JavaClaw — security grade SAFE, quality 73/100

Security audit verdict: SAFE · quality 73/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by ClawRunr · Codex Skill · ★ 755

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is JavaClaw safe to install? View the security audit →

About JavaClaw

JavaClaw JavaClaw is a Java-based personal AI assistant that runs on your own devices. It acts as a control plane (gateway) for an AI agent that can interact across multiple communication channels, manage tasks, execute shell commands, browse the web, and more — all while keeping your data local. NOTE: this project was originally created as a demo to show the use of JobRunr, JavaClaw is now an open invitation to the Java community, let’s build the future of Java-based AI agents together ☕. Features Multi-Channel Support — Chat UI (WebSocket), Telegram, Discord, and an extensible plugin-based channel architecture Task Management — Create, schedule (one-off, delayed, or recurring via cron), and track tasks as human-readable Markdown files Extensible Skills — Load skills from and from packages on the classpath LLM Provider Choice — Plug in OpenAI, Anthropic, or Ollama (local); switchable during onboarding MCP Support — Model Context Protocol client for connecting external tool servers Shell & File Access — Agent can read/write files and run bash commands on your machine Smart Web Tools — Brave web search and intelligent web scraping Background Jobs — Powered by JobRunr with a...

javajobrunropenclaw

Quick Facts

Stars755
Forks165
LanguageJava
CategoryCodex Skill
LicenseLGPL-3.0
Quality Score73.3300803376806/100
Open Issues26
Last Updated2026-09-15
Created2026-03-17
Platformsjava
Est. Tokens~18k

Compatible Skills

These tools work well together with JavaClaw for enhanced workflows:

  • yu-ai-agent — semantic(0.63)+complementary+shared_fw(spring)+same_lang+similar_pop+shared_platform (80%)
  • spring-boot-skills — semantic(0.59)+complementary+shared_fw(spring)+same_lang+similar_pop+shared_platform (79%)
  • yu-ai-agent — semantic(0.66)+complementary+shared_fw(spring)+same_lang+similar_pop+shared_platform (76%)
  • spring-ai — semantic(0.64)+complementary+shared_fw(spring)+same_lang+similar_pop+shared_platform (75%)
  • api2mcp4j — semantic(0.63)+complementary+shared_fw(spring)+same_lang+similar_pop+shared_platform (75%)

JavaClaw alternative? Top 6 similar tools

Looking for a JavaClaw alternative? If you're comparing JavaClaw with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • JavaClaw by jobrunr · ⭐ 682

    JavaClaw, a Java version of OpenClaw built on Spring Boot, Spring AI and JobRunr

  • java-sdk by modelcontextprotocol · ⭐ 3.7k

    The official Java SDK for Model Context Protocol servers and clients. Maintained in collaboration with Spring

  • buildwithclaude by davepoon · ⭐ 3.5k

    A single hub to find Claude Skills, Agents, Commands, Hooks, Plugins, and Marketplace collections to extend Cl

  • solon by opensolon · ⭐ 2.8k

    🔥 Java enterprise application development framework for full scenario: Restrained, Efficient, Open, Ecologica

  • jadx-ai-mcp by zinja-coder · ⭐ 2.7k

    Plugin for JADX to integrate MCP server

  • skillshare by runkids · ⭐ 2.7k

    📚 Sync skills across all AI CLI tools with one command and simplify team sharing. Supporting Codex, Claude Co

More Codex Skill Tools

Explore other popular codex skill tools:

View all Codex Skill tools →

Popular Java Agent Tools

Frequently Asked Questions

What is JavaClaw?

JavaClaw is JavaClaw, a Java version of OpenClaw built on Spring Boot, Spring AI and JobRunr. It is categorized as a Codex Skill with 755 GitHub stars.

What programming language is JavaClaw written in?

JavaClaw is primarily written in Java. It covers topics such as java, jobrunr, openclaw.

How do I install or use JavaClaw?

You can find installation instructions and usage details in the JavaClaw GitHub repository at github.com/ClawRunr/JavaClaw. The project has 755 stars and 165 forks, indicating an active community.

What license does JavaClaw use?

JavaClaw is released under the LGPL-3.0 license, making it free to use and modify according to the license terms.

What are the best alternatives to JavaClaw?

The top alternatives to JavaClaw on Agent Skills Hub include JavaClaw, java-sdk, buildwithclaude. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Codex Skill tools