by devilcoolyue
Self-hosted browser workspace for Claude Code and Codex CLI, with Docker sessions, terminal, files, Git, and usage tracking.
# Add to your Claude Code skills
git clone https://github.com/devilcoolyue/agentboxGuides for using cli tools skills like agentbox.
Last scanned: 10/3/2026
{
"issues": [
{
"file": "README.md",
"line": 107,
"type": "remote-install",
"message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://raw.githubusercontent.com/devilcoolyue/agentbox/main/install.\"",
"severity": "low"
},
{
"file": "README.md",
"line": 258,
"type": "dangerous-command",
"message": "Dangerous command (disables permission prompts): \"bypassPermissions\"",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-10-03T09:41:44.039Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how agentbox compares with popular alternatives.
agentbox is an open-source cli tools skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by devilcoolyue. Self-hosted browser workspace for Claude Code and Codex CLI, with Docker sessions, terminal, files, Git, and usage tracking. It has 133 GitHub stars.
Yes. agentbox passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/devilcoolyue/agentbox" and add it to your Claude Code skills directory (see the Installation section above).
agentbox is primarily written in Go. It is open-source under devilcoolyue on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other CLI Tools skills you can browse and compare side by side. Open the CLI Tools category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh agentbox against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
See comparison
Your AI coding workspace. On your server. In your browser.
Run Claude Code and Codex CLI on a Linux server you control. Go from a task to reviewed code with chat, terminal, files, and Git in one place.
English | 简体中文
Quick start · Watch the tour · Screenshots · Architecture · Documentation
Set up your coding environment once on your server, then pick up your project from a laptop, desktop, or phone. Your local machine only needs a browser; the agents and project tools run in Docker on the server.
| What you need | What agentbox provides |
|---|---|
| Pick up where you left off | Persistent project files, home configuration, and chat history across browser sessions |
| Work with familiar agents | Claude Code and Codex CLI, with streaming Web chat and their original interactive terminal interfaces |
| Finish the task in one place | Upload or clone → chat → run and preview → review diffs → commit, push, or download |
| Reuse your setup | User-level shared files, layered home templates, Claude skills, and MCP configuration with workspace overrides |
| Give a trusted team access | Central account pools, per-user account scopes, usage records, historical prices, and optional credit limits |
| Connect to your own services | Optional abox-link tunnel to allowlisted repositories, databases, and other private-network services |
You bring the server and your own Claude / Codex subscription, API key, or compatible relay account. Agentbox provides the workspace and management layer; model usage follows your provider's terms and pricing.
Chat → terminal → Git review → previews. The GIF introduces the core workspace; the 34-second MP4 also visits skills, MCP, usage, and private-network access.
Screenshots use 2× pixel density. All media is captured from the actual browser UI with synthetic projects, conversations, command output, and usage records. These are interface demonstrations, not live model benchmarks. The media was captured before multilingual support was added and shows the Chinese interface; v0.1.10 also supports Traditional Chinese and English.
The Web console and abox-link v0.1.10 support 简体中文 · 繁體中文 · English. Choose a language on the login page, in the Web console’s user menu, or at the top of the abox-link panel. The default follows your browser/system language, falling back to English when unsupported; explicit choices are saved on the current device.
Switch immediately while keeping drafts and terminal connections. User content, model responses, terminal output, and server diagnostics remain in their original language. Language behavior and desktop availability →
curl -fsSL https://raw.githubusercontent.com/devilcoolyue/agentbox/main/install.sh | sudo bash
The installer downloads and verifies the server package, builds the workspace image, and starts agentbox.service. No Go or Node.js installation is needed on the server. The first image build takes a few minutes and needs access to container registries, Debian repositories, and npm.
http://YOUR_SERVER_IP:8180 and use boxadmin with the generated password printed by the installer. Allow TCP 8180 through your firewall if connecting directly; configure HTTPS for ongoing public access.-s -- --version v0.1.11 to pin it, or -s -- --listen 127.0.0.1:8180 to bind only to localhost.Configuration lives in /etc/agentbox, data in /var/lib/agentbox. Each workspace defaults to a 2 GiB memory limit and 2 CPUs; size your server for the number of concurrent workspaces. See installation and recovery for all options.
The workspace uses a one-time, three-step tour with Skip and replay under More → Quick tour. It does not reserve workspace space. Workspace filters share one row, and draft settings live in the composer toolbar.
v0.1.11 adds a role-based first-use guide: administrators check the environment, connect accounts and review defaults; users see their authorized accounts. Workspace creation refreshes access and disables submission when no account is available. See M2 progress; this release supports empty, upload and Git project creation with persistent receipts. See project import and recovery; creation receipts were introduced in schema 11, and this release also includes schema 12 chat receipts.
The UI also confirms workspace configuration and offers an editable first-task example. About and updates distinguishes server, Agent image and desktop updates, including version observations and restart scope; see update components. Desktop UI changes require a separate desktop release.
v0.1.11 adds isolated recovery of unsent chat drafts and attachment checks. It also introduces server schema 12 and a versioned chat receipt API connected to the existing runner, with ID deduplication, status queries and recovery after restart. The browser now saves a frozen outgoing copy before sending, queries the original ID after a lost acknowledgement, and provides explicit result review. Unsent drafts stay separate. Local saving can be disabled; older servers retain the legacy send path with a capability notice. Back up before upgrading; older schema 10/11 binaries cannot open schema 12. See draft recovery and M3 progress.
系统设置 → 账号池). Choose Claude or Codex and connect a subscription or API / relay account. Account setup →/workspace.On Linux with Docker, Git, and the Go toolchain in go.mod:
git clone https://github.com/devilcoolyue/agentbox.git
cd agentbox
go build -o agentbox ./cmd/agentbox
./scripts/build-image.sh
openssl rand -hex 24
Save the following as config.json, replacing the password placeholder with the generated random value:
{
"listen": "127.0.0.1:8180",
"auth_token": "CHANGE_ME_TO_A_LONG_RANDOM_TOKEN",
"data_dir": "data",
"agent_image": "agentbox-agent:latest",
"accounts": [],
"proxies": []
}
sudo ./agentbox -config config.json
Open http://127.0.0.1:8180 on the server, or run ssh -N -L 8180:127.0.0.1:8180 user@your-server on your computer and open that address locally. Sign in as boxadmin with the configured auth_token. After first startup the password is stored in the database; editing auth_token does not reset it.
Forgot the administrator password? Starting with v0.1.11, use agentbox admin-reset-password --config /path/to/config.json --user boxadmin: stop the service and verify a backup first, then enter the new password twice in a terminal. It revokes that administrator’s login tokens and preserves workspace and billing data. See the recovery procedure; v0.1.10 and earlier release binaries do not include the command.
The server needs Docker access and permission to set mounted directory ownership to 1000:1000. After stopping this foreground instance, run sudo ./deploy/install.sh and sudo ./deploy/deploy.sh for a source-based systemd installation. See deployment,