No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by YaoApp · MCP Server · ★ 7.9k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is yao safe to install? View the security audit →
Yao Agents ✨ All your agents and workspaces in one place, on every device you own. Track tasks on a board, accessible from desktop, mobile, browser, or API. Self-hosted. 🏠 Homepage: https://yaoagents.com 📚 Docs: https://yaoagents.com/docs 🖥️ Yao Desktop: https://yaoagents.com/download ⚡⚡⚡ DeepSeek Harness is now integrated — use it directly in the desktop app or browser, running across your devices. This README was written with DeepSeek Harness in the Yao Agents Android app (beta) and published automatically. How it works Agents run on your own devices. Every machine you add is another place for them to work, all managed from one place. Workspaces Every workspace is isolated. Work stays separate, managed across all your computers, and accumulates into documents that become your knowledge base. While working, agents can read what they need from any node. Task Board Say what you need in a conversation, and it becomes a task on your board. Keep the conversation going, keep it running, and it improves with use, growing into an agent purpose-built for this kind of work. Connect task agents to your apps, or share them with others.
| Stars | 7,921 |
| Forks | 706 |
| Language | Go |
| Category | MCP Server |
| Quality Score | 47.3901976968222/100 |
| Open Issues | 7 |
| Last Updated | 2026-09-10 |
| Created | 2021-09-06 |
| Platforms | browser, claude-code, go, mcp |
| Est. Tokens | ~15k |
These tools work well together with yao for enhanced workflows:
Looking for a yao alternative? If you're comparing yao with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Agent OS: the agent gets smarter on its own. We just hold the line: Interview-gated, staged evaluation, budget
A persistent, unified memory layer for all your AI agents (e.g. Claude Code, Codex, DSH), backed by Markdown a
Enterprise-grade, local-first Agent Workbench for people and agent teams. A unified multi-engine workspace for
Local-first desktop widget for tracking token usage, costs, and limits across 36+ AI coding tools—including Cl
One portable memory layer for every AI agent: local-first, Markdown-native, user-owned, and self-evolving acro
Self-evolving memory OS for LLM & AI Agents: ultra-persistent memory, hybrid-retrieval, and cross-task skill r
Explore other popular mcp server tools:
yao is ✨ All your agents and workspaces in one place, on every device you own. Track tasks on a board, accessible from desktop, mobile, browser, or API. Self-hosted.. It is categorized as a MCP Server with 7.9k GitHub stars.
yao is primarily written in Go. It covers topics such as agent-harness, agent-orchestration, agent-skills.
You can find installation instructions and usage details in the yao GitHub repository at github.com/YaoApp/yao. The project has 7.9k stars and 706 forks, indicating an active community.
The top alternatives to yao on Agent Skills Hub include ouroboros, memsearch, iPolloWork. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: