riffpad

Name: riffpad
Author: riffpad

Verified

Watch, approve and steer your coding agents from your phone.

125stars

20forks

Added 8/17/2026

Installation

# Add to your Claude Code skills
git clone https://github.com/riffpad/riffpad

Getting Started

Guides for using ai agents skills like riffpad.

Caveman: Cut Claude Token Use by 65%
How agent-side prompt compression works, when to use it, and when not to.
What is an AI Skills Marketplace?
Definitions, how marketplaces work, and how to choose between them in 2026.
Getting Started with AI Skills

Security ReportVerified

Last scanned: 8/17/2026

{
  "issues": [
    {
      "file": "README.md",
      "line": 57,
      "type": "remote-install",
      "message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://riffpad.ai/install.sh | sh\"",
      "severity": "low"
    },
    {
      "file": "apps/landing/public/SKILL.md",
      "line": 16,
      "type": "remote-install",
      "message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://riffpad.ai/install.sh | sh\"",
      "severity": "medium"
    }
  ],
  "status": "PASSED",
  "scannedAt": "2026-08-17T04:42:32.219Z",
  "npmAuditRan": true,
  "pipAuditRan": true,
  "promptInjectionRan": true
}

README.md

Frequently Asked Questions

What is riffpad?

riffpad is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by riffpad. Watch, approve and steer your coding agents from your phone. It has 125 GitHub stars.

Is riffpad safe to use?

Yes. riffpad passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.

How do I install riffpad?

Clone the repository with "git clone https://github.com/riffpad/riffpad" and add it to your Claude Code skills directory (see the Installation section above).

What programming language is riffpad written in?

riffpad is primarily written in Go. It is open-source under riffpad on GitHub, so you can review or fork the full source.

Are there alternatives to riffpad?

Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh riffpad against similar tools.

Agentic AI for Beginners

Build your first AI agent from scratch - tool use, ReAct pattern, memory, deployment

41 minBeginner

Comments (0)

to leave a comment.

No comments yet. Be the first to share your thoughts!

Related Skills

ECC

by affaan-m

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

240,529

protein-design-skills roampal

Riffpad

Watch, approve, and steer Claude Code, Codex, and other AI coding CLIs from your phone — without staying chained to the desk.

Website · Docs · Discord · App

EN · ZH

Why Riffpad?

Riffpad bridges the AI coding CLI running on your machine to your phone, so a long refactor doesn't chain you to the desk:

Watch — the agent's output streams live to your phone:

Steer — send a new instruction from your phone; it lands in the running terminal:

Approve — permission prompts become one-tap cards:

Quickstart

Using an AI agent? Paste this into its chat — it reads the skill and sets up Riffpad for you:
curl -fsSL https://riffpad.ai/SKILL.md

1. Install the daemon

macOS / Linux

curl -fsSL https://riffpad.ai/install.sh | sh

Windows PowerShell

irm https://riffpad.ai/install.ps1 | iex

The Windows script downloads the latest binary, adds it to your user PATH, and registers a logon autostart task for the daemon.

2. Sign in on the computer

riffpad login

This opens a browser for GitHub authorization (like gh auth login). The daemon registers this computer as a host under your account and restarts automatically.

3. Pair your phone

riffpad pair

The terminal prints a 6-character code and a QR code. On your phone, open https://app.riffpad.ai, sign in with the same GitHub account, and enter the code (or scan the QR).

4. Start and control a session

riffpad run codex

The session appears in the app immediately — watch progress, approve actions, and send instructions from your phone, from anywhere.

The CLI speaks English and Chinese. English is the default; use riffpad --lang zh to switch to Chinese, or riffpad --lang en to explicitly select English.

Want to capture a Claude session you started yourself? Use riffpad attach instead — see the documentation.

How it works

Adapter — parses each CLI's structured output and hooks into a unified event stream (Claude Code, Codex, DeepSeek, Kimi, …).
Daemon — runs on your computer, owns the keys, manages sessions, and bridges adapters to the relay.
Relay — lightweight encrypted WebSocket relay. Zero-knowledge: it routes ciphertext and stores nothing.
Mobile app — shows sessions and approval cards, and sends approve / reject / prompt actions back.

Is it safe?

Yes, by design:

End-to-end encrypted — X25519 key exchange + AES-256-GCM.
Keys never leave your devices — they live only on your daemon and phone; the relay never sees plaintext.
Local-first — code, repositories, and API keys never leave your computer.
Read-only by default — every approve, reject, or prompt is an explicit action.

Community

Questions, ideas, or show-and-tell? Join us:

Discord — the community hangout
GitHub Issues — bugs and feature requests
Documentation — install, pairing, security model

License

Riffpad is Apache-2.0 by default — the CLI (apps/daemon), clients (apps/client-beta, apps/mobile), landing/docs, and the shared packages/ libraries all use it. See the LICENSE file.

The relay server (apps/relay) is under Business Source License 1.1 — source-available, with personal and internal use permitted (including self-hosting); it converts to Apache-2.0 on 2030-08-09. See apps/relay/LICENSE. A full breakdown lives in NOTICE.