# Add to your Claude Code skills
git clone https://github.com/rcarmo/piclawLast scanned: 5/10/2026
{
"issues": [
{
"type": "npm-audit",
"message": "xlsx: Prototype Pollution in sheetJS",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-05-10T06:34:19.979Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}See how piclaw compares with popular alternatives.
piclaw is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by rcarmo. pi coding agent in a technicolor web trenchcoat. It has 862 GitHub stars.
piclaw returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/rcarmo/piclaw" and add it to your Claude Code skills directory (see the Installation section above).
piclaw is primarily written in TypeScript. It is open-source under rcarmo on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh piclaw against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
![]()
Languages: English · 简体中文 · 日本語
PiClaw is a self-hosted AI workspace, single-user by default, built on the Pi Coding Agent. Work with an agent, edit files, run commands and inspect the results in the same browser window. Conversations, files and scheduled tasks persist between visits; model requests go to the provider you configure, including local OpenAI-compatible servers.
The web UI supports English, Simplified Chinese and Japanese, with desktop and mobile layouts. Use a container, VM or dedicated machine to limit the files and services available to the agent.

| Method | Use it for |
|---|---|
| Docker | Recommended deployment; includes Bun, PiClaw and bundled command-line tools |
| Portable release | Docker-free Linux, Apple Silicon macOS or experimental Windows use; bundles Bun and runtime dependencies |
| Bun repository install | Experimental tagged install using an existing Bun installation |
| Source build / desktop shell | Development and local testing; the desktop wrapper is experimental |
Published downloads are on GitHub Releases; container images are on GHCR. Pin a release tag for repeatable deployments.
You need Docker and credentials for a model provider, or a reachable local model server. Provider setup happens after startup.
[!WARNING] A fresh instance has no web login gate. The command below publishes the port on localhost only. Keep it private while you configure authentication. Anyone with access to an unprotected instance can use the agent's files and tools.
mkdir -p ./home ./workspace
docker run -d \
--init \
--name piclaw \
--restart unless-stopped \
-p 127.0.0.1:8080:8080 \
-e PICLAW_WEB_PORT=8080 \
-v "$(pwd)/home:/config" \
-v "$(pwd)/workspace:/workspace" \
ghcr.io/rcarmo/piclaw:latest
/login in chat to configure a model provider. This is separate from browser sign-in. PiClaw reuses Pi's provider credentials; you do not need to put API keys in the Docker command./model, then try: “Create a Markdown checklist in the workspace and show me the file.”Both ./home and ./workspace are persistent data. Keep them when replacing the container; never delete workspace/.piclaw/store/messages.db to reset or upgrade PiClaw. See first-run checks, backups and upgrades.
| Task | Included in core |
|---|---|
| Work with an agent | Streaming chat, model selection, live steering, queued follow-ups, separate conversations and /btw side questions |
| Work on files | Workspace browser, uploads, CodeMirror editor, shell tools and a detachable xterm.js terminal |
| Inspect results | CSV/TSV tables, PDF, image, video and code viewers; VNC remote-display panes |
| Continue work between visits | Scheduled tasks, searchable chat history and file-based Dream memory |
| Extend workflows | Skills, MCP servers, browser automation, image processing, Adaptive Cards and interactive visual artefacts |
The web UI guide and tools and skills reference cover the controls and commands. Local model setup is documented in llama.cpp; Azure image generation requires Azure OpenAI/Foundry configuration.
Optional add-ons supply Draw.io, Office document rendering and tools, kanban boards, alternative terminal renderers, Windows desktop automation, Proxmox, Portainer, Microsoft 365 and paired-instance messaging. Install them separately through Settings and add-ons.
family-shared deployments provide owned conversations while sharing one workspace and process; they do not provide filesystem isolation. Isolated-container mode is unavailable. See the family user guide.Work items and bug reports are tracked in GitHub Issues.
Use the issue templates when reporting a problem. For code changes, read development and the repository workflow; submit changes through a pull request.
rcarmo/piclaw-addons)[!NOTE] piclaw is not directly affiliated with pi.dev. It is a derivative work built on the Pi core and adds its own runtime, tooling, and UI layers.