Maintainer of this skill?
by liliu-z
An open-source, local-first writing workspace where you can write with Claude Code and Codex, drawing on your own sources and past work.
# Add to your Claude Code skills
git clone https://github.com/liliu-z/stashbaseLast scanned: 7/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@electron/asar: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@electron/universal: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "app-builder-lib: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dir-compare: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dmg-builder: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ejs: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-builder: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-builder-squirrel-windows: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-winstaller: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "filelist: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "glob: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "jake: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "rimraf: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "temp: Vulnerability found",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-07-30T06:27:15.682Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how stashbase compares with popular alternatives.
stashbase is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by liliu-z. An open-source, local-first writing workspace where you can write with Claude Code and Codex, drawing on your own sources and past work. It has 1,179 GitHub stars.
stashbase returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/liliu-z/stashbase" and add it to your Claude Code skills directory (see the Installation section above).
stashbase is primarily written in TypeScript. It is open-source under liliu-z on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh stashbase against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Stash your notes and sources. Write with your agent.
StashBase is an open-source, local knowledge base for writing with AI agents. Your notes, PDFs, and docs stay in a folder on your computer, and Claude, Codex, or Antigravity works inside it with you.
Review shows each change inside the prose,
so you can undo or keep it.https://github.com/user-attachments/assets/4ba282a3-85d2-4a08-b7af-562a1e71e716
macOS 12+ (Apple Silicon and Intel) and Windows 10+ (x64) are the primary platforms. Linux x86_64 Debian 12+ / Ubuntu 22.04+ is community-supported. On Intel Macs, local search and PDF/image text extraction require macOS 15+; older supported systems can still open projects and edit files. Agent runtime requirements may vary.
On macOS, install with Homebrew:
brew install --cask liliu-z/stashbase/stashbase
Or download the latest release:
| Platform | Download |
|---|---|
| macOS Apple Silicon | StashBase-*-mac-arm64.dmg |
| macOS Intel | StashBase-*-mac-x64.dmg |
| Windows x64 | StashBase-*-win-x64.exe |
| Linux x86_64 | StashBase-*-linux-amd64.deb or .AppImage |
See Installation for platform steps, updates, and troubleshooting.
Switch between Chat for the conversation and Documents, a file tree and
editor that works like an IDE, but for writing. Both modes share the project and
keep unfinished work when you switch.
See Using StashBase for everyday document and search workflows.
Explore how people organize files and write with agents. Copy a ready-made project or reuse its prompt to try a workflow with your own material.
For example, in Resume Builder the agent interviews you first, then writes a resume that shows what you actually did and tailors it to each job.
Your documents stay in local project folders. Removing a project from StashBase doesn't delete its files. Browsing, editing, previews, and keyword search work without an account. PDF and Word text extraction and OCR run locally, with required components downloaded on first use.
Agent conversations send your prompts and relevant context to model services. Claude, Codex, and Antigravity use your provider accounts; the Default Agent connects through StashBase's hosted model gateway, which sends requests through OpenRouter to Claude Haiku 5.5 by default.
Search by meaning requires your own OpenAI or OpenRouter key in
Settings → Advanced → Search by meaning. It sends source text and search
queries to your chosen embedding provider. Default Agent credits don't cover
this service.
Packaged builds and source runs share usage statistics and error diagnostics by default, excluding document
and conversation content. You can turn this off in
Settings → General → Privacy. See Usage statistics for details.
Agents in the built-in Chat connect to StashBase's tools automatically.
To use an external MCP client, keep StashBase running and copy the connection
configuration from Settings → Advanced → External apps (MCP) into that
client. It can read, search, and edit supported files in the project you select.
See MCP Configuration for client examples, transports, and access settings.
Install Node.js 24.11.0+, pnpm, and Python 3.13 with venv support. See Local Development for platform dependencies.
git clone https://github.com/liliu-z/stashbase
cd stashbase
pnpm install
pnpm setup:python
env -u ELECTRON_RUN_AS_NODE pnpm dev
The launch command above uses POSIX shell syntax to clear an inherited
ELECTRON_RUN_AS_NODE. On Windows, clear that variable in your shell before
running pnpm dev.
See Contributing for OCR setup, testing, and release guidance.
StashBase is also an experiment in human-directed, AI-first development. Humans own product direction and trust decisions; AI helps connect design, implementation, review, and evidence. The Project Maintenance Model describes that working loop.
Small focused PRs are preferred. Open an issue before larger changes so scope and direction can be discussed first.
Report an issue or join the Discord community for support and discussion.
StashBase is an independent open-source project built by Bing Wu and Li Liu.
Licensed under Apache 2.0.