by cytostack
Portable project memory across Claude Code, Codex and OpenCode, plus token accounting measured from harness transcripts. Local file I/O, no API calls, no telemetry.
# Add to your Claude Code skills
git clone https://github.com/cytostack/openwolfLast scanned: 5/2/2026
{
"issues": [
{
"type": "npm-audit",
"message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "node-cron: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vitepress: Vulnerability found",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-05-02T06:11:10.729Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}See how openwolf compares with popular alternatives.
openwolf is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by cytostack. Portable project memory across Claude Code, Codex and OpenCode, plus token accounting measured from harness transcripts. Local file I/O, no API calls, no telemetry. It has 2,342 GitHub stars.
Yes. openwolf passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/cytostack/openwolf" and add it to your Claude Code skills directory (see the Installation section above).
openwolf is primarily written in TypeScript. It is open-source under cytostack on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh openwolf against similar tools.
No comments yet. Be the first to share your thoughts!
Based on votes and bookmarks from developers who liked this skill
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
| Without OpenWolf | With OpenWolf |
|---|---|
| A new session may need the same project explanation again | Saved task context, project notes and known fixes remain in .wolf/ |
| Switching agents can leave unfinished work in the previous conversation | Explicit Claude and Codex handover packets carry selected saved context |
| Usage records are spread across agent sessions | Available token counters and API cost estimates are grouped by agent and model |
| Older session notes make useful information harder to find | Eligible old notes are archived with verified restore pointers |
| Repeated file reads and large command results use session space | Read guidance and supported output controls help reduce repeated context |
A coding session produces useful context: the task objective, files changed, failed tests and the next action. That information can be difficult to recover after compaction, a restart or a change of agent. Large file reads and command results can also fill a session with repeated text.
OpenWolf stores selected context beside your project and connects to the session and tool events your coding agent supports:
npm install -g openwolf
cd your-project
openwolf init
init detects installed agents and sets up their project integration.
Complete any project or hook trust review shown by your agent, then start a
new session. You can select agents with --agent claude codex opencode.
| Agent | Integration |
|---|---|
| Claude Code | Lifecycle hooks, read guidance, Bash output controls and skills |
| Codex CLI | Project hooks and AGENTS.md: saved task recovery and supported session and tool events |
| OpenCode | Native plugin and AGENTS.md: session and tool events, usage records and activity toasts |
| Grok Build | Enabled Claude-compatible hook discovery; activity notices stay in the dashboard |
| Cursor | Rules file (context only) |
| Gemini CLI | GEMINI.md block (context only) |
| Antigravity | AGENTS.md block (context only) |
Agents use the project's .wolf/ directory. The generated .gitignore
excludes local runtime data. Review notes, bug records and indexed content
before sharing them. Hook coverage depends on the installed agent version.
See the integration guide for details.
openwolf init creates .wolf/ and registers supported hooks or a plugin.
Memory, indexing and usage processing run locally without extra model calls.
The optional background update worker contacts npm to check for new runtimes.
| File | Purpose |
|---|---|
anatomy-index.json |
Project index: file descriptions, sizes, symbols and imports |
cerebrum.md |
Candidate preferences, conventions and recurring corrections |
STATUS.md |
Current project status and unfinished work |
buglog.json |
Searchable records of problems and fixes |
memory.md |
Session notes and outcomes |
token-ledger.json |
Operational records and separate content-size estimates |
hooks/ |
Installed lifecycle hooks and session state |
cache/bash/ |
Preserved originals of shortened Bash output |
handoff/ |
Task checkpoints, source references and handover packets |
archive/ |
Older session notes with verified restore pointers |
usage/, activity/ |
Recorded usage and completed OpenWolf actions |
During a session:
openwolf report
Example from a checked Codex session, shown in a shortened format:
Recorded provider usage
Input tokens: 50,393
Cached input: 28,800
Fresh input: 21,593
Output tokens: 146
Reasoning tokens: 80
Total tokens: 50,539
Cost calculation
Fresh input: model input rate
Cached input: model cached-input rate
Output: model output rate
Coverage
Cached input is included in input tokens.
Reasoning is included in output tokens in this record.
Content-size estimates are reported separately.
How to read the reports:
openwolf usage report --json provides the recorded-usage report.
openwolf bench --repo <fixture> --yes compares supported coding tasks with
and without OpenWolf. It uses real model access and can consume paid usage.
Hook heartbeats, runtime checks and dashboard health help identify missing or failing integrations. Project updates check installed hook modules and report errors. Concurrent writes use journals or locks where required, and incomplete project scans retain entries they did not reach.
Compatible stable hook and plugin updates can be prepared in the background for new sessions. Major upgrades are notification-only by default. A running session keeps its selected runtime. This does not replace the global CLI or a running dashboard daemon. See automatic updates.
127.0.0.1 by default and requires a project token.Available through the supported agent integration:
/handoff helps update STATUS.md with current work and open items./security-audit guides a project review and records findings in the bug log./reframe guides interface review, framework selection and migration work.Skills guide your coding agent and use its normal model budget. For an explicit
Claude and Codex transfer, use the handover commands.
OpenWolf can read supported local session records used for Claude recovery;
it does not run Claude's /resume inside Codex or access privat