Memnox Runtime — AI skill for Claude Code
Let AI agents work autonomously.
How to install Memnox Runtime
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open Memnox/memnox-runtime and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Memnox Runtime does
Let AI agents work autonomously. Memnox rules on every tool call Claude Code, Codex, Cursor, Gemini CLI and Windsurf make, before it runs: allow, ask or deny. Runs on your machine, needs no account, and no model decides anything. npm install -g memnox
Alternatives in AI
- AIHawk — Open-source AI browser agent: describe any task in plain language and it autonomously browses, clicks, types a 30.3k ★
- Hexstrike AI — HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomousl 8.2k ★
- Open Multi Agent — TypeScript multi-agent orchestration engine — one runTeam() call from goal to result 5.8k ★
README
BEFORE YOU LEAVE AN AGENT RUNNING
Your agents can already do the work.
Memnox makes it safe to let them do it without you.
Claude Code · Codex · Cursor · Gemini CLI · Windsurf, and what Cline, Hermes, OpenClaw and Ruflo can reach
Set it up once. Every agent is governed inside the session it already works in.
No model decides anything. Your code and your secrets never leave your machine.
**Memnox is an open source runtime that tells you what you can safely let your AI coding agent do next.** It rules on every tool call Claude Code, Codex, Cursor, Gemini CLI or Windsurf makes, before the call runs, with one of three verdicts: **allow**, **ask** or **deny**. It runs on your machine, needs no account, and no model decides anything.
You already have agents that read your files, run your shell, push to your repositories and call your MCP servers. Memnox sits inside each of their sessions: what is allowed goes ahead, what is denied is refused with a way forward, and what needs a person ask
Related Skills
Auto Guard
A cached auto command review guard for AI coding agents — rules, memory and LLM verdicts (allow/deny/ask) befo
Salient Core
Guardrail and permission layer for AI agent harnesses. A default-deny control kernel that gates every tool cal
Dsh Auto Review
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns stru
Ask Kilo
Get an advisory second opinion from an external non-Claude model via the kilo CLI. Prompt-only — kilo never se
PrivAiTe
Self-hosted PII redaction proxy for LLM APIs and agent CLIs. Scrubs names, emails and secrets from Claude Code
Radius
AI agents run shell commands on your machine. One hallucination = rm -rf or leaked ~/.ssh. RADIUS intercepts e
Related Agents
Permissions Manager
Manage tool permission rules. Use when user says 'allow', 'deny', or 'ask' for a command, wants to modify perm
Ask
Quick single-shot query to Codex or Gemini — second opinion, cross-review, or comparison
Permission Analyst
Recommends allow/deny permission rules from denial telemetry and policy via PromptWise. Use to reduce permissi
