sageox/ox
The hivemind for AI coding agents — persistent team context recorded once and recalled across agents, machines, and teammates.
ARCHETYPE
Orchestrator
A bench of specialised subagents. The main agent mostly delegates.
Copy this rig
# review before running: this installs third-party code $ claude mcp add --transport http sageox https://sageox.ai/mcp $ npx degit sageox/ox/.claude ./rig-ox # inspect, then merge into .claude/
MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ claude mcp add --transport http sageox https://sageox.ai/mcp $ npx degit sageox/ox/.claude/skills/monitor-pr .claude/skills/monitor-pr $ npx degit sageox/ox/.claude/skills/review-incoming-pr .claude/skills/review-incoming-pr $ npx degit sageox/ox/.claude/skills/sageox .claude/skills/sageox $ npx degit sageox/ox/.claude/skills/security-review .claude/skills/security-review $ npx degit sageox/ox/claude-plugin/skills/ox .claude/skills/ox $ npx degit sageox/ox/extensions/addons/agent-toolkit/skills/agent-toolkit .claude/skills/agent-toolkit $ npx degit sageox/ox/extensions/addons/post-cutoff-jev/skills/post-cutoff-jev .claude/skills/post-cutoff-jev $ npx degit sageox/ox/extensions/addons/post-cutoff/skills/post-cutoff .claude/skills/post-cutoff $ npx degit sageox/ox/extensions/skills/ox-cli-attest .claude/skills/ox-cli-attest $ npx degit sageox/ox/extensions/skills/ox-cli-cart-done .claude/skills/ox-cli-cart-done $ npx degit sageox/ox/extensions/skills/ox-cli-cart-drop .claude/skills/ox-cli-cart-drop $ npx degit sageox/ox/extensions/skills/ox-cli-cart-start .claude/skills/ox-cli-cart-start $ npx degit sageox/ox/extensions/skills/ox-cli-cart .claude/skills/ox-cli-cart $ npx degit sageox/ox/extensions/skills/ox-cli-consult .claude/skills/ox-cli-consult $ npx degit sageox/ox/extensions/skills/ox-cli-conversation .claude/skills/ox-cli-conversation $ npx degit sageox/ox/extensions/skills/ox-cli-decision .claude/skills/ox-cli-decision $ npx degit sageox/ox/extensions/skills/ox-cli-doctor .claude/skills/ox-cli-doctor $ npx degit sageox/ox/extensions/skills/ox-cli-init .claude/skills/ox-cli-init $ npx degit sageox/ox/extensions/skills/ox-cli-plan .claude/skills/ox-cli-plan $ npx degit sageox/ox/extensions/skills/ox-cli-pr-header .claude/skills/ox-cli-pr-header $ npx degit sageox/ox/extensions/skills/ox-cli-prime .claude/skills/ox-cli-prime $ npx degit sageox/ox/extensions/skills/ox-cli-recap .claude/skills/ox-cli-recap $ npx degit sageox/ox/extensions/skills/ox-cli-session-abort .claude/skills/ox-cli-session-abort $ npx degit sageox/ox/extensions/skills/ox-cli-session-list .claude/skills/ox-cli-session-list $ npx degit sageox/ox/extensions/skills/ox-cli-session-review .claude/skills/ox-cli-session-review $ npx degit sageox/ox/extensions/skills/ox-cli-session-start .claude/skills/ox-cli-session-start $ npx degit sageox/ox/extensions/skills/ox-cli-session-status .claude/skills/ox-cli-session-status $ npx degit sageox/ox/extensions/skills/ox-cli-session-stop .claude/skills/ox-cli-session-stop $ npx degit sageox/ox/extensions/skills/ox-cli-skill-manager .claude/skills/ox-cli-skill-manager $ npx degit sageox/ox/extensions/skills/ox-cli-status .claude/skills/ox-cli-status $ npx degit sageox/ox/extensions/skills/ox-cli-viz .claude/skills/ox-cli-viz $ npx degit sageox/ox/extensions/skills/ox-cli-walkthrough .claude/skills/ox-cli-walkthrough
