by h5i-dev
Auditable workspaces for AI coding agents: sandboxed worktrees, programmable multi-agent orchestration, automated security checks, up to 95% less token waste, and persistent memory.
# Add to your Claude Code skills
git clone https://github.com/h5i-dev/h5iLast scanned: 6/1/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-06-01T09:27:45.781Z",
"npmAuditRan": true,
"pipAuditRan": true
}h5i is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by h5i-dev. Auditable workspaces for AI coding agents: sandboxed worktrees, programmable multi-agent orchestration, automated security checks, up to 95% less token waste, and persistent memory. It has 470 GitHub stars.
Yes. h5i passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/h5i-dev/h5i" and add it to your Claude Code skills directory (see the Installation section above).
h5i is primarily written in Rust. It is open-source under h5i-dev on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh h5i against similar tools.
No comments yet. Be the first to share your thoughts!
h5i (pronounced high-five) gives every AI coding agent a sandboxed Git worktree, and records the prompts, commands, logs, policies, and reviews behind every change. Run one agent safely, scale to many via a conflict-free multi-agent orchestra, then merge one auditable result. It all lives in your repo, carried by Git, with no SaaS.
Two heads are better than one.
Who it's for: platform, security, and DevEx leads rolling out Claude Code and Codex who want to run teams of agents and keep review and audit defensible as agents write more of the diff.
curl -fsSL https://raw.githubusercontent.com/h5i-dev/h5i/main/install.sh | sh
Or build from source:
cargo install --git https://github.com/h5i-dev/h5i h5i-core
Initialize h5i and wire the Claude Code / Codex hooks:
h5i init
h5i hook setup --write --wrap-bash --team
git add .
git commit -m "update hooks"
Once the hooks are registered, h5i versions your human prompts and every agent context step (reads, writes, thinking) as Git objects, trimming noisy tool output along the way (for pytest, just the failures) to cut up to 95% of the tokens while keeping the raw output recoverable.
h5i recall context show # replay the captured prompts and agent context steps
Share it with h5i share push, or post an AI-usage summary (prompt quality, AI/human commit ratio, secret leaks, prompt injection, and more) to the pull request with h5i share pr post (needs the gh CLI).
h5i share push # push the h5i metadata (refs/h5i/*) to your teammates
h5i share pr post # post the AI-usage summary to the pull request (needs `gh`)
h5i gives each agent a secure, sandboxed worktree. Let it run with permissions off inside the box, then review its diff before anything lands on your branch:
h5i env create claude-env --profile agent-claude
h5i env shell claude-env
box$ claude --dangerously-skip-permissions
box$ exit
h5i env diff claude-env # review what the agent changed in the box
h5i env propose claude-env # turn the box's work into a reviewable proposal
h5i env apply claude-env # merge the reviewed changes onto your branch
You can further program flexible multi-agent workflows using ordinary control flow such as parallel execution, loops, and conditionals in Rust or Python SDK. For example, you can have Claude and Codex independently implement the same task, review and improve each other’s work, and then select the better result.
from h5i.orchestra import Conductor
async def main():
task = "implement quicksort in python with unit test"
async with Conductor(".", "fix-auth") as c:
claude = await c.hire("claude-agent", runtime="claude")
codex = await c.hire("codex-agent", runtime="codex")
# Have both agents implement the task independently and in parallel
claude_work, codex_work = await asyncio.gather(claude.work(task), codex.work(task))
await c.freeze() # Seal the round, ensuring that neither agent influenced the other beforehand
# Have each agent review the other's work
await asyncio.gather(codex.review(claude_work), claude.review(codex_work))
# Verify each submission in a fresh, neutral sandbox
await c.verify(claude_work, ["pytest", "--quiet"])
await c.verify(codex_work, ["pytest", "--quiet"])
verdict = await c.judge() # Select the smallest diff among the submissions that pass all tests
print("winner:", verdict.selected_submission)
asyncio.run(main())
Monitor the status:
h5i serve
man h5i: full command referenceh5i man > ~/.local/share/man/man1/h5i.1: install the man page (generated from the CLI), then read it with man h5i.h5i's token-reduction filters build on prior art, both Apache-2.0:
See NOTICE and assets/filters/NOTICE for full attribution.
Apache-2.0. See LICENSE.