# Add to your Claude Code skills
git clone https://github.com/gglucass/headroom-desktopGuides for using ai agents skills like headroom-desktop.
Last scanned: 6/26/2026
{
"issues": [
{
"type": "npm-audit",
"message": "undici: undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-06-26T07:51:59.337Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}headroom-desktop is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by gglucass. Unlock 2x more Claude Code and Codex usage. It has 232 GitHub stars.
headroom-desktop returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/gglucass/headroom-desktop" and add it to your Claude Code skills directory (see the Installation section above).
headroom-desktop is primarily written in Rust. It is open-source under gglucass on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh headroom-desktop against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
Headroom is a macOS menu bar app that cuts Claude Code and OpenAI Codex token costs by ~50% — without changing how you code. It runs a local-first optimization pipeline that reversibly compresses the tool output, logs, and boilerplate that bloat every prompt, so the AI plan you already pay for stretches about 2x further. Nothing the model needs is lost — it can pull the original content back on demand.
Pricing: Headroom has a free tier and paid plans — see pricing. The desktop shell in this repo is MIT-licensed; account features and paid plans are opt-in.
Stable: macOS 14 (Sonoma) or later on Apple Silicon (M1 or later)
Preview: Linux x86_64 builds are experimental and currently support the core proxy flow only.
.dmg file (for example Headroom_0.2.9.dmg)Headroom is signed and notarized, so macOS will open it without Gatekeeper warnings.
Linux preview artifacts are published on the same release page. Today they are best treated as a preview for the core Headroom proxy, Claude Code routing, and RTK flow. Headroom Learn is not supported yet on Linux preview builds.

Note: Headroom supports Claude Code and Codex (CLI and desktop app). Support for additional clients is planned.
Headroom is a local-first desktop tray app that routes your coding clients through a local optimization pipeline. The stable target is macOS; Linux builds are currently experimental. It installs and manages a self-contained Python runtime, bundles proven token-saving tools, and surfaces savings analytics — all without touching your system environment.
Headroom sits in your menu bar and does three things:
pip install --user pollution.headroom for prompt optimization, rtk for CLI output compression) between your client and the LLM API.The app ships as a slim Tauri shell (~a few MB). Heavy Python components are fetched on first launch and kept in ~/Library/Application Support/Headroom.
Full disclosure of every location Headroom writes to, so you can decide before installing. The install screen in the app shows the same list, and the uninstall flow reverses every item.
On install:
~/Library/Application Support/Headroom. Your system Python is untouched.PreToolUse hook to ~/.claude/settings.json and a script at ~/.claude/hooks/headroom-rtk-rewrite.sh so Claude Code routes through Headroom. A timestamped backup of settings.json is written before any edit.~/.codex/config.toml and an OPENAI_BASE_URL export to your managed shell block so the Codex CLI and desktop app route through the local proxy. The TOML block is fenced with # >>> headroom:... >>> markers, a backup is written before any edit, and existing Codex threads are retagged to the managed provider.~/Library/Application Support/Headroom for logs, caches, and per-client setup state.com.extraheadroom.headroom.~/Library/LaunchAgents/. Never added otherwise..zshrc, .zprofile, etc.) that prepends Headroom's managed bin directory (under ~/Library/Application Support/Headroom) to PATH so rtk is available in your terminals. Every managed block is fenced with # >>> headroom:... >>> markers and can be removed by hand if you prefer.On quit (or pause): Headroom tears down everything that would intercept your clients — the Claude Code hook entry and hook script, the ANTHROPIC_BASE_URL and OPENAI_BASE_URL redirects, the Codex provider block in ~/.codex/config.toml, and the managed shell blocks. Codex threads are retagged back to their native provider. Claude Code and Codex behave exactly as they did before Headroom was launched. The Python runtime, logs, and keychain entries stay on disk so the next launch is fast.
On uninstall (Settings → Uninstall Headroom): Everything listed above is removed, including the LaunchAgent plist, ~/Library/Preferences/com.extraheadroom.headroom*, ~/Library/Caches/com.extraheadroom.headroom, and the keychain entries. The uninstall dialog in the app shows the full list before you confirm.
If the proxy dies unexpectedly, a watchdog restarts it; after repeated failures it auto-pauses and strips interception so your clients keep working without intervention.
| Tool | What it does | Default |
|---|---|---|
| headroom | Prompt optimization pipeline (Python) | Required |
| rtk | Rewrites Claude Code bash commands to strip noise before it reaches the context window | Opt-in add-on |
| markitdown | Converts PDFs and Office documents to clean Markdown before the agent reads them | Opt-in add-on |
| ponytail | Nudges the agent toward leaner, less over-engineered code | Opt-in add-on |
Tool inclusion policy: only tools that run entirely locally, inside Headroom-managed storage, with a stable CLI surface make it in. No cloud dependencies, no host profile mutations. See research/tool-compatibility-matrix.md.
Numbers from the headroom open-source library that powers the optimization pipeline, summarized from the current published benchmarks page.
| Benchmark | What it tests | Result |
|---|---|---|
| Scrapinghub article extraction | Extract article bodies from 181 HTML pages while removing boilerplate | 0.919 F1, 98.2% recall, 94.9% compression |
| SmartCrusher JSON compression | Find a critical error in 100 production log entries after compression | 4/4 correct, 87.6% compression |
| QA accuracy preservation | Ask the same questions on raw HTML vs. extracted content | 0.87 F1 vs. 0.85 baseline, 62% exact match vs. 60% |
| Multi-tool agent test | 4-tool agent investigating a memory leak with compressed tool output | 6,100 vs. 15,662 tokens sent, 76.3% compression, same findings |
| Benchmark | Setup | Accuracy | Compression |
|---|---|---|---|
| HTML extraction | Scrapinghub article extraction benchmark, 181 pages | 0.919 F1, 0.879 precision, 0.982 recall | 94.9% |
| JSON compression | 100 production log entries, critical error at position 67 | 4/4 correct answers | 87.6% |
| QA preservation | SQuAD v2 + HotpotQA on raw HTML vs. extracted content | +0.02 F1, +2% exact match vs. raw HTML | — |
| Multi-tool agent test | Agno agent with 4 tools investigating a memory leak | Same findings as baseline | 76.3% |
| Content type | Typical savings | Notes |
|---|---|---|
| JSON arrays (search results, API responses, DB rows) | 86–100% | Primary use case |
| Structured logs | 82–95% | Errors and anomalies always preserved |
| Agentic conversations (25–50 turns) | 56–81% | |
| Plain text / documentation | 43–46% | Cost savings only, adds latency |
| Source code | Mostly passthrough | Code in active messages is protected by default — see limitations |
analyze, debug, fix, etc.) is never compressed. The savings from code come from dropping old, no-longer-relevant messages — not from stripping function bodies.Full methodology and reproducible benchmarks: chopratejas/headroom benchmarks · limitations
rtk PATH addition, which is reversible).