Maintainer of this skill?
Automated security scan — not a certification.
by Anil-matcha
Open-source, self-hosted alternative to Claude Duet: AI coworkers (named agents) with instructions, memory, routines, their own isolated computer, and your approval before they act. Also an alternative to OpenAI Dots, Meta Muse, Grok Bot, Manus Cue and ChatGPT agent.
# Add to your Claude Code skills
git clone https://github.com/Anil-matcha/open-duetLast scanned: 10/22/2026
{
"issues": [
{
"file": "README.md",
"line": 155,
"type": "secret-exfiltration",
"message": "Instruction appears to send credentials/secrets to an external endpoint",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-10-22T09:10:51.657Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how open-duet compares with popular alternatives.
open-duet is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Anil-matcha. Open-source, self-hosted alternative to Claude Duet: AI coworkers (named agents) with instructions, memory, routines, their own isolated computer, and your approval before they act. Also an alternative to OpenAI Dots, Meta Muse, Grok Bot, Manus Cue and ChatGPT agent. It has 5,934 GitHub stars.
Yes. open-duet passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/Anil-matcha/open-duet" and add it to your Claude Code skills directory (see the Installation section above).
open-duet is primarily written in Python. It is open-source under Anil-matcha on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh open-duet against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
Open Duet is an open-source, self-hosted workspace for AI coworkers: named agents that each have a job, instructions, memory, their own workspace and isolated computer, a schedule, and a human approval step before they do anything risky. You chat with them in a browser, a desktop app or Telegram, hand them recurring routines, and keep their data and credentials on your own machine or server. It is an open alternative to Claude Duet and to other paid AI agent products such as OpenAI Dots, Meta Muse, Grok Bot, Instinct, Manus Cue, Claude Cowork, and ChatGPT agent, and is not yet a feature-for-feature replacement for them.
An agent can be anything you would hand work to: a researcher, a support triager, a reporting assistant, a developer. Coding is one thing agents do, not what Open Duet is. Agents run on an engine you already have signed in (Claude, Codex, any Agent Client Protocol CLI, or an OpenAI-compatible endpoint). Teams of agents that delegate to each other, rooms, and connectors to other apps are planned, not built; see docs/ROADMAP.md.
Status: Active development. See Known limitations before running it for others.
MEMORY.md plus topic notes) that load into its conversations, with recall across conversations and undo.python -m app.server, a Docker image and compose file, nginx and Caddy overlays, doctor, backup and restore. See docs/SELF-HOSTING.md.Paid AI coworker products keep your agents, memory and credentials on someone else's servers. Open Duet gives individuals and small teams the same idea in a form they can inspect and run themselves, with visible approval steps, local control over the app and its data, and no lock-in to one model provider. Read Known limitations before running it for others.
Pick how you want to run it:
| Desktop app | Server you own | Development checkout | |
|---|---|---|---|
| For | one person on a laptop or desktop | agents and routines that keep working with your laptop closed, reachable from a phone | working on Open Duet itself |
| Needs | Node.js 22+, uv, one signed-in engine | Linux, a domain, Docker or Node.js and uv, one signed-in engine | the same, plus Docker for PostgreSQL (or SQLite) |
| Status | experimental, from a source checkout or unsigned installers | experimental | |
| Guide | below | docs/SELF-HOSTING.md | Development setup |
An engine is the model program your agents run on. You need at least one ready: a signed-in Claude Code or Codex CLI, an Agent Client Protocol CLI, or an OpenAI-compatible endpoint. Settings → Engines shows what is ready and why not.
git clone https://github.com/Anil-matcha/open-duet
cd open-duet/desktop
npm run app
npm run app sets up the first time, builds the page when needed, and opens Open Duet. It needs no .env, keeps its own encryption key in the operating system's secret storage, and uses a local SQLite database. On first start a setup flow in Settings detects your engines, asks you to pick a workspace folder, explains the approval modes and can create a starter agent. Details and troubleshooting: docs/SETUP.md. Tagged releases also build unsigned installers; they are unverified on a clean machine apart from a Windows smoke test, and there is no auto-update.
One owner, one data folder, HTTPS through nginx or Caddy, and engines signed in on the server. python -m app.server, a Docker image and compose file, doctor, backup and restore are included. Follow docs/SELF-HOSTING.md, and read what has and has not been checked there before relying on it.
A first session in the web app or the desktop app (the Chat page):
MEMORY.md and topic notes) that load into its conversations. Edit them under Agents → Notes. See docs/MEMORY.md.Agents need LOCAL_EXECUTION_ENABLED=true on a server or development setup (the desktop app sets it itself). File edits and commands also need LOCAL_TOOLS_ENABLED=true, and every command still asks you first.
Open Duet started as a Telegram bot and web page that run tasks in hosted Boat sandboxes. That flow still works, is independent of agents, and needs the Boat key and Telegram setup described in Development setup.
DATABASE_BACKEND below)scripts/dev.shBOAT_ORG_ID below) — otherwise sandbox creation bills
the personal account and returns 402 Payment Required.