by SidhuK
📝 Glyph is a private desktop workspace for notes, documents, and ideas, with Markdown editing and built-in AI tools.
# Add to your Claude Code skills
git clone https://github.com/SidhuK/GlyphLast scanned: 6/21/2026
{
"issues": [
{
"type": "npm-audit",
"message": "esbuild: esbuild allows arbitrary file read when running the development server on Windows",
"severity": "low"
}
],
"status": "PASSED",
"scannedAt": "2026-06-21T08:34:01.860Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how Glyph compares with popular alternatives.
Glyph is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by SidhuK. 📝 Glyph is a private desktop workspace for notes, documents, and ideas, with Markdown editing and built-in AI tools. It has 175 GitHub stars.
Yes. Glyph passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/SidhuK/Glyph" and add it to your Claude Code skills directory (see the Installation section above).
Glyph is primarily written in TypeScript. It is open-source under SidhuK on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh Glyph against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Glyph is an offline-first desktop note-taking application. It combines a Tauri 2 shell with a React 19 / TypeScript / Vite 8 frontend and a Rust backend. Notes live on disk as Markdown files with per-space metadata in a .glyph/ directory; a derived SQLite search index lives in app support and rebuilds from the notes. No cloud sync. No server.

| Dependency | Version |
|---|---|
| Node.js | 24.21.0 |
| Vite+ | 0.3.1 (curl -fsSL https://vite.plus | bash) |
| pnpm | ≥ 10 (managed by Vite+) |
| Rust | stable (latest) |
| Xcode CLT | required for macOS native compilation |
| macOS | primary target — full Tauri app dev requires macOS |
# Install frontend dependencies
vp install
# Development — frontend only (Vite+ on :1420)
vp dev
# Development — full Tauri app (compiles Rust backend + launches Vite+)
vp run tauri dev
# Equivalent: pnpm tauri dev
# Production frontend build
vp build
# Production macOS app build
vp run tauri build
# Equivalent: pnpm tauri build
# Format, lint, and type-check
vp check # check only
vp check --fix # auto-fix
vp fmt # format only
# Tests
vp test # all tests
vp test src/lib/diff.test.ts # single file
vp test -t "test name" # single test by name
# Rust checks
cd src-tauri && cargo check # typecheck
cd src-tauri && cargo clippy # lint
vp check && vp test && vp build && cd src-tauri && cargo check
Frontend: React 19, TipTap 3, TypeScript, Vite+, Tailwind 4, Radix UI (via shadcn/ui), Motion 12, TanStack Table, cmdk, Zod 4, date-fns, Mermaid 11, highlight.js/lowlight, react-resizable-panels, Sonner, react-hook-form
Backend: Tauri 2 (macos-private-api), Rust, rig-core 0.24, rusqlite 0.31 (bundled), notify 6, reqwest 0.12 (rustls), tokio, serde/serde_json/serde_yaml, chrono, uuid, sha2, window-vibrancy, core-text (macOS)
Tooling: Vite+, Oxlint, Oxfmt, Vitest 4, Tauri CLI 2, pnpm 10
any — use unknown + narrowing.invoke() from src/lib/tauri.ts.io_atomic, safe paths via paths::join_under(), SSRF checks via net.rs.Glyph's source is available under the GNU Affero General Public License v3.0. Official release binaries include a 7-day trial with Gumroad license activation.
See CONTRIBUTING.md for development setup, project conventions, and pull request guidance.
macOS only. Windows and Linux are not actively supported. See CONTRIBUTING.md.