by 0xranx
A personal context store for AI agents and assistants—reuse your existing coding agent CLI (Codex/Claude/OpenCode) with built‑in Skills/tools and a desktop GUI to capture, search, and reuse project knowledge across agents and repos.
# Add to your Claude Code skills
git clone https://github.com/0xranx/OpenContextLast scanned: 5/13/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@grpc/grpc-js: @grpc/grpc-js can allocate memory for incoming messages well above configured limits",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@platejs/media: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@protobufjs/utf8: protobufjs has overlong UTF-8 decoding",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@zilliz/milvus2-sdk-node: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "axios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF",
"severity": "high"
},
{
"type": "npm-audit",
"message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "hono: Hono vulnerable to XSS through ErrorBoundary component ",
"severity": "high"
},
{
"type": "npm-audit",
"message": "js-video-url-parser: Zod jsVideoUrlParser vulnerable to ReDoS in util.js",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "lodash: lodash vulnerable to Code Injection via `_.template` imports key names",
"severity": "high"
},
{
"type": "npm-audit",
"message": "markdown-it: markdown-it is has a Regular Expression Denial of Service (ReDoS)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Denial of Service via sequential optional groups",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "protobufjs: Arbitrary code execution in protobufjs",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
"severity": "low"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "undici: Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client",
"severity": "high"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "medium"
}
],
"status": "FAILED",
"scannedAt": "2026-05-13T06:48:04.076Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
When you use an AI assistant to build things, context gets lost (across days, repos, chats). You end up re-explaining background, repeating decisions, and sometimes the assistant continues with the wrong assumptions. Most tools stop at storage and don't plug into the coding agent you already use.
OpenContext is a lightweight personal context / knowledge store for AI assistants (Agents) and coding tools like Cursor / Claude Code / Codex. It reuses your existing coding agent CLI (Codex/Claude/OpenCode) while adding a GUI plus built-in Skills/tools, so your agent can "load history first, then act; ship, then persist".
Skills-first support: oc init generates user-level skills (Cursor/Claude Code/Codex) plus slash commands (Cursor/Claude Code), so agents can load, search, create, and iterate your context with one command.
| Before OpenContext | After OpenContext | |-------------------|-------------------| | 📂 Hard to share context across repos/sessions | ✅ Global context library works across all projects | | 🤷 Your ideas can't be quickly perceived by Agent | ✅ Agent loads your background & decisions automatically | | 🔒 Existing knowledge can't be operated by Coding Agent | ✅ Agent can directly read/write your knowledge base |
oc CLI — manage a global contexts/ library (folders/docs, manifests, search)oc init)OpenContext's knowledge management Agent can be the coding agent you already use (Codex/Claude/OpenCode). You don't pay for a separate agent — you bring your own CLI and get a ready-to-use experience: a GUI for context management plus built-in Skills and tools that let the agent read, search, create, and iterate on your knowledge.
npm install -g @aicontextlab/cli
| Path | Best For | Get Started |
|------|----------|-------------|
| 🖥️ Desktop App | Visual users who want a native UI | Download from Releases |
| ⌨️ CLI + Tools | Developers using Cursor/Claude Code/Codex/AI agents | npm install -g @aicontextlab/cli && oc init |
| 🔧 CLI Only | Power users, automation | npm install -g @aicontextlab/cli |
OpenContext works with the coding agent CLI you already have — it adds a GUI plus built-in Skills/tools instead of replacing your agent.
# 1. Install
npm install -g @aicontextlab/cli
# 2. Initialize (prompts for tool setup; defaults to all)
cd your-project
oc init
# 3. Use slash commands (Cursor + Claude Code)
# /opencontext-context — load background before working
# /opencontext-search — find relevant docs
# /opencontext-create — create a new doc
# /opencontext-iterate — persist what you learned
# Tip: non-interactive installs can use --tools cursor,claude,codex or --no-claude/--no-cursor/--no-codex
#
# Installed by oc init:
# - Cursor: ~/.cursor/commands
# - Claude Code: ~/.claude/commands (or $CLAUDE_CONFIG_DIR/commands)
# Skills (wrapped from slash commands):
# - Cursor: ~/.cursor/skills/opencontext-*/SKILL.md
# - Claude Code: ~/.claude/skills/opencontext-*/SKILL.md (or $CLAUDE_CONFIG_DIR/skills)
# - Codex: ~/.codex/skills/opencontext-*/SKILL.md (or $CODEX_HOME/skills)
#
# 4. MCP config is user-level (Cursor/Claude Code/Codex)
# - Cursor: ~/.cursor/mcp.json
# - Claude Code: ~/.claude/mcp.json (or $CLAUDE_CONFIG_DIR/mcp.json)
# - Codex: ~/.codex/mcp.json (or $CODEX_HOME/mcp.json)
📖 For detailed usage guide, search configuration, and FAQ, visit the Website.
Run oc <cmd> --help for details.
| Command | What it does |
|---------|--------------|
| oc init | Initialize OpenContext + user-level tool integrations |
| oc folder ls | List folders |
| oc folder create <path> -d "desc" | Create a folder |
| oc doc create <folder> <name>.md -d "desc" | Create a document |
| oc doc ls <folder> | List documents |
| oc context manifest <folder> | Generate file list for AI to read |
| oc search "query" | Search documents |
| oc mcp | Start MCP server for MCP clients |
| oc ui | Start local Web UI |
📖 Full command reference available on the Website.
# Clone & install
git clone https://github.com/0xranx/OpenContext.git
cd OpenContext && npm install
# Desktop app
npm run tauri:dev # development
npm run tauri:build # production build
# Web UI
npm run ui:dev # development
npm run ui:build # production build
MIT © OpenContext