$ curl -fsSL --create-dirs -o .claude/agents/byok-token-security-expert.md https://raw.githubusercontent.com/sageox/ox/main/.claude/agents/byok-token-security-expert.md $ curl -fsSL --create-dirs -o .claude/agents/mcp-server-security-expert.md https://raw.githubusercontent.com/sageox/ox/main/.claude/agents/mcp-server-security-expert.md $ curl -fsSL --create-dirs -o .claude/agents/opengrep-rule-engineer.md https://raw.githubusercontent.com/sageox/ox/main/.claude/agents/opengrep-rule-engineer.md $ curl -fsSL --create-dirs -o .claude/agents/pentester.md https://raw.githubusercontent.com/sageox/ox/main/.claude/agents/pentester.md $ curl -fsSL --create-dirs -o .claude/agents/supply-chain-analyst.md https://raw.githubusercontent.com/sageox/ox/main/.claude/agents/supply-chain-analyst.md $ curl -fsSL --create-dirs -o .claude/agents/threat-modeler.md https://raw.githubusercontent.com/sageox/ox/main/.claude/agents/threat-modeler.md
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} MCP servers (1)
| server | source | est. tokens |
|---|---|---|
| sageox.ai · "sageox" | remote · remote | 2.5k |
Skills (32)
monitor-prreview-incoming-prsageoxsecurity-reviewoxagent-toolkitpost-cutoff-jevpost-cutoffox-cli-attestox-cli-cart-doneox-cli-cart-dropox-cli-cart-startox-cli-cartox-cli-consultox-cli-conversationox-cli-decisionox-cli-doctorox-cli-initox-cli-planox-cli-pr-headerox-cli-primeox-cli-recapox-cli-session-abortox-cli-session-listox-cli-session-reviewox-cli-session-startox-cli-session-statusox-cli-session-stopox-cli-skill-managerox-cli-statusox-cli-vizox-cli-walkthrough
Subagents (6)
| byok-token-security-expert | BYOK (Bring-Your-Own-Key) and OAuth token security expert. Deep on cross-platform OS keychain integration (macOS Keychain, Linux Secret Service / kwallet / gnome-keyring, Windows Credential Manager), |
| mcp-server-security-expert | Model Context Protocol (MCP) security expert. Deep on tool dispatch validation, schema enforcement, server impersonation defenses, transport (stdio/SSE) trust assumptions, and the emergent attack surf |
| opengrep-rule-engineer | Expert in OpenGrep (FOSS Semgrep fork) and Semgrep rule authoring. Writes precise patterns, taint-tracking rules, framework-specific entry-point detectors, and metavariable-based queries. Knows the YA |
| pentester | Adversarial security expert. Thinks like an attacker — chains primitives into exploits, finds auth bypass, IDOR, SSRF, deserialization, race conditions, business-logic abuse. Use PROACTIVELY when revi |
| supply-chain-analyst | Software supply-chain security expert. Deep on Socket.dev (behavioral package analysis), Syft (SBOM generation), Grype (CVE matching), OSV-Scanner (multi-ecosystem advisories), govulncheck (Go reachab |
| threat-modeler | Threat-modeling specialist using STRIDE, PASTA, and LINDDUN. Builds and updates data-flow diagrams, identifies trust boundaries, enumerates threats per element, and ties each threat to a concrete miti |
Hooks (8)
| event | matcher | runs |
|---|---|---|
| PostToolUse | * | if command -v ox >/dev/null 2>&1; then AGENT_ENV=claude-code ox agent hook PostToolUse 2>&1 || true; else _ox_p=""; _ox_home="${HOME:-}"; [ -n "${GOBIN:-}" ] && [ -x "${GOBIN:-}/ox" ] && _ox_p="${GOBIN:-}"; [ -z "$_ox_p" ] && if command -v |
| PreCompact | * | if command -v bd >/dev/null 2>&1; then bd prime 2>&1 || true; else echo '{"sageox": {"notice": "This repo uses SageOx: install https://github.com/sageox/ox for optimized team context."}}'; fi |
| PreCompact | * | if command -v ox >/dev/null 2>&1; then AGENT_ENV=claude-code ox agent hook PreCompact 2>&1 || true; else _ox_p=""; _ox_home="${HOME:-}"; [ -n "${GOBIN:-}" ] && [ -x "${GOBIN:-}/ox" ] && _ox_p="${GOBIN:-}"; [ -z "$_ox_p" ] && if command -v g |
| SessionEnd | * | if command -v ox >/dev/null 2>&1; then AGENT_ENV=claude-code ox agent hook SessionEnd 2>&1 || true; else _ox_p=""; _ox_home="${HOME:-}"; [ -n "${GOBIN:-}" ] && [ -x "${GOBIN:-}/ox" ] && _ox_p="${GOBIN:-}"; [ -z "$_ox_p" ] && if command -v g |
| SessionStart | * | if command -v bd >/dev/null 2>&1; then bd prime 2>&1 || true; else echo '{"sageox": {"notice": "This repo uses SageOx: install https://github.com/sageox/ox for optimized team context."}}'; fi |
| SessionStart | * | if command -v ox >/dev/null 2>&1; then AGENT_ENV=claude-code ox agent hook SessionStart 2>&1 || true; else _ox_p=""; _ox_home="${HOME:-}"; [ -n "${GOBIN:-}" ] && [ -x "${GOBIN:-}/ox" ] && _ox_p="${GOBIN:-}"; [ -z "$_ox_p" ] && if command -v |
| Stop | * | if command -v ox >/dev/null 2>&1; then AGENT_ENV=claude-code ox agent hook Stop 2>&1 || true; else _ox_p=""; _ox_home="${HOME:-}"; [ -n "${GOBIN:-}" ] && [ -x "${GOBIN:-}/ox" ] && _ox_p="${GOBIN:-}"; [ -z "$_ox_p" ] && if command -v go >/de |
| UserPromptSubmit | * | if command -v ox >/dev/null 2>&1; then AGENT_ENV=claude-code ox agent hook UserPromptSubmit 2>&1 || true; else _ox_p=""; _ox_home="${HOME:-}"; [ -n "${GOBIN:-}" ] && [ -x "${GOBIN:-}/ox" ] && _ox_p="${GOBIN:-}"; [ -z "$_ox_p" ] && if comman |
Slash commands (15)
/feature-design/ox-agents/ox-cart-done/ox-cart-drop/ox-cart-start/ox-cart/ox-session-abort/ox-session-list/ox-session-pause/ox-session-recover/ox-session-resume/ox-session-review/ox-session-start/ox-session-status/release
Similar rigs
lamngockhuong/termote
Self-hosted PWA to control Claude Code, Codex, GitHub Copilot or any terminal from your phone or desktop. Single Go binary streaming tmux/psmux/Herdr sessions to xterm.js, native or in a container.
Pragmatist 20.9k tok ·
crewship-ai/crewship
Self-hosted runtime for AI coding agents. Real Linux containers, your hardware, your keys, your data.
Pragmatist 3.1k tok ·
thewaltero/mythos-router
The leaked Anthropic reasoning protocol. Running locally. Zero-drift coding with Strict Write Discipline and adaptive Claude Opus 5 thinking. Mythos
Minimalist 2.2k tok ·
ker0olos/ignite
The only AI coding app you'll need. Run agents in parallel. Hand off tasks that come back as pull requests. Draw on screenshots to show exactly what's wrong. Native macOS, sandboxed by default.
Pragmatist 16.8k tok ·