Atlas / MCP servers / nestdevlab / agentwheel

agentwheelCAUTION

Name: agentwheel
Author: nestdevlab

mcp/nestdevlab/agentwheel

MCP server by nestdevlab · Audited 2026-10-12

⚑ Report / re-scan Source ↗

Skills, rules, and instructions across every AI agent. One source, every agent.

Verdict

CAUTION

Grade

Trust score

87 /100

Exposed tools

5 5r · 0w · 0d

Transport

streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

agentwheel

One source. Every agent.

Weave skills, rules, instructions, commands, subagents, MCP, hooks, settings, and plugins across every AI agent you use, from any source, reconciled into each runtime with your private tweaks intact.

Why agentwheel?

Your AI agents are multiplying. OpenClaw, Claude Code, Codex CLI, Copilot, Hermes — and the next harness your team adopts. Each one wants its own skills, rules, instructions, commands, subagents, MCP servers, hooks, and settings, in its own layout.

agentwheel makes that one declared state. Add packages to .agentwheel/config.json, preview the runtime changes, then install the declared state into each target. Updates move tracking sources forward explicitly; installs make the current declaration true.

npm i -g agentwheel
agentwheel init
agentwheel add github:your-org/agent-pack --adapter codex --local --mode tracking
agentwheel plan
agentwheel install

No lock-in. No central gatekeeper. Packages live in plain git repos or local folders, customizations live in your workspace, and runtimes stay generated output.

Install Methods

CLI install

npm i -g agentwheel
agentwheel init

Prefer pnpm? pnpm add -g agentwheel works too.

AI agent handoff

Give an agent install.md when you want it to install Agentwheel, verify the CLI, install the companion skill, and show the right catalogue flow for your runtime.

curl -fsSL https://raw.githubusercontent.com/NestDevLab/agentwheel/main/install.md

Companion skills

The management skill keeps Agentwheel commands and safety rules inside the runtime you are using. Install the discovery skill separately when you also want proactive, non-installing suggestions:

agentwheel doctor --adapter codex --local
agentwheel install

Read from source at commit 5b3208b48757OBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add agentwheel --env AGENTWHEEL_AUTH_CONFIG=${AGENTWHEEL_AUTH_CONFIG} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "agentwheel": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "AGENTWHEEL_AUTH_CONFIG": "${AGENTWHEEL_AUTH_CONFIG}"
      }
    }
  }
}

Exposed tools (5)

5 read · 0 write · 0 destructive.

Tool	Risk	Description
`ai-agent`	read	Build a conversational agent
`code-review`	read	A
`inbox`	read	C
`self-improve`	read	Capture corrections for future sessions
`self-improving-agent`	read	Continuously evolve from experience

Trust audit

CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (6 observation(s))
Network: declared (4 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (16)

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

src/cli/index.ts:4895

identityFile: "~/.ssh/id_ed25519",

Why it matters. touches a credential store

LOWInventory / provenance · inv.hidden_file · CWE-1104

docs/.nojekyll

.nojekyll

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59

test/runtime-target.test.ts:440

identityFile: ".ssh/id_ed25519",

Why it matters. touches a credential store

LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59

test/runtime-target.test.ts:453

identityFile: join(project, ".ssh/id_ed25519"),

Why it matters. touches a credential store

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/targets/plugins/claude.ts:2

import type { Artifact } from "../../model/artifact.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/targets/plugins/codex.ts:2

import type { Artifact } from "../../model/artifact.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/targets/plugins/common.ts:4

import { pathExists } from "../../utils/fs.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/targets/plugins/copilot.ts:2

import type { Artifact } from "../../model/artifact.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/targets/plugins/hermes.ts:2

import type { Artifact } from "../../model/artifact.js";