New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

krow-cli

Package Overview
Dependencies
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

krow-cli

A host-agnostic agent harness for coding work

Source
npmnpm
Version
0.2.1
Version published
Weekly downloads
38
-87.74%
Maintainers
1
Weekly downloads
 
Created
Source

krow

krow is a host-agnostic agent harness for coding work.

It packages three things:

  • a lean execution contract
  • a runtime-agnostic state and signal model
  • host wrappers that expose explicit krow entrypoints without polluting the core prompts

Install

From npm:

npx krow-cli init

The published package name is krow-cli. The installed command remains krow.

That installs:

  • Codex $krow
  • Claude Code /krow
  • Gemini CLI