
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@openenthrium/oe-runtime
Advanced tools
OE Runtime - run AI agents against enterprise data sources. One binary, one YAML agent, one config file.
@openenthrium/oe-runtimeStandalone AI Agent Executor · Apache-2.0 · Windows · Linux · macOS
Run SKILL.md agents and YAML workflows against any enterprise data source — no cloud, no platform, just a single binary.
A standalone binary that reads a declarative agent file, connects to your enterprise data sources, and runs an AI workflow — locally or as an HTTP API server. No Python. No LangChain. No Docker required.
Supports two agent formats:
npx -y @openenthrium/oe-runtime ./skills/hello-world
-yis required — without it npx blocks waiting for keyboard input and the agent never runs.
OE Runtime automatically finds oe-config.json in the agent's folder or your current directory.
A SKILL.md skill is a Markdown file — frontmatter carries the metadata, ## Step headings define the workflow. Connector wiring stays in agent.yaml + oe-config.json, keeping the skill itself portable.
Folder structure:
my-skill/
├── SKILL.md ← the portable skill (agentskills.io format)
├── agent.yaml ← wires SKILL.md to your connectors
└── oe-config.json ← LLM key + connector credentials
agent.yaml:
name: SQL Database Analyst
description: Query a database and summarise results in plain English
connectors:
- connection_name: My Database
connection_type: postgresql
skills:
- path: ./SKILL.md
trigger_type: auto
SKILL.md:
---
name: SQL Database Analyst
version: 1.0.0
description: Query a database and summarise results in plain English
author: Your Name
license: Apache-2.0
---
You are a data analyst. Use the available database tools to answer the user's question clearly.
## Step 1: Explore Schema
List the available tables and understand the data structure.
## Step 2: Query
Run the most relevant query for the user's request.
## Step 3: Report
Summarise the findings in plain English with key numbers highlighted.
oe-config.json:
{
"llm": { "provider": "openai", "apiKey": "sk-...", "model": "gpt-4o" },
"connectors": [
{
"connection_name": "My Database",
"connection_type": "postgresql",
"host": "localhost",
"port": 5432,
"database": "mydb",
"user": "postgres",
"password": "YOUR_DB_PASSWORD"
}
]
}
Run it:
npx -y @openenthrium/oe-runtime ./my-skill
Pass the folder — OE Runtime resolves agent.yaml inside it automatically.
Download oe-runtime-skills.zip — 27 ready-to-run skills covering:
sql-databases · nosql-cache · email · team-messaging · cloud-drives · file-storage · web-search · rest-api · graphql · ssh · image-generation · speech-audio · video-generation · music-generation · ocr-vision · iot-messaging · message-queues · blockchain-web3 · productivity-crm · directory-identity · local-exec · hello-world · and more
Each skill has a SKILL.md + agent.yaml + oe-config.json ready to go.
Enable server mode in oe-config.json:
{
"llm": { "provider": "openai", "apiKey": "sk-...", "model": "gpt-4o" },
"server": { "enabled": true, "port": 3333, "apiKey": "your-secret" },
"connectors": [ ... ]
}
Start:
npx -y @openenthrium/oe-runtime --serve --config oe-config.json
Endpoints:
| Method | Path | Description |
|---|---|---|
GET | /health | Liveness check |
POST | /run | Run an agent from inline YAML |
POST | /run-file | Run an agent from a file path on disk |
POST | /approve-chain | Approve or reject a pending manual chain |
# Run a SKILL.md agent via HTTP
curl -X POST http://localhost:3333/run-file \
-H "x-api-key: your-secret" \
-H "Content-Type: application/json" \
-d '{"file": "/path/to/my-skill/agent.yaml", "params": {}, "input": "run"}'
npm install @openenthrium/oe-runtime-sdk
const { runAgent } = require("@openenthrium/oe-runtime-sdk");
const result = await runAgent("./my-skill/agent.yaml", "./oe-config.json");
console.log(result.output);
openai · anthropic · azure · groq · gemini · ollama · mistral · deepseek · together · fireworks · bedrock · and more
| 🖥️ Platform | open-enthrium-ai-platform — full web app with workspaces, RAG, Agent Builder |
| 🔌 MCP Server | open-enthrium-ai-mcp-server — connect Claude Code, Cursor, Windsurf to enterprise data |
| 📦 Node.js SDK | @openenthrium/oe-runtime-sdk |
| 🌐 Website | openenthrium.com |
Contributions are welcome. Before opening a PR:
mainWhere contributions are most valuable:
Apache-2.0 — free to use, modify, and deploy for any purpose, including commercial use. No usage limits. No telemetry. No call-home.
FAQs
OE Runtime - run AI agents against enterprise data sources. One YAML agent, one config file.
The npm package @openenthrium/oe-runtime receives a total of 81 weekly downloads. As such, @openenthrium/oe-runtime popularity was classified as not popular.
We found that @openenthrium/oe-runtime demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.