
Security News
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.
@shreyaskapale/gitagent
Advanced tools
A framework-agnostic, git-native standard for defining AI agents
A framework-agnostic, git-native standard for defining AI agents. Clone a repo, get an agent.
Every AI framework has its own structure. There's no universal, portable way to define an agent that works across Claude Code, OpenAI, LangChain, CrewAI, and AutoGen. gitagent fixes that.
Four architectural patterns emerge when you treat agents as git repos:
When an agent updates memory or learns a new skill, it creates a branch + PR for human review before merging to main. Git's review workflow becomes your supervision layer.
Root-level context.md, skills/, tools/, and knowledge/ are automatically inherited by all sub-agents. One source of truth, no duplication.
Use git branches (dev → staging → main) to promote agent changes through environments, just like shipping software.
The knowledge/ folder stores entity relationships as a hierarchical tree with embeddings, letting agents reason over structured data at runtime.
# Install
npm install -g gitagent
# Create a new agent
gitagent init --template standard
# Validate
gitagent validate
# View agent info
gitagent info
# Export to system prompt
gitagent export --format system-prompt
my-agent/
├── agent.yaml # [REQUIRED] Manifest — name, version, model, skills, tools, compliance
├── SOUL.md # [REQUIRED] Identity, personality, communication style, values
├── RULES.md # Hard constraints, must-always/must-never, safety boundaries
├── AGENTS.md # Framework-agnostic fallback instructions
├── skills/ # Reusable capability modules (SKILL.md + scripts)
├── tools/ # MCP-compatible tool definitions (YAML schemas)
├── knowledge/ # Reference documents the agent can consult
├── memory/ # Persistent cross-session memory
├── workflows/ # Multi-step procedures/playbooks
├── hooks/ # Lifecycle event handlers (audit logging, compliance checks)
├── examples/ # Calibration interactions (few-shot)
├── agents/ # Sub-agent definitions (recursive structure)
├── compliance/ # Regulatory compliance artifacts
├── config/ # Environment-specific overrides
└── .gitagent/ # Runtime state (gitignored)
The only file with a strict schema. Minimal example:
spec_version: "0.1.0"
name: my-agent
version: 0.1.0
description: A helpful assistant agent
Full example with compliance:
spec_version: "0.1.0"
name: compliance-analyst
version: 1.0.0
description: Financial compliance analysis agent
model:
preferred: claude-opus-4-6
compliance:
risk_tier: high
frameworks: [finra, federal_reserve, sec]
supervision:
human_in_the_loop: always
kill_switch: true
recordkeeping:
audit_logging: true
retention_period: 7y
immutable: true
model_risk:
validation_cadence: quarterly
ongoing_monitoring: true
| Command | Description |
|---|---|
gitagent init [--template] | Scaffold new agent (minimal, standard, full) |
gitagent validate [--compliance] | Validate against spec and regulatory requirements |
gitagent info | Display agent summary |
gitagent export --format <fmt> | Export to other formats (see adapters below) |
gitagent import --from <fmt> <path> | Import (claude, cursor, crewai) |
gitagent run <source> --adapter <a> | Run an agent from a git repo or local directory |
gitagent install | Resolve and install git-based dependencies |
gitagent audit | Generate compliance audit report |
gitagent skills <cmd> | Manage skills (search, install, list, info) |
gitagent lyzr <cmd> | Manage Lyzr agents (create, update, info, run) |
gitagent has first-class support for financial regulatory compliance:
Run gitagent audit for a full compliance checklist against your agent configuration.
Adapters are used by both export and run. Available adapters:
| Adapter | Description |
|---|---|
system-prompt | Concatenated system prompt (works with any LLM) |
claude-code | Claude Code compatible CLAUDE.md |
openai | OpenAI Agents SDK Python code |
crewai | CrewAI YAML configuration |
lyzr | Lyzr Studio agent |
github | GitHub Actions agent |
git | Git-native execution (run only) |
openclaw | OpenClaw format |
nanobot | Nanobot format |
# Export to system prompt
gitagent export --format system-prompt
# Run an agent directly
gitagent run ./my-agent --adapter lyzr
# Extend a parent agent
extends: https://github.com/org/base-agent.git
# Compose with dependencies
dependencies:
- name: fact-checker
source: https://github.com/org/fact-checker.git
version: ^1.0.0
mount: agents/fact-checker
See the examples/ directory:
examples/minimal/ — 2-file hello world (agent.yaml + SOUL.md)examples/standard/ — Code review agent with skills, tools, and rulesexamples/full/ — Production compliance agent with all directories, hooks, workflows, sub-agents, and regulatory artifactsexamples/gitagent-helper/ — Helper agent that assists with creating gitagent definitionsexamples/lyzr-agent/ — Example Lyzr Studio integrationFull specification at spec/SPECIFICATION.md.
JSON Schemas for validation at spec/schemas/.
MIT
FAQs
A framework-agnostic, git-native standard for defining AI agents
The npm package @shreyaskapale/gitagent receives a total of 19 weekly downloads. As such, @shreyaskapale/gitagent popularity was classified as not popular.
We found that @shreyaskapale/gitagent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.

Research
/Security News
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.