Floe — a native iOS/iPadOS AI agent workspace for iPhone and iPad, built for private bring-your-own-key workflows.
# Add to your Claude Code skills
git clone https://github.com/JiangNanGenius/floe-agentLast scanned: 9/24/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-09-24T09:01:40.319Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how floe-agent compares with popular alternatives.
floe-agent is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by JiangNanGenius. Floe — a native iOS/iPadOS AI agent workspace for iPhone and iPad, built for private bring-your-own-key workflows. It has 227 GitHub stars.
Yes. floe-agent passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/JiangNanGenius/floe-agent" and add it to your Claude Code skills directory (see the Installation section above).
floe-agent is primarily written in Swift. It is open-source under JiangNanGenius on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh floe-agent against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.

Floe Agent turns a model conversation into a durable task. Each message continues the same task, while every model execution becomes a separate run with its own progress, tool evidence, approvals, checkpoints, and recovery state. A task can use an app-managed private workspace or an explicitly selected project workspace.
Detailed user manual · Website documentation · Version status
The last recorded internal delivery is 1.7.14 (255). 1.7.18 (259) is an unreleased candidate undergoing full CI. Current TestFlight approval, expiration and group availability must be checked with Apple; historical submissions do not deliver this candidate. See the release archive.
Notes (手记) is a separate workspace above Creative mode, with its own durable content and undo history while sharing Floe models, tools and permissions. PDF/image annotation, illustrated mind maps with document windows, native Office editing, selection questions and editable archives are available; full Office layout fidelity and physical-device acceptance remain tracked in the implementation status. The whole app prioritizes iPadOS 27, also validates iPhone, and keeps version 26 compatible.
Mind maps reflow as topics, images and branches change, preserve zoom during editing, and fit independent PDF windows. Notes supports Trash recovery and confirmed permanent deletion with deferred collection that protects shared files and undo history.
Voice input, video automatic captions and Agent file transcription now share on-demand multilingual Whisper Small with Apple recognition fallback. Timed exports support SRT, VTT and JSON. Home, conversations and Canvas can explicitly select Notes material and revoke access. Installing speech resources does not establish bilingual recognition quality. See the implementation and evidence record for remaining work; full package/model delivery and physical-device acceptance remain incomplete.
flowchart LR
A["New task draft"] -->|"Send first message"| B["Task / conversation"]
B --> C["Run 1"]
B --> D["Run 2"]
B --> E["Run N"]
C --> F["Messages · tools · evidence"]
D --> G["Plan · goal · memory"]
E --> H["Checkpoint · recovery"]
B --> I["One workspace owner"]
I --> J["Private task workspace"]
I --> K["Selected project workspace"]
The app normally opens directly into New Task. Sending the first message creates the task, workspace ownership, initial run, user message, attachments, and task policy atomically. Later messages create new runs inside the same task, so context does not fragment into unrelated jobs.
Floe Agent 1.7.14 (build 255) is verified available to the Floe QA internal TestFlight group: Apple reports VALID, unexpired, audience APP_STORE_ELIGIBLE and IN_BETA_TESTING for immutable tag v1.7.14 (verification). See the Build 255 delivery record; physical iPad behavior remains to be accepted.
GitHub prereleases include an unsigned IPA for advanced testers and downstream packagers:
.sha256 file from [Re