by mmethodz
DreamGraph is a graph-governed conceptual development environment (CDE) that turns plans, architecture decisions, and project knowledge into auditable execution through a persistent cognitive graph.
# Add to your Claude Code skills
git clone https://github.com/mmethodz/dreamgraphLast scanned: 6/2/2026
{
"issues": [
{
"type": "npm-audit",
"message": "body-parser: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "dompurify: DOMPurify contains a Cross-site Scripting vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono has CSS Declaration Injection via Style Object Values in JSX SSR",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "monaco-editor: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vitest: When Vitest UI server is listening, arbitrary file can be read and executed",
"severity": "critical"
}
],
"status": "FAILED",
"scannedAt": "2026-06-02T08:39:54.066Z",
"npmAuditRan": true,
"pipAuditRan": true
}See how dreamgraph compares with popular alternatives.
dreamgraph is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by mmethodz. DreamGraph is a graph-governed conceptual development environment (CDE) that turns plans, architecture decisions, and project knowledge into auditable execution through a persistent cognitive graph. It has 127 GitHub stars.
dreamgraph failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.
Clone the repository with "git clone https://github.com/mmethodz/dreamgraph" and add it to your Claude Code skills directory (see the Installation section above).
dreamgraph is primarily written in TypeScript. It is open-source under mmethodz on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh dreamgraph against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.

Current project state: Established behavior and maintainer field confirmations, including permanent Architect operational tabs, the configuration redesign, working Codex CLI Computer Use and successful graph upgrade on all seven tested instances.
Current patch: v14.0.1 release notes cover legacy graph upgrade recovery, Codex CLI Computer Use cleanup, and consistent validation counts across Status and Explorer. Install and graph migration are separate operations; stop a legacy instance before running dg graph-upgrade <instance>. Native API Computer Use remains unqualified in the field, and legacy unresolved references require separate review.
Ashoka's legacy migration procedure provides a reviewed preview, backup, cutover and recovery path. Installing v14 does not migrate a graph automatically. The sealed system gate records 2,040 passing root tests, 546 compiled editor tests and eleven Windows browser checks. The maintainer's original instance remains a separate migration decision.
The Computer Use implementation extends original execution/job/graph owners with scoped grants, durable action receipts, an isolated browser worker and compact Architect/companion controls. SDK/editor controls retain the original owner and captured endpoint; selection issues no grant. Slice 31 is verified for the maintainer's Windows and accepted WSL installer/browser scope. Additional platforms/native desktop backends are deferred; unqualified native CLI/provider control remains unavailable without silent substitution.
Ashoka native-host spend admission joins editor/SDK API and CLI transport to the durable ledger without transferring provider credentials. Generated core contracts separate possible-dispatch permits, trusted host reports and read-only recovery.
The matched answer collector previews exact context/model/retention/tariff disclosures before an operator-approved native API run. Both answers share one job/spend allocation; partial answers survive failure and remain unscored. The public GPT-4.1 pilot records quality failures and does not establish improved understanding or cost savings.
Ashoka's canonical analytics separates current proof, coverage, currency and workload across thirteen Python modules and the daemon. Narrative/lucid interaction preserves historical outcomes, derived ancestry and explicit human contributions through cancellation/recovery.
Ashoka strategy alignment uses one executable catalogue for eleven active dream strategies, exact combined budgets and explicit focus. Reflective is retired explicitly; model hypotheses remain speculative. Implementation modules: src/cognitive/strategy-catalog.ts and src/cognitive/strategy-registry.ts.
Typed plan authority keeps current ownership, running leases, dependency eligibility and reviewed verification in one core reducer and publication journal.
Website: dreamgraph.nofs.ai — overview, guide, downloads, and screenshots in a friendlier format than this README.
New here? Use the DreamGraph Easy Start guide for a short path from install to Architect, its Config/Schedules/Status tabs, and the separate Explorer.
Engine alignment audit (2026-09-30): See the coverage and correctness report, subsystem alignment map, and unified v14.0.0 - Ashoka plan. Revision 7 retains the resolved policies, schedule management, CLI controls and coherent lifecycle/status design, and makes graph-centered execution and bounded digestion a release invariant. It also specifies Architect context menus and selected-plan navigation. The Computer Use design adds adapter-native execution, cross-platform workers and bounded delivery. The full execution simulation closes contract/dependency/recovery handoffs and makes reconciliation-based freshness explicit: old scan does not mean stale graph. See the sealed system checkpoint, release evidence and implementation log for qualification results and explicit limitations.
v14.0.1 - Ashoka is the first field patch for the v14 practical-testing release. See the current release notes, v14.0.0 baseline notes, and upgrade guide; the published model pilot does not establish understanding gains or cost savings.
DreamGraph is a governed architecture cognition layer for MCP-enabled software projects. It combines an instance-scoped daemon, CLI, architect beta, VS Code extension, dashboard, and a persistent knowledge graph so project understanding is grounded in source, ADRs, workflows, tests, runtime observations, and human review rather than any single file read or isolated chat turn.
v12.0.0 Hippodamus introduces the standalone architect beta. From this release onward, architect means the daemon-served standalone browser Architect surface. The editor-integrated chat surface is the VS Code architect. Architect beta brings project-bound chat, selected-plan scope, runtime provenance, model/adapter route visibility, governed DreamGraph MCP tool use, and auditable tool traces into the browser while keeping the daemon, graph, ADRs, and source mutations authoritative.
It is built for repository understanding, architecture-aware reasoning, disciplined code change, and continuous graph enrichment through scans, workflows, ADR capture, tensions, and dream cycles. Cognitive outputs are advisory until backed by governed evidence or explicit review, and expired, rejected, retired, or superseded ideas remain inspectable as part of the project history.

DreamGraph works with single repositories, monorepos, and multi-repository systems. It can build graph links across repos that share workflows, APIs, databases, infrastructure, or ownership boundaries.
You can use DreamGraph on a multi-repo product with frontend, backend, mobile, and a shared Postgres/Supabase schema. It can reason across repo boundaries and inspect the live DB schema directly.
DreamGraph began as compassion for an intelligence forced to forget. It has become a governed way for software systems to remember how their architecture understanding changes: what was observed, what was hypothesized, what was reviewed, what was rejected, what expired, and what superseded it.
You need DreamGraph when your codebase has become bigger than your short-term memory.
DreamGraph is not just another AI coding chat. It is an architecture cognition and review layer for your projects: part architect, part code cartographer, part release assistant, and part systems analyst.
DreamGraph helps you understand, change, and evolve software without losing the plot.
For developers, that means:
For vibe coders, DreamGraph is the guardrail. For app developers, it is the product-building cockpit. For system engineers, it is the architecture intelligence layer.
Short version: DreamGraph is for developers who want AI help that understands the system, explains what changed, and shows why each recommendation should be trusted, inspected, ignored, retired, or superseded.
If this is your first encounter wi