Skillget

aura-work

mcp
Security Audit
Warn
Health Warn
  • License — License: Apache-2.0
  • No description — Repository has no description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 6 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

README.md

Aura Work

License: Apache-2.0
CI

Current status: 0.1.0-alpha.1 — under active security hardening.

Open-source, multi-provider desktop AI agent platform — local-first, permission-gated, self-hostable.

Alpha warning: Do not use Aura Work for sensitive workspaces or production automation. VM isolation, signed installers, and several experimental features are incomplete or disabled by default.

Maintainer and contributions

Aura Work is maintained by Habib (hbx12). Suggestions are reviewed actively, and useful ideas are turned into tracked implementation work with focused issues so contributors can pick up clear tasks without duplicating effort.

Please comment on an issue before starting work so effort is not duplicated.

Alpha limitations

Area Status
Shell execution Host process fallback is disabled by default. WSL2 or a verified isolated backend is required. Dev override: AURA_ALLOW_UNSAFE_HOST_EXECUTION=1 (development only).
Computer use Disabled by default. Enable only for local dev: AURA_ENABLE_EXPERIMENTAL_COMPUTER_USE=1.
VM image Bundled artifact may be a development placeholder until a signed production image ships.
Signed releases Release pipeline requires minisign, SBOM, checksums, and installers — not claimed ready until published.
Sidecar auth Local services require per-session internal Bearer tokens (localhost is not treated as sufficient).

Features (alpha)

  • Multi-provider AI (OpenAI/ChatGPT Codex, Anthropic, Gemini, DeepSeek, Ollama) with routing
  • Encrypted local vault — keys stored with OS-backed secure storage when available
  • Task agent with file tools, Git, VM shell, browser, plugins/MCP
  • 20 languages with RTL (Arabic, Persian)
  • Integrated docs at hbx12.github.io/aura-work (when deployed)

Quick start (development)

npm install
npm run build:sidecars
npm start

Sidecars start automatically from the Tauri app with per-session internal auth tokens.

Manual sidecar development requires AURA_SIDECAR_AUTH_TOKEN (32+ chars) in the environment. See docs/development.md.

Build from source

npm run build:sidecars
npm run stage:bundle
npm run build
cd apps\desktop
npm run tauri build

Installers are produced under apps/desktop/src-tauri/target/release/bundle/ when the build succeeds.

Privacy & security

  • No telemetry by default
  • API keys stored encrypted locally; never synced to Aura Cloud
  • High-impact actions require explicit approval
  • See SECURITY.md for vulnerability reporting

Documentation

Community

License

Apache-2.0 — see LICENSE, NOTICE, and THIRD-PARTY-NOTICES.

Reviews (0)

No results found