No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by xenodium · Codex Skill · ★ 1.9k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is agent-shell safe to install? View the security audit →
#+TITLE: Emacs Agent Shell #+AUTHOR: Álvaro Ramírez [[https://melpa.org/#/agent-shell][file:https://melpa.org/packages/agent-shell-badge.svg]] 👉 [[https://github.com/sponsors/xenodium][Support this work via GitHub Sponsors]] by [[https://github.com/xenodium][@xenodium]] (check out my [[https://xenodium.com][blog]]) [[file:agent-shell.png]] This project needs your funding As you pay for those useful LLM tokens, consider [[https://github.com/sponsors/xenodium][sponsoring]] development and maintenance of this project. With your help, I can make this effort more [[https://github.com/sponsors/xenodium][sustainable]]. Thank you! [[https://xenodium.com/][Alvaro]] agent-shell A native Emacs shell to interact with LLM agents powered by ACP ([[https://agentclientprotocol.com][Agent Client Protocol]]). With agent-shell, you can chat with the likes of Gemini CLI, Claude Code, Auggie, Mistral Vibe, or any other ACP-driven agent. Watch on [[https://www.youtube.com/watch?v=R2Ucr3amgGg][YouTube]] [[https://www.youtube.com/watch?v=R2Ucr3amgGg][file:yt.png]] News [[https://xenodium.com/agent-shell-0-25-updates][agent-shell 0.25 updates]].
| Stars | 1,870 |
| Forks | 237 |
| Language | Emacs Lisp |
| Category | Codex Skill |
| License | GPL-3.0 |
| Quality Score | 55.1058636591282/100 |
| Open Issues | 22 |
| Last Updated | 2026-09-21 |
| Created | 2025-09-09 |
| Platforms | claude-code, codex, gemini |
| Est. Tokens | ~28k |
These tools work well together with agent-shell for enhanced workflows:
Looking for a agent-shell alternative? If you're comparing agent-shell with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Effici
Desktop AI Assistant powered by GPT-6, GPT-5, Gemini, Claude, Ollama, Grok, DeepSeek, Perplexity, chat, agents
Overture is an open-source, locally running web interface delivered as an MCP (Model Context Protocol) server
TalkToFigma: MCP integration between AI Agent (Cursor, Claude Code, Codex) and Figma, allowing Agentic AI to c
The world's first open-source AI-native vector design tool and the first to feature concurrent Agent Teams. De
⚡️AI Cloud OS: Open-source enterprise-level AI knowledge base and MCP (model-context-protocol)/A2A (agent-to-a
Explore other popular codex skill tools:
agent-shell is A native Emacs buffer to interact with LLM agents powered by ACP. It is categorized as a Codex Skill with 1.9k GitHub stars.
agent-shell is primarily written in Emacs Lisp. It covers topics such as ai, claude, claude-code.
You can find installation instructions and usage details in the agent-shell GitHub repository at github.com/xenodium/agent-shell. The project has 1.9k stars and 237 forks, indicating an active community.
agent-shell is released under the GPL-3.0 license, making it free to use and modify according to the license terms.
The top alternatives to agent-shell on Agent Skills Hub include Unity-MCP, py-gpt, Overture. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: