Stillwright

A quiet maker for your AI agent. It gets to know you, then keeps working on your goals: plans them, finds and vets the right tools, proves every step, and only speaks when it needs you, in five lines or fewer.

Any goal with a way to check it: code, research, writing, launches, operations. It runs inside the agent you already use: Claude Code, Codex, Gemini CLI, OpenCode and any agent that reads Agent Skills.

Why

• Agents say "done" when it isn't. Stillwright passes a step only when an independent check proves it: tests run, page loads, source says so.
• There are too many tools. Thousands of skills, MCP servers and repos, some malicious. Stillwright picks by evidence, reads the code before trusting it, asks you once, and pins it by hash so it can't change silently. If nothing fits, it builds the tool itself.
• Agents talk too much. One inbox (ask, review, notify, idea). Silence is the default.

Install

One line for most agents:

npx plugins add HamzaIlyas/stillwright   # as a plugin: Claude Code, Cursor, Codex, Copilot CLI, VS Code, Grok Build, Kimi Code
npx skills add HamzaIlyas/stillwright    # as skills: 75+ agents, including all of the above

Or the agent's own way:

For a whole team: run sw init in the repository and commit the two files it writes (.claude/settings.json, .github/copilot/settings.json). Everyone who opens the repo gets Stillwright in Claude Code (after trusting the folder) and in Copilot CLI and the Copilot cloud agent.

The skills need the sw binary (a single file, no runtime). Any of these installs it:

# Any OS with Python
pip install stillwright
# Linux / macOS
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/HamzaIlyas/stillwright/releases/latest/download/stillwright-installer.sh | sh
# Windows (PowerShell)
powershell -ExecutionPolicy Bypass -c "irm https://github.com/HamzaIlyas/stillwright/releases/latest/download/stillwright-installer.ps1 | iex"
# From source (needs Rust)
cargo install --git https://github.com/HamzaIlyas/stillwright --locked

On Linux and macOS the skills can also install it on first use (skills/stillwright/scripts/get-sw.sh, pinned to a release version), when you are present to approve it.

Use

New here? The quickstart takes ten minutes, and CI runs every command in it. Also: troubleshooting, Windows notes, coming from OpenClaw or Hermes, a real example run, and a press kit for anyone writing or recording about it.

Tell your agent a goal, or just say "stillwright". The first time, it asks a few short questions to get to know you. After that:

sw status          what's going on, in three lines
sw inbox list      the only things that need you
sw goal add "..."  give it more work

To keep it working while you're away, schedule one loop per hour, for example claude -p "Use the stillwright skill: run one loop, then stop." from cron. Unattended runs never push, deploy, publish or install anything new; those wait in your inbox.

What's inside

All state is plain files in ~/.stillwright (profile, goals, inbox, notes, pinned tools, run logs). Nothing leaves your machine except what your agent already sends.

sw is a single Rust binary, so there is nothing to install besides it, and it is ready to become a background service later.

Status

v0.1. Each rule answers a failure that has been measured or reported, not a hunch:

• Agents mark work done without testing it: Anthropic's notes on long-running agent harnesses. Hence independent, default-fail checks.
• Agents rarely ask for help at the right moment and fill gaps with wrong assumptions: HiL-Bench. Hence the typed inbox with silence as default.
• Agent success falls as tasks get longer; METR measures how long a task an agent completes at 50% and at 80% reliability, and the 80% horizon is much shorter: METR time horizons. Hence small, checkable steps.
• Hundreds of malicious skills were found on a public skill registry in early 2026 (341 of 2,857 scanned): Snyk, "From SKILL.md to Shell Access", Unit 42 on the OpenClaw skill marketplace. Hence vetting, approval and hash-pinning before any third-party tool runs.
• In a controlled test with a limited verification budget, agents followed a constraint that had since been withdrawn in about three of four decisions: arXiv 2608.25553. Hence dated notes that are retired, not overwritten.

Measured on three small tasks against a plain agent of the same model: same task completion, an auditable plan and log every time, zero false claims (the plain side had one mild one), about twice the wall time, and reports that broke the five-line rule every time (as did the plain side's). After one skill fix, a re-run met the rule in all three tasks. Numbers, caveats and raw runs: docs/evals.md.

Issues and PRs welcome. Found a gap? Open an idea.

MIT © Hamza Ilyas · Built at Folvix.