No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by LayerNorm · Codex Skill · ★ 182
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is overlay-web safe to install? View the security audit →
Overlay Overlay is an open-source workspace where humans and AI agents share context and get work done together. Keep knowledge in one place, delegate repeatable work to agents, review what they produce, and take action through connected tools. 🔗 Try Overlay Why Overlay Most AI products stop at a single answer. Overlay is built around the next step: a person and one or more agents working in the same context. A human can set direction, provide files and memory, ask an agent to research or execute a task, inspect the result, and decide what happens next. The workspace is the shared layer between people and agents. Conversations, notes, files, projects, connected apps, and automations can be combined without moving work between separate tools. Overlay is designed to stay provider-neutral as models and agent runtimes change. Documentation Developer & self-hosting docs — local setup, runtime config, deployment, API reference. Quickstart — get the web app running locally. API Reference — generated from . Security policy — reporting, launch controls, and secret handling. Run before publishing docs changes. Powered By <div a
| Stars | 182 |
| Forks | 23 |
| Language | TypeScript |
| Category | Codex Skill |
| License | AGPL-3.0 |
| Quality Score | 75.2432496571001/100 |
| Open Issues | 7 |
| Last Updated | 2026-10-04 |
| Created | 2026-01-13 |
| Platforms | browser, node |
| Est. Tokens | ~16k |
These tools work well together with overlay-web for enhanced workflows:
Looking for a overlay-web alternative? If you're comparing overlay-web with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
The open source AI operating system
Daymon puts your favorite AI to work 24/7. It schedules, remembers, and orchestrates your own virtual team. Fr
Professional Claude Code marketplace with 140 development tools: 67 skills, 28 commands, 30 agents, 15 workflo
Sync MCP servers, Skills, Agents & Commands across Claude Code, Cursor, OpenCode, Codex. One config, all tools
Claude Code Skills for software engineering workflows - Git automation, testing, and code review
Giselle: AI App Builder. Open Source.
Explore other popular codex skill tools:
overlay-web is The control plane for your AI employees. It is categorized as a Codex Skill with 182 GitHub stars.
overlay-web is primarily written in TypeScript. It covers topics such as ai, ai-agents, automation.
You can find installation instructions and usage details in the overlay-web GitHub repository at github.com/LayerNorm/overlay-web. The project has 182 stars and 23 forks, indicating an active community.
overlay-web is released under the AGPL-3.0 license, making it free to use and modify according to the license terms.
The top alternatives to overlay-web on Agent Skills Hub include overlay-web, daymon, luxor-claude-marketplace. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: