by vastsa
Local-first AI coding agent desktop: Electron + Rust host core + pi Agent Harness + user-installable plugins
# Add to your Claude Code skills
git clone https://github.com/vastsa/PI-DesktopLast scanned: 9/8/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-09-08T08:38:09.139Z",
"npmAuditRan": false,
"pipAuditRan": true,
"promptInjectionRan": true
}PI-Desktop is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by vastsa. Local-first AI coding agent desktop: Electron + Rust host core + pi Agent Harness + user-installable plugins. It has 951 GitHub stars.
Yes. PI-Desktop passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/vastsa/PI-Desktop" and add it to your Claude Code skills directory (see the Installation section above).
PI-Desktop is primarily written in TypeScript. It is open-source under vastsa on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh PI-Desktop against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Bring your own model. Open any local project. Let agents work — while you stay in control.
No PI-Desktop account. No mandatory relay. No editor lock-in.
Download PI-Desktop · Documentation · Screenshots · 简体中文
A standalone desktop workspace for coding agents, projects, models, tools, and long-running sessions.
[!IMPORTANT] PI-Desktop is currently in Early Preview.
The project is actively developed and already usable for real coding workflows, but APIs, extension interfaces, and some desktop behaviors may continue to evolve.
Most coding agents live inside a terminal, an editor extension, or a hosted service.
PI-Desktop gives them a workspace of their own.
Work across repositories and sessions without tying your agent workflow to one editor or terminal.
Projects, conversations, reviews, files, previews, notifications, and extensions live in one workspace.
Use OpenAI, Anthropic, local models, hosted gateways, or any OpenAI-compatible API.
Configure multiple providers and models, then switch between them per session.
Agents can read files, edit code, and run commands — but privileged actions pass through PI-Desktop's permission layer.
Review diffs, inspect command output, and decide how much autonomy each session gets.
Add Skills, MCP servers, Subagents, and installable Plugins.
Plugins can contribute tools, commands, panels, themes, services, skills, and new workspace experiences.
Getting started only takes a few steps:
Connect a model Open Settings → Model configuration, choose a provider or compatible API, and add your credentials.
Open a project Add any local repository or project directory from the sidebar.
Pick Agent, Plan, or Goal Agent starts working. Plan waits until you approve a frozen implementation plan. Goal waits until you approve the outcome, then the agent chooses the path.
Review the result Inspect edits in the Review panel, check command output, preview the application, and continue the conversation without leaving PI-Desktop.
Same agent. Three gates. Privileged tools still go through the permission layer in every mode.
| Agent | Plan | Goal | |
|---|---|---|---|
| You approve | Nothing extra | The implementation plan | The outcome and acceptance criteria |
| The agent does | Reads, edits, runs commands, tests, iterates | Studies the repo, writes a frozen plan, then waits | Picks the path and works until the goal is met |
| Use when | You want it to just do the work | The change is large or risky and you want the approach first | You care about the result, not the route |
Agent is the default loop: inspect the tree, patch files, run commands, and keep going.
Plan is the approval boundary. The agent researches first and produces an immutable implementation plan. Execution does not start until you sign off.
Goal is outcome-first. You lock the objective and acceptance criteria; the agent decides how to get there.
Large tasks rarely belong in one context window.
PI-Desktop can delegate independent work to background Subagents for things like:
Each Subagent runs in its own context and reports its result back to the parent agent.
PI-Desktop is designed for more than one prompt at a time.
You can manage multiple projects and sessions, pin or archive conversations, branch sessions, queue prompts while an agent is running, reference files with @, use slash commands, and search across the application.
Streaming responses are checkpointed so interrupted work can survive application restarts or runtime failures whenever possible.
PI-Desktop does not lock the agent runtime to a hardcoded model list.
Use:
Model configuration can include context windows, output limits, reasoning controls, temperature, and other model-specific behavior.
Switch models directly from the Composer without recreating your session.
The agent workspace includes dedicated surfaces for the things that matter while coding:
PI-Desktop has several extension layers depending on how deeply you want to customize the agent.
Give agents reusable instructions and workflows.
Skills can be installed globally or activated for individual projects.
Connect external tools and services through Model Context Protocol servers without baking them into the desktop application.
Create specialized agents with their own instructions, tools, and model choices, then delegate work to them from another agent.
Plugins can extend PI-Desktop itself with:
Plugins can be installed locally or through the marketplace using the .piplug package workflow.
[!NOTE] Plugin processes are permission-gated and isolated from the renderer, but plugins are still user-trusted code rather than a complete operating-system sandbox. Only install plugins you trust.
PI-Desktop is local-first, not “nothing ever touches the network.”
| Data | Behavior |
|---|---|
| Conversations | Stored locally as JSONL with a SQLite index |
| Settings | Stored on your machine |
| API credentials | Stored in the operating system keychain |
| Logs | Local |
| PI-Desktop telemetry | None |
| Model requests | Sent directly to the provider or endpoint you configure |
There is no required PI-Desktop account and no mandatory PI-hosted relay between your machine and your model provider.
If you use a remote model provider, the context required for that model request is naturally sent to that provider according to its own privacy policy.
Download the latest build from GitHub Releases.
| Platform | Architecture | Package |
|---|---|---|
| macOS | Apple Silicon | .dmg / .zip |
| macOS | Intel | .dmg / .zip |
| Windows | x64 | NSIS installer |
| Linux | x64 | .AppImage / .deb / .asar |
Packaged builds can check GitHub Releases for updates and surface new versions inside the application. The Linux .asar asset is available for repackaging with a system Electron; launch it with electron PI-Desktop-<version>-linux-x64.asar after adding the native host and packaged resources required by the target distribution.
Linux x64 packages need glibc 2.35 or newer. T