by heypinchy · Codex Skill · ★ 184
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 184 |
| Forks | 23 |
| Language | TypeScript |
| Category | Codex Skill |
| License | AGPL-3.0 |
| Quality Score | 64/100 |
| Open Issues | 157 |
| Last Updated | 2026-10-24 |
| Created | 2026-02-18 |
| Platforms | docker, node |
| Est. Tokens | ~16k |
Pinchy Self-hosted AI agent platform built on OpenClaw. Enterprise-ready. Offline-capable. Open source. Docs • Website • Blog • Discussions • LinkedIn What is Pinchy? Pinchy is an enterprise layer on top of [OpenClaw]
These tools work well together with pinchy for enhanced workflows:
Looking for a pinchy alternative? If you're comparing pinchy with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Open-source, self-hosted control plane for OpenClaw and Hermes AI-agent fleets on Docker/Kubernetes — REST, CL
A Python library powered by Language Models (LLMs) for conversational data discovery and analysis.
Next-gen AI-native server ops panel with an in-workspace SRE agent. Crash self-healing, safe rollbacks, Docker
Command a fleet of AI agents, on every deck, every desk, every wrist. Self-hosted multi-agent platform with me
[archived] c4 GenAI Suite
Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor,
Explore other popular codex skill tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: