Maintainer of this skill?
by oratis
Open-source AI Personal Assistant for planning, writing and personal knowledge. Use LISA Cloud or connect your own Mac.
# Add to your Claude Code skills
git clone https://github.com/oratis/LISALast scanned: 7/17/2026
{
"issues": [
{
"type": "npm-audit",
"message": "esbuild: esbuild allows arbitrary file read when running the development server on Windows",
"severity": "low"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono has CSS Declaration Injection via Style Object Values in JSX SSR",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "protobufjs: protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion",
"severity": "high"
},
{
"type": "npm-audit",
"message": "qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "undici: undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-07-17T06:14:36.163Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how LISA compares with popular alternatives.
LISA is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by oratis. Open-source AI Personal Assistant for planning, writing and personal knowledge. Use LISA Cloud or connect your own Mac. It has 176 GitHub stars.
LISA returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/oratis/LISA" and add it to your Claude Code skills directory (see the Installation section above).
LISA is primarily written in TypeScript. It is open-source under oratis on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh LISA against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
English ｜ 中文
An open-source AI Personal Assistant for planning, writing and personal knowledge. Plan a day, draft a message, build a personal knowledge base, or coordinate coding agents from your Mac. Use LISA Cloud for hosted chat, or run your own instance with your choice of model.
Website · Guide · Latest release · Roadmap
| Entry point | What you get | Requirements |
|---|---|---|
| Mac app | Web workspace, menu-bar Island, local tools and agent controls | Download the signed, notarized Lisa-Suite.dmg from Releases; Node and the backend are bundled |
| CLI / self-hosted web | Local assistant, configurable providers, knowledge, integrations and development tools | Node 22.19+ and a provider key or local model |
| LISA Cloud | Account-based chat, memory and knowledge tools, without setting up a Mac | Sign in; usage allowance and optional credits apply |
| Lisa Pocket (iOS) | Cloud chat or access to your reachable Mac; separate saved connections | Native app has been resubmitted for App Store review; not yet publicly approved |
Cloud and Mac are separate instances: their histories, memories and credentials do not automatically sync. Local tools need your Mac to be running and reachable. Cloud does not expose your Mac's shell, mail, coding agents or host-level push services.
For the Mac app, download Lisa-Suite.dmg from the latest release. For the CLI, choose one install command:
brew install oratis/tap/lisa
# or
npm install -g @oratis/lisa
Configure a model, then start Lisa:
mkdir -p ~/.lisa
# Add your own key to ~/.lisa/config.env, for example:
# ANTHROPIC_API_KEY=your-key
lisa # terminal chat; first launch creates Lisa's identity
lisa serve --web # web workspace at http://localhost:5757
Anthropic, OpenAI, Gemini, OpenAI-compatible services and local models are supported. See providers for keys, model selection and Ollama / LM Studio setup. Coding work can also use supported CLI subscriptions through coding plans.
main adds durable goals, routines and local watchers, with saved runs, cancellation and recovery. Tasks drafted in chat stay off until you enable them. Hosted tasks remain off by default; task side effects without an approval integration are denied.LISA's SOUL is a set of persistent files for identity, purpose, constitution and values. DESIRES guide autonomous work; HEARTBEAT and REVE provide scheduled work and reflection. These are software mechanisms for continuity and behavior, not a claim of consciousness.
Local data lives under ~/.lisa by default. Choosing a remote model sends relevant context to that provider; local storage does not mean local-only inference. Lisa Pocket discloses recipients before AI chat and supports withdrawing permission. See the privacy policy and security policy.
On current main, Warden adds deterministic action decisions, scoped grants, an approval inbox and audit records. It is opt-in for web chat:
# Warden ships in v0.28.1 and later.
lisa serve --web --approval warden
lisa approvals list
Warden does not cover every execution surface and does not replace an OS sandbox. Credential handles and inbound-mail filtering provide additional building blocks; they are not a complete cloud connector platform. Read the design and limits and threat model.
The merged reach-out gate applies source controls, quiet hours, deduplication and budgets to integrated proactive senders. Approval and critical notices have special delivery rules; cloud APNs and a cross-device relay remain future work. See the reach-out policy.
The latest tagged package is v0.28.1 (release notes). Current main may include later work; a merged feature is not proof that it has been deployed to Cloud or released in a native binary.
| Workstream | Status on 2026-10-07 |
|---|---|
| Personal-assistant entry, Cloud/Mac isolation, streaming/history fixes | Merged; native and production evidence recorded in the execution log |
| Warden core / credential broker / reach-out gate | Merged to main; Warden web-chat policy requires opt-in |
| Durable goals, routines and watchers | PR #403, merged; hosted execution remains off by default |
| Guarded cloud web search / fetch | PR #404, merged; off by default and disabled in production |
| Purpose-based model routing and cost controls | PR #407, merged; estimated run budgets are an opt-in API, not a universal spending ceiling |
| Cross-device memory, tenant-level push, calendar/mail-write connectors, computer use | Planned; not advertised as available |
| iOS App Store | Fixes for consumable-credit restore and AI disclosure resubmitted October 7 as 1.2 (1791346539); waiting for review (evidence) |
The October integration audit records per-PR fixes, validation and release gates.
Product research on Muse and other personal assistants informs the direction, with implementation boundaries documented in the Muse review, always-on research and upgrade plan. LISA is an independent project.
git clone https://github.com/oratis/LISA.git
cd LISA
npm ci
npm run build
node dist/cli.js serve --web
Before submitting a change, run the relevant checks:
npm run typecheck
npm run typecheck:client
npm test
node scripts/check-md-links.mjs
node scripts/check-readme-drift.mjs
See Contributing for the full development workflow and native build instructions in iOS / Mac.
MIT — see LICENSE. Architecture draws on pi-mono, OpenClaw, hermes-agent, Claude Code and Codex; credits.