Skillget

robota

agent
Security Audit
Fail
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 16 GitHub stars
Code Fail
  • rm -rf — Recursive force deletion command in .agents/skills/deploy-to-vercel/resources/deploy-codex.sh
  • rm -rf — Recursive force deletion command in .agents/skills/deploy-to-vercel/resources/deploy.sh
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose

This project is a TypeScript framework and SDK for building AI agents with multi-provider support, tool calling, and an interactive CLI coding assistant.

Security Assessment

As an agentic framework, the software inherently executes shell commands and makes network requests to AI provider APIs (Anthropic, OpenAI, Google) based on user prompts. The automated scan did not flag any hardcoded secrets or dangerous application permissions. However, the scan did fail due to recursive force deletion (`rm -rf`) commands found inside deployment resource scripts (`.agents/skills/deploy-to-vercel/`). While standard for shell-based deployment routines, these commands warrant a quick manual review to ensure they strictly target the intended build directories. Overall risk is rated as Medium, which is standard for developer tools designed to execute local system commands and manage external API communications.

Quality Assessment

The project is actively maintained, with its most recent push occurring today. It is distributed under the permissive and standard MIT license. Community trust is currently in its early stages, reflected by a modest 16 GitHub stars. Despite the small user base, the repository is well-documented, features a clear modular architecture, and provides a dedicated documentation website.

Verdict

Use with caution: the framework is actively maintained and transparent, but standard care should be taken when granting an AI coding assistant local shell execution permissions.
SUMMARY

TypeScript framework for building AI agents — multi-provider (Anthropic, OpenAI, Google), tool calling, permissions, hooks, streaming, and CLI coding assistant

README.md

Robota - AI Agent Framework

A TypeScript framework for building AI agents with multi-provider support, tool calling, and extensible plugin architecture.

Robota CLI

Quick Start

CLI — AI Coding Assistant

npm install -g @robota-sdk/agent-cli
robota

macOS users: Korean/CJK IME input may crash macOS Terminal.app. Use iTerm2 instead. This is a known Ink + Terminal.app issue shared with Claude Code.

SDK — Programmatic Usage

import { query } from '@robota-sdk/agent-sdk';

const response = await query('List all TypeScript files in src/');

Core — Build Custom Agents

import { Robota } from '@robota-sdk/agent-core';
import { AnthropicProvider } from '@robota-sdk/agent-provider-anthropic';

const agent = new Robota({
  name: 'MyAgent',
  aiProviders: [new AnthropicProvider({ apiKey: process.env.ANTHROPIC_API_KEY })],
  defaultModel: {
    provider: 'anthropic',
    model: 'claude-sonnet-4-6',
    systemMessage: 'You are a helpful assistant.',
  },
});

const response = await agent.run('Hello!');

Architecture

agent-cli         ← Interactive terminal AI coding assistant
  ↓
agent-sdk         ← Assembly layer: config, context, session factory, query()
  ↓
agent-sessions    ← Session lifecycle: permissions, hooks, compaction
agent-tools       ← Tool infrastructure + 8 built-in tools
agent-providers   ← AI provider implementations
  ↓
agent-core        ← Foundation: Robota engine, abstractions, plugins

Packages

Package Description
@robota-sdk/agent-core Core agent runtime, abstractions, and plugin system
@robota-sdk/agent-tools Tool registry, FunctionTool, and 8 built-in tools
@robota-sdk/agent-sessions Session with permissions, hooks, and compaction
@robota-sdk/agent-sdk Assembly layer with config/context loading and query()
@robota-sdk/agent-provider-anthropic Anthropic Claude provider
@robota-sdk/agent-cli Interactive terminal AI coding assistant

Documentation

Full documentation at robota.io

Development

pnpm install
pnpm build
pnpm test

Node.js 18+ required. See Development Guide for details.

License

MIT

Reviews (0)

No results found