by SapienXai
Run agents like a company. AgentOS is the native control plane for OpenClaw — manage agents, tasks, models, context, approvals, and runtime visibility from one place.
# Add to your Claude Code skills
git clone https://github.com/SapienXai/AgentOSLast scanned: 9/9/2026
{
"issues": [
{
"file": "README.md",
"line": 162,
"type": "remote-install",
"message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://raw.githubusercontent.com/SapienXai/AgentOS/main/install.sh |\"",
"severity": "low"
}
],
"status": "PASSED",
"scannedAt": "2026-09-09T08:41:22.747Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}AgentOS is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by SapienXai. Run agents like a company. AgentOS is the native control plane for OpenClaw — manage agents, tasks, models, context, approvals, and runtime visibility from one place. It has 100 GitHub stars.
Yes. AgentOS passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/SapienXai/AgentOS" and add it to your Claude Code skills directory (see the Installation section above).
AgentOS is primarily written in TypeScript. It is open-source under SapienXai on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh AgentOS against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Running one AI agent is easy.
Running many agents across real projects, accounts, models, schedules, files, and approval boundaries is an operating problem.
AgentOS gives a human operator one place to:
The goal is not another chat interface. It is a practical operating system for AI-native work.
AI agents are becoming cheaper, more capable, and more persistent. The next bottleneck is no longer generating a response. It is designing and operating the organization around them.
Digital workers need more than prompts:
AgentOS is being built for that layer: the place where a person can turn individual agents into a functioning digital team.
AgentOS includes a production-oriented Railway deployment path that runs AgentOS and the pinned OpenClaw Gateway in the public application service and runs interactive Chromium in a separate private browser-worker service. The deployment provisions one persistent /data volume for AgentOS/OpenClaw state and a second dedicated /data volume for Chromium profiles, keeps the Gateway on container loopback, initializes Instance Protection from the username and password supplied during deployment, and waits for the private worker and Gateway before passing Railway's healthcheck. The Railway external supervisor owns the Gateway process lifecycle; AgentOS configures and observes OpenClaw through its native Gateway and can request a supervised Gateway restart through the lifecycle API without opening a host terminal.
The official published Railway template provisions both required volumes, generates the internal AgentOS, OpenClaw, and browser-worker secrets automatically, and wires the private worker URL through Railway private networking. The only required operator input is the initial administrator password. See docs/deploy-on-railway.md for the complete runtime, private-networking, and template update model.
After the first deployment:
The initial password only creates the account when no Instance Protection state exists. Changing that Railway variable later does not reset or replace the administrator account; use AgentOS account settings to change credentials. After the first successful sign-in, you may remove AGENTOS_INITIAL_ADMIN_PASSWORD from Railway because the protected account is already stored on the volume.
macOS or Linux:
curl -fsSL https://raw.githubusercontent.com/SapienXai/AgentOS/main/install.sh | bash
Windows PowerShell:
iwr https://raw.githubusercontent.com/SapienXai/AgentOS/main/install.ps1 | iex
Or install with a package manager:
pnpm add -g @sapienx/agentos
# or
npm install -g @sapienx/agentos
Install a specific published version:
macOS or Linux:
curl -fsSL https://raw.githubusercontent.com/SapienXai/AgentOS/main/install.sh | AGENTOS_VERSION=0.7.8 bash
Windows PowerShell:
$env:AGENTOS_VERSION='0.7.8'; iwr https://raw.githubusercontent.com/SapienXai/AgentOS/main/install.ps1 | iex
agentos start --open
Verify the local environment:
agentos status
agentos doctor --deep
Then:
If OpenClaw is already installed, AgentOS connects to the live Gateway and projects its real state. If OpenClaw is missing or unhealthy, AgentOS shows an explicit setup or unavailable state instead of presenting fake operational data.
worker, setup, browser, monitoring, and custom.AGENTS.md, SOUL.md, IDENTITY.md, and optional USER.md; keep command guidance in AGENTS.md under ## Tools, curated memory in MEMORY.md/memory/, and AgentOS project docs in docs/, deliverables/, and skills/. Heartbeat cadence is