by Twigpine
runs anywhere. uses anything
# Add to your Claude Code skills
git clone https://github.com/Twigpine/openclaudeGuides for using ai agents skills like openclaude.
Last scanned: 9/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "axios: Axios: Prototype pollution auth subfields can inject Basic auth",
"severity": "high"
},
{
"type": "npm-audit",
"message": "express-rate-limit: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fflate: fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass",
"severity": "high"
},
{
"type": "npm-audit",
"message": "sharp: sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591",
"severity": "high"
},
{
"type": "npm-audit",
"message": "shell-quote: shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)",
"severity": "high"
},
{
"type": "npm-audit",
"message": "undici: undici vulnerable to downstream response desynchronization via retry interceptor",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-09-30T10:18:25.925Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how openclaude compares with popular alternatives.
openclaude is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Twigpine. runs anywhere. uses anything. It has 34,367 GitHub stars.
openclaude returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/Twigpine/openclaude" and add it to your Claude Code skills directory (see the Installation section above).
openclaude is primarily written in TypeScript. It is open-source under Twigpine on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh openclaude against similar tools.
No comments yet. Be the first to share your thoughts!
Based on votes and bookmarks from developers who liked this skill
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
OpenClaude is an open-source coding-agent CLI for cloud and local model providers.
Use OpenAI-compatible APIs, Gemini, GitHub Models, Codex OAuth, Codex, Ollama, Atomic Chat, and other supported backends while keeping one terminal-first workflow: prompts, tools, agents, MCP, slash commands, and streaming output.
OpenClaude is also mirrored to Twigpine: gitlawb.com/node/repos/z6MkqDnb/openclaude
Quick Start | Setup Guides | Providers | Development | VS Code Extension | Partners | Community
/providerOpenClaude requires Node.js >=24.22.1 for npm installs and runtime (Node 26 recommended/default). Bun is
only needed for source builds and local development.
npm install -g @twigpine/openclaude@latest
Upgrading from @gitlawb/openclaude? The package moved to the @twigpine
scope and the old one is no longer updated. Both packages provide the
openclaude command, so npm refuses to install one over the other — remove
the old one first:
npm uninstall -g @gitlawb/openclaude
npm install -g @twigpine/openclaude@latest
Your settings and sessions (~/.openclaude and ~/.openclaude.json) are not
touched. Don't use --force to install over the old package instead: a later
uninstall of the old one would then remove the openclaude command. If that
happens, uninstall @twigpine/openclaude and install it again.
If you're on Arch Linux, you can install OpenClaude from the community-maintained AUR package:
paru -S openclaude
If the install later reports ripgrep not found, install ripgrep system-wide and confirm rg --version works in the same terminal before starting OpenClaude.
Verify / troubleshoot installed version:
openclaude --version
npm view @twigpine/openclaude dist-tags
npm install -g @twigpine/openclaude@latest
Update-lock recovery: Global updates use .update.lock in the OpenClaude
configuration directory (OPENCLAUDE_CONFIG_DIR, or ~/.openclaude). Existing
locks are never removed automatically, even when old, to avoid overlapping
package-manager installations. If an update was interrupted, first confirm that
all OpenClaude update processes and their package-manager children have stopped;
then remove only .update.lock from that directory and retry openclaude update.
Do not remove the lock while an update is running.
openclaude
Inside OpenClaude:
/provider for guided provider setup and saved profiles/onboard-github for GitHub Models onboarding/search to choose the web search backend (Exa by default) or add a search API keyNote: OpenClaude does not automatically load project
.envfiles. We recommend using the/providercommand for setup, which saves provider profiles and credentials in.openclaude-profile.json. If you prefer environment variables, export them explicitly or run `open