Details for each route are in Install and Docker; building from source is make build TAGS="http ui scheduler memory cli gateway swarm metrics" after git clone, see Build from source.
On macOS, Homebrew installs it from Coddy's own tap and brew upgrade follows the releases:
brew install coddy-project/coddy-agent/coddy
Then give it a model. Put a provider key into ~/.coddy/config.yaml, or export OPENAI_API_KEY and let the defaults pick it up:
providers:
- name: openai
type: openai
api_key: "${OPENAI_API_KEY}"
models:
- model: "openai/gpt-6.1-sol"
max_tokens: 1050000
reasoning_default: high
agent:
model: "openai/gpt-6.1-sol"
coddy -t checks the file and coddy --dry-run probes what it points at. Anthropic, NeuralDeep, ChatGPT sign-in through the Codex backend, a Devin account signed in through the browser (Devin), Ollama, llama.cpp and any other OpenAI-compatible server are covered in Configuration. The first five minutes on every surface are in Quickstart; upgrades are coddy update -y, which ends with the release notes of every version it skipped over (Update).
| Surface | Start it | What you get | Guide |
|---|---|---|---|
| Console | coddy |
A terminal chat with streamed tool calls, permission prompts, a model picker, !! for a local shell, coddy -c to continue, coddy -p "..." for one-shot answers, `git diff |
coddy -p "review"andcoddy -i brief.md` for piped data and long prompts |
| Web UI and HTTP API | coddy serve |
The embedded single-page app on http://127.0.0.1:12345/, OpenAI-compatible /v1/* endpoints and the /coddy REST surface, Swagger at /docs/ |
Web UI, HTTP API, video |
| Editors | coddy acp |
Zed, VS Code, Obsidian and scripts as ACP clients, with Coddy's modes, models, permissions and skills in the editor's composer | Editors, Zed video, VS Code video |
| Telegram | coddy serve with gateways.telegram.enable |
A bot with per-user sessions, access levels and group isolation; the same chat is live in the web UI | Telegram gateway |
| Pachca | coddy serve with gateways.pachca.enable |
A Pachca (Пачка) integration bot for direct chats, groups and threads; reads its events history, so no public address is needed | Pachca gateway |
| Scheduler | coddy serve with scheduler.enable |
Cron jobs as Markdown files, each run a session of its own | Scheduler |
| Swarm | coddy serve with swarm.enable |
A relay that lists and reaches many Coddy nodes, including ones that can only dial out | Swarm, video |
| Metrics | coddy serve with metrics.enable |
A Prometheus exporter on a port of its own: provider calls and tokens, turns, background tasks and the session disk, with alert rules for the common failures | Monitoring |
| Remote | coddy --remote host:port |
The console, an editor or the browser driving a coddy serve on another machine |
Remote mode |
coddy serve runs whatever config.yaml enables in one process. On Linux, coddy serve install runs it as a systemd user service of your account, working in ~/Coddy (coddy serve uninstall removes it); elsewhere coddy serve --daemon keeps it running in the background with status, stop and restart (coddy serve and the daemon).
agent with every tool, plan for planning and text files, ask for read-only research, switched from any surface (Operating modes)..coddy/rules, .agents/rules, .cursor/rules, .claude/rules and .codex/rules that holds rules, so a mirror kept for another agent is not loaded twice, and nested AGENTS.md are picked up as the agent works without moving the cached system prompt; your own ~/.coddy/AGENTS.md, ~/.coddy/DESIGN.md and ~/.coddy/rules apply in every workspace (Rules and instructions).SKILL.md packs become slash commands. Six ship inside the binary and are there on the first run - /rpa-init, /rpa-feat, /rpa-bugfix, /rpa-gen-rules, /configure-coddy and /crossreview (a quorum code review over external code-agent CLIs and internal reviewers) - and more install from skills.sh, the skillsbd registry or any repository (Skills).spawn_agent delegates a bounded task to a child with its own context and session, tools and permissions only narrowing; a child rides out a dropped provider connection, and resume continues a run that stopped short in its own session instead of starting over (Subagents)./goal <objective> keeps the agent working until a second model, judging the tool results rather than the agent's claims, finds the objective met and a read-only verifier confirms it in the files; a watchdog cuts stalled or looping turns, and the goal shows in the web UI and the console (Session goal and supervisor).worktree_open moves the active session into the worktree of a branch, creating one from the fresh default branch (or stacked on the current commit) when there is none, worktree_list shows where every worktree stands, and worktree_exit brings the session back to the main checkout, removing a worktree that holds nothing of its own (uncommitted work an explicit removal discards is kept as a snapshot); a new worktree gets the ignored files .worktreeinclude names, and a subagent can work in a worktree of its own; /worktree does the same for the operator, and the web UI shows the branch under the main project, with the way back on the plate (Git worktrees).hooks.json shape, able to deny, approve or rewrite a tool call (Hooks).mcp.json fil