by Prof-Harita
Open-source, local-first alternative to Cowork-style computer assistants: real PTY terminal ops, explicit approvals, JSONL audit logs. Windows + Linux + macOS. Model agnostic.
# Add to your Claude Code skills
git clone https://github.com/Prof-Harita/terminaILast scanned: 5/22/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@azure/identity: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@azure/msal-node: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@google-cloud/storage: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@isaacs/brace-expansion: @isaacs/brace-expansion has Uncontrolled Resource Consumption",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Anthropic's MCP TypeScript SDK has a ReDoS vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-prometheus: Prometheus exporter process crash via malformed HTTP request",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/sdk-node: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@protobufjs/utf8: protobufjs has overlong UTF-8 decoding",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping",
"severity": "low"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "body-parser: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
"severity": "low"
},
{
"type": "npm-audit",
"message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-xml-parser: fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "gaxios: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "jws: auth0/node-jws Improperly Verifies HMAC Signature",
"severity": "high"
},
{
"type": "npm-audit",
"message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
"severity": "high"
},
{
"type": "npm-audit",
"message": "markdown-it: markdown-it is has a Regular Expression Denial of Service (ReDoS)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "protobufjs: Arbitrary code execution in protobufjs",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "retry-request: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "simple-git: simple-git Affected by Command Execution via Option-Parsing Bypass",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "teeny-request: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "turbo: Trubo: Login callback CSRF/session fixation",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "underscore: Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack",
"severity": "high"
},
{
"type": "npm-audit",
"message": "undici: Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion",
"severity": "high"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vite-node: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vitest: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ws: ws: Uninitialized memory disclosure",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"severity": "medium"
}
],
"status": "FAILED",
"scannedAt": "2026-05-22T07:44:29.733Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
Stop copy-pasting from ChatGPT. TerminAI is the CLI that operates your machine with permissions you control.
Runs on Windows/Linux/macOS using the models you already trust (Gemini, OpenAI, Local LLMs). Designed for real system changes or user workflows - governed, reviewable, and reversible.
TerminAI is an AI-powered system operator.
You describe what you want; TerminAI inspects your machine, proposes a plan, and
executes it through governed tools with a deterministic approval ladder
and an audit trail.
Status: Public Preview (v0.x)
The core operator loop is rock-solid. CLI is the canonical surface. Desktop/Voice/A2A are optional and still being hardened across platforms. Expect power; expect rough edges. Contributions welcome.
This is:
This is not:
Pick one of these prompts and paste it into TerminAI. (Click to copy the full prompt)
"Plan an itinerary for Paris. I am visiting as a tourist for 2 days next Saturday. I have already seen the big attractions (Eiffel, Louvre). Find me hidden gems and plan my trip hour-by-hour, including restaurants. Show it on a map. I will visit all these locations via the Metro. Once done, save the map-based visual output as a PDF."
"My graphics drivers seem unstable after the last OS update. Identify my GPU model, check the currently installed driver version, and find the correct latest stable driver. Propose a clean install plan and verify it before execution."
"Check the price of Bitcoin every 10 minutes. If it drops below $90,000, send a system notification and append the timestamp/price to
~/crypto_log.csv. Keep running this in the background until I stop it."
What if your computer could do things for you safely?
Not just suggesting commands. Not just generating scripts. Actually operating your system—diagnosing issues, fixing problems, and orchestrating workflows—with guardrails that make execution trustworthy.
For years, "internet help" meant: copy instructions from a chat window, paste into your terminal, and hope you didn't miss a step. Coding tools (Cursor, Aider, etc.) reduced that friction for software development—but the rest of your computer is still stuck in the copy/paste era.
TerminAI is the next interface: you state intent, it proposes a governed plan, you approve at the right level, and it executes with an audit trail. Fewer fragile steps. More outcomes—without handing your machine to an unchecked agent.
Computers are powerful, but operating them still requires memorizing syntax, hunting through logs, and repeating the same diagnosis steps.
TerminAI compresses the gap between intent and execution—without turning your machine into an uncontrolled "agent."
Intent → Governed plan → Approval → Execution → Audit
The canonical command is: terminai.
AI system operation must be governed. TerminAI is built around that primitive.
node-pty./chat/completions endpoint (OpenRouter, local
gateways, etc.).docs-terminai/why-terminai.mdPrereqs: Node.js 20+
npm i -g @terminai/cli
terminai --version
terminai
If you don't see the CLI package yet (or want bleeding-edge), install from source below.
Download installers from GitHub Releases (desktop is in preview):
git clone https://github.com/Prof-Harita/terminaI.git
cd terminaI
npm install
npm run build
If you installed before the recent multi-provider updates, upgrade so you get the latest auth + platform parity.
npm i -g @terminai/cli@latest
terminai --version
git pull
npm install
npm run build
Run terminai and the wizard guides you through setup.
Fastest path for many users.
terminai
# Select "Google Gemini" → browser opens → sign in
Or use an API key:
# macOS/Linux
export TERMINAI_API_KEY="your-gemini-key"
# Windows (PowerShell)
$env:TERMINAI_API_KEY='your-gemini-key'
terminai
Use an OpenAI browser sign-in flow (similar to how Codex tooling supports "Sign in with ChatGPT").
terminai
# Select "ChatGPT Sign-in (OAuth)" → sign in with OpenAI
Note: this is still being hardened. If anything fails, attach logs (see below) and open an issue.
Connect to OpenAI Platform, OpenRouter, Ollama gateways, or any
/chat/completions endpoint.
# macOS/Linux
export OPENAI_API_KEY="sk-..."
# Windows (PowerShell)
$env:OPENAI_API_KEY='sk-...'
terminai
# Select "OpenAI Compatible" → enter base URL and model
Popular configurations:
https://api.openai.com/v1https://openrouter.ai/api/v1http://localhost:11434/v1See: docs-terminai/multi-llm-support.md
Use `/llm reset` to switch when inside. Note right now hot-swap is not fully
live. Please restart (Ctrl-C and npm run start or terminai) to apply changes.
TerminAI operates on a 3-Layer Defense-in-Depth model to ensure that autonomous execution never becomes "unchecked access":