Maintainer of this skill?
Automated security scan — not a certification.
by yyjeqhc
Give cloud AI agents a real development environment on your own machines.
# Add to your Claude Code skills
git clone https://github.com/yyjeqhc/webcodexLast scanned: 9/9/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-09-09T08:40:16.059Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how webcodex compares with popular alternatives.
webcodex is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by yyjeqhc. Give cloud AI agents a real development environment on your own machines. It has 2,399 GitHub stars.
Yes. webcodex passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/yyjeqhc/webcodex" and add it to your Claude Code skills directory (see the Installation section above).
webcodex is primarily written in Rust. It is open-source under yyjeqhc on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh webcodex against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
WebCodex is a self-hosted tool runtime: a Server authenticates requests and routes them to a Runner on the machine that owns the repository. Ask your assistant to inspect a repository, modify code, run tests, use Git, or investigate a failure. You do not need to move the project into a hosted workspace; requested file content and other tool results can still be returned to the AI client.
For a temporary one-repository trial, start with Quick Trial and webcodex share. For a persistent setup, the unified installer workflow below is under development; see the validation status before choosing an artifact. Once a validated installer is available, choose the setup that matches where your code lives:
The build pipeline defines unified Windows NSIS, macOS package, and Debian 12 / Ubuntu 22.04+ .deb installer targets for x64 and arm64. The six installer variants still require native build and installation acceptance before release. Real-machine installation, reboot persistence, GUI behavior, and upgrade have not been accepted across all three platforms; this documentation makes no claim of identical cross-platform behavior. Published files are listed in GitHub Releases. The download/ directory contains static page source only; the download-page workflow builds a Release-manifest-based GitHub Actions artifact after publication, but does not host or deploy a page. For a source preview, check out the exact feature or release revision you intend to evaluate and follow Desktop development.
For Linux machines that join an existing Server without Desktop, see Runtime installation and CLI join. For advanced self-hosting, npm/runtime archives, Docker, or historical release artifacts, see Deployment.
AI client
|
| MCP / HTTPS
v
WebCodex Server
|
| authenticated Runner connection
v
Runner on your machine
|
+-- repository
+-- Git
+-- compilers / tests / developer tools
For the internal Server/Runner architecture, protocol surfaces, and authority boundaries, see Architecture, MCP, and Authentication.
This chart tracks the upstream yyjeqhc/webcodex repository.
The unified installer targets Windows NSIS, macOS, and Debian 12 / Ubuntu 22.04+ .deb on x64 and arm64. The build pipeline defines these targets; the six installer variants still require native build and installation acceptance before release. See Unified installation and the validation checklist. Existing release artifacts and npm/Docker deployment paths remain documented as advanced historical/current compatibility references in Deployment.
shareWebCodex can read and modify files and execute commands inside configured project boundaries. Use version control, keep credentials out of prompts/logs/Git, and register only project roots the assistant should access. Tool results, including requested file excerpts, may be returned to the AI client. Read SECURITY.md for the complete model.
If a release has a problem, you do not need to wait for a maintainer to produce a
new build. Reproducing the issue on current main, testing a focused fix locally,
and submitting the result as a pull request are all welcome.
For CLI / Server / Runner development, install Git and the stable Rust toolchain through rustup, then build the normal dogfood profile:
cargo build --locked --profile dogfood --workspace --bins
The binaries are written under target/dogfood/. For Desktop/frontend work, also
install Node.js 22 + npm and the native platform toolchain. Windows Desktop
development needs an MSVC/Windows SDK environment; macOS development needs Xcode
Command Line Tools. The complete prerequisites and source-build workflow are in the
Desktop development guide.
For local Desktop installer testing, use the repository helpers rather than a r