Maintainer of this skill?
Open-source meta-harness for coding agents. Define your own workflows, reviewers and repair loops. zeroshot enforces the process you configure.
# Add to your Claude Code skills
git clone https://github.com/the-open-engine/zeroshotLast scanned: 6/16/2026
{
"issues": [
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "depcheck: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "gray-matter: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "md-to-pdf: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "mocha: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "npm: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
"severity": "high"
},
{
"type": "npm-audit",
"message": "tar: node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-06-16T09:26:11.242Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how zeroshot compares with popular alternatives.
zeroshot is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by the-open-engine. Open-source meta-harness for coding agents. Define your own workflows, reviewers and repair loops. zeroshot enforces the process you configure. It has 2,062 GitHub stars.
zeroshot returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/the-open-engine/zeroshot" and add it to your Claude Code skills directory (see the Installation section above).
zeroshot is primarily written in Rust. It is open-source under the-open-engine on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh zeroshot against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Stop babysitting your agents.
Prompts are suggestions. Graphs are enforced.
A skill can ask for a review, but the agent decides whether to listen. In a zeroshot graph, your QA process is enforced by code.
zeroshot runs coding, independent review and repairs through the workflow you define.
Choose the agents and models, define what must pass, and decide where rejected work goes for repair.
The engine enforces the graph’s review gates and retry limits. Each agent can use its own model and harness (Pi, Claude Code, Codex or Copilot).
On 20 ProgramBench tasks, a small model in a zeroshot loop matched a larger model's score at a median 58% of its cost. More examples on zeroshot.sh: a flight game, a landing page and a research run.
The CLI is free and MIT licensed. Run locally, self-host, or use Zeroshot Platform.
I used Zeroshot for my last two contracts: a production line automation and control system, and a multi-host sync and admin system for Webflow and Guesty. Very happy with it!
— Mark Dingwall
Generally, I’m really happy with the results and the quality. I really like the mental models of creating profiles.
— Daniel Graungaard
Implemented support of pi.dev harness and it works pretty well (built with zeroshot BTW).
— Andrey
you guys are solving this in a way that is more satisfying than the google ADK (to me) and it’s fuckin google.
— Fav
npm install -g @the-open-engine-company/zeroshot
Paste this into Claude Code or Codex in your repo:
Use the zeroshot skill to set up a local run for a small issue in this repo.
Work on a fresh branch and stop if there are uncommitted changes.
Show me the task and workflow before starting.
Once I approve, run it, monitor progress, and summarize the result.
The installer requires Node.js 18 or newer and installs a verified native binary for Linux x64/arm64, macOS x64/arm64, or Windows x64. It also installs agent skills for Codex, GitHub Copilot, Pi, and Claude Code at user scope.
For local execution, install and sign in to Codex, Claude Code, GitHub Copilot, or Pi. Local runs can reuse the harness's existing login, including subscription-backed sessions. See the installation guide for harness prerequisites.
This example uses Codex and keeps delivery local. The worker edits the selected folder;
Git is optional. Add --cwd FOLDER to select another folder; input files stay relative to the invoking folder.
Create input.json with a task for your project:
{
"task": "Add JSON output to the status command and cover it with focused tests."
}
Create runtime.json. Replace YOUR_MODEL_ID with a model identifier supported by your installed
Codex CLI:
{
"harness": "codex",
"provider": "openai",
"model": "YOUR_MODEL_ID",
"effort": "high"
}
Start the run. Add --validate-only to check the graph, runtime configuration, and input first:
zeroshot run \
--title "Add JSON status output" \
--template software-change --delivery none \
--input input.json \
--uniform-runtime-config runtime.json
Open another terminal to inspect the run:
zeroshot ui
Visit http://127.0.0.1:4173/ui/ and open Runs. Stopping the UI server leaves active runs
running. The CLI also provides zeroshot list, zeroshot status RUN_ID, and zeroshot logs RUN_ID.
A failed run with a recoverable workspace can be
restarted or resumed.
For other harnesses and providers, see Runtimes and connections.
Connect GitHub and bring your own model API keys. Platform setup guide →
Choose each agent's model and instructions, which steps run in parallel, and when to retry. This example routes changes to auth, payments, or migrations through a blast-radius map and security review before acceptance and code review. Other changes go straight to review.
The software-change review loop, auto-research graph, and delivery are built in. You define other stages, their tools, services and credentials, and where failures go for repair.
Inspect the built-in graph as a starting point:
zeroshot template show software-change
Start with Build a review loop, a complete example with two independent reviewers and a repair loop. Adapt the reviewers’ instructions to your project. See the graph contract for supported graph structures and Prepare a runtime environment for dependency and service setup.
Each step can use its own model. Pass --runtime-config with one binding per node in place of
--uniform-runtime-config:
{
"harness": "claude",
"provider": "anthropic",
"size": "medium",
"nodes": {
"worker":