TypeScript AI agent orchestration framework with dynamic workflows. Describe the goal, not the graph: a coordinator plans the task DAG at runtime and runs it on any LLM (Claude, ChatGPT, Gemini, DeepSeek, or local models).
# Add to your Claude Code skills
git clone https://github.com/open-multi-agent/open-multi-agentGuides for using ai agents skills like open-multi-agent.
Last scanned: 7/14/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@protobufjs/utf8: protobufjs has overlong UTF-8 decoding",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@vitest/coverage-v8: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "@vitest/mocker: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Large numeric range defeats documented `max` DoS protection",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-xml-builder: fast-xml-builder allows attribute values with unwanted quotes to bypass malicious or unwanted attributes",
"severity": "high"
},
{
"type": "npm-audit",
"message": "form-data: form-data: CRLF injection in form-data via unescaped multipart field names and filenames",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono has CSS Declaration Injection via Style Object Values in JSX SSR",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "protobufjs: Arbitrary code execution in protobufjs",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vite-node: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vitest: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "high"
}
],
"status": "FAILED",
"scannedAt": "2026-07-14T06:10:16.878Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}open-multi-agent is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by open-multi-agent. TypeScript AI agent orchestration framework with dynamic workflows. Describe the goal, not the graph: a coordinator plans the task DAG at runtime and runs it on any LLM (Claude, ChatGPT, Gemini, DeepSeek, or local models). It has 6,575 GitHub stars.
open-multi-agent failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.
Clone the repository with "git clone https://github.com/open-multi-agent/open-multi-agent" and add it to your Claude Code skills directory (see the Installation section above).
open-multi-agent is primarily written in TypeScript. It is open-source under open-multi-agent on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh open-multi-agent against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
open-multi-agent is an AI agent orchestration framework for TypeScript backends that drops into any Node.js app.
Your engineers describe the goal, not the graph.
Graph-first frameworks make you wire every node and edge up front. OMA runs a dynamic workflow: a coordinator turns the goal into a task DAG at runtime, parallelizes independent tasks, and synthesizes the result. That plan is emitted as data for a deterministic scheduler to run, so it stays inspectable and replayable. It is the same bet Anthropic made with Claude Code's dynamic workflows; OMA offers it as an open library that runs on any provider, in your own backend.
Lightweight core: the engine plus Anthropic, OpenAI, and any OpenAI-compatible endpoint work out of the box; Gemini, Bedrock, MCP, and the Vercel AI SDK bridge are opt-in peer dependencies.
One command scaffolds a project and starts a multi-agent DAG:
npm create oma-app@latest
Answer one prompt; the first run shows the coordinator turn one goal into a multi-agent DAG and opens a dashboard of the run (OpenAI or any OpenAI-compatible provider). To add the library to your own project:
npm install @open-multi-agent/core
The full quickstart, the three ways to run, provider setup, the production checklist, and the complete API reference live on the package page:
Other ways to run: clone the repo and run any example with npx tsx packages/core/examples/basics/team-collaboration.ts, or embed OMA in a real backend with the Express and Next.js apps. To skip local setup, the Next.js starter deploys to Vercel in one click; local models via Ollama need no API key.
open-multi-agent launched 2026-04-01 under MIT. Known users and integrations to date:
Built with OMA
bash, file_*, grep) directly inside a Docker runtime. Confirmed production use.defineTool, and adds a custom ContextStrategy for token-aware PR-diff compression. Public code on @open-multi-agent/core.runAgent / runTasks / runTeam with a custom RunTeamOptions coordinator, paired with DeepSeek. Public code on @open-multi-agent/core.Integrations
runTeam workflow template.Using open-multi-agent in production or a side project? Open a discussion and we will list it here. For a deep integration, see the Featured partner program.
Most TypeScript teams choosing a multi-agent layer are weighing OMA against LangGraph JS, Mastra, CrewAI, and the Vercel AI SDK. The short version: OMA is goal-driven, dynamic planning instead of rigid hand-wired graphs. Hand its Coordinator a goal and it builds the task DAG at runtime.
That comparison includes Claude Code's own dynamic workflows, and OMA is composable with it rather than only competing: over ACP, an OMA team can run Claude Code itself as one of its agents.
Full head-to-head on each on the package page: How is this different?
This is a monorepo. The published package is @open-multi-agent/core, and it lives in packages/core/ — the source of truth for the library, its tests, examples, and the npm package page.
open-multi-agent/
├── packages/
│ └── core/ # @open-multi-agent/core — the published library
│ ├── src/ # framework source
│ ├── tests/ # vitest suite
│ └── examples/ # runnable examples (npx tsx packages/core/examples/<path>.ts)
└── docs/ # subsystem documentation
Build, lint, and test orchestrate across the workspace from the repo root:
npm install # install all workspaces
npm run build # compile packages/core
npm run lint # type-check
npm test # run the test suite
onProgress events, onTrace spans, and the post-run dashboard.MemoryStore backends.MemoryStore; survive crashes and restarts.oma binary for shell and CI.runConsensus proposer→judge primitive, the per-task verify hook, and the budget invariant.