zeroshot

Name: zeroshot
Author: the-open-engine

Warning

Independent executor–verifier orchestration for software changes.

1,832stars

171forks

Rust

Installation

# Add to your Claude Code skills
git clone https://github.com/the-open-engine/zeroshot

Getting Started

Guides for using ai agents skills like zeroshot.

Caveman: Cut Claude Token Use by 65%
How agent-side prompt compression works, when to use it, and when not to.
What is an AI Skills Marketplace?
Definitions, how marketplaces work, and how to choose between them in 2026.
Getting Started with AI Skills

Security ReportWarning

Last scanned: 6/16/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "depcheck: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "gray-matter: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "md-to-pdf: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "mocha: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "npm: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tar: node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)",
      "severity": "medium"
    }
  ],
  "status": "WARNING",
  "scannedAt": "2026-06-16T09:26:11.242Z",
  "npmAuditRan": true,
  "pipAuditRan": true,
  "promptInjectionRan": true
}

Compare with similar skills

See how zeroshot compares with popular alternatives.

zeroshot vs hermes agent

See comparison

zeroshot vs ecc

See comparison

zeroshot vs everything claude code

README.md

Frequently Asked Questions

What is zeroshot?

zeroshot is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by the-open-engine. Independent executor–verifier orchestration for software changes. It has 1,832 GitHub stars.

Is zeroshot safe to use?

zeroshot returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.

How do I install zeroshot?

Clone the repository with "git clone https://github.com/the-open-engine/zeroshot" and add it to your Claude Code skills directory (see the Installation section above).

What programming language is zeroshot written in?

zeroshot is primarily written in Rust. It is open-source under the-open-engine on GitHub, so you can review or fork the full source.

Are there alternatives to zeroshot?

Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh zeroshot against similar tools.

Agentic AI for Beginners

Build your first AI agent from scratch - tool use, ReAct pattern, memory, deployment

41 minBeginner

Comments (0)

to leave a comment.

No comments yet. Be the first to share your thoughts!

Related Skills

ECC

by affaan-m

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

257,961

pg-aiguide ai-coding-guide

⚠️ Third-Party Software Notice

This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.

Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.

Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.

Read the Terms of Service

Zeroshot

The agent that writes the code should not be the one that decides it works.

Zeroshot turns a software goal into an explicit multi-agent graph. One agent implements. Independent agents review. Failures route back into bounded repair. Delivery happens only after the graph's checks pass.

Zeroshot v8 is a hard interface cutover. The former Node.js runtime is retired; the native zeroshot executable is the product.

Install

npm install -g @the-open-engine-company/zeroshot
zeroshot version

The npm package installs a verified native binary for Linux x64/arm64, macOS x64/arm64, or Windows x64. Native archives and checksums are attached to each canonical vX.Y.Z GitHub Release.

The graph is the orchestration

Agent loops hidden inside prompts are difficult to inspect, reproduce, or trust. Zeroshot makes the control flow authored data: sequence, parallel review, retry paths, delivery, and exit conditions are all explicit before a run starts.

The built-in software-change graph:

gives the goal to a worker;
runs acceptance and code review independently and in parallel;
routes rejected evidence to a repair worker and repeats both reviews;
with delivery enabled, delivers an accepted change through Git, CI, and merge;
routes delivery conflicts back through repair and review.

No runtime agent chooses the next step. The graph is the orchestration. Every transition is bounded, and every event is written to a durable SQLite ledger.

Inspect the built-ins or bring your own graph:

zeroshot template list
zeroshot template show software-change

One CLI, three environments

The graph and runtime plan stay the same. Only the target changes.

Local: use your subscriptions

Run directly in your Git workspace. Local mode reuses an existing Codex or Claude Code login, including subscription-backed sessions; explicit provider credentials can be bound instead.

zeroshot run \
  --title "Add JSON output with tests" \
  --template software-change \
  --ship \
  --input ./input.json \
  --runtime-config ./runtime.json

Self-hosted: run the Docker target

Keep execution and durable state on infrastructure you control. The target image includes the native engine plus pinned Codex and Claude harness CLIs.

docker run --rm --detach --name zeroshot-target \
  -p 127.0.0.1:8080:8080 \
  -v zeroshot-data:/var/lib/zeroshot \
  ghcr.io/the-open-engine/zeroshot-target:latest

zeroshot target add local --url http://127.0.0.1:8080 --direct

See the target image guide for persistent storage, network isolation, builds, and HTTPS.

Zeroshot Cloud: close the laptop

Use the built-in cloud target at https://api.cloud.zeroshot.sh for a shared team queue and durable run history:

zeroshot target login cloud

Open the printed link to sign in with the device code already filled in. Use --target cloud when submitting runs.

Reference

Development

npm ci
npm run check
cargo test --workspace

Node.js is repository tooling and the npm delivery mechanism only. See CONTRIBUTING.md, PUBLISHING.md, and SECURITY.md.

License

MIT. See LICENSE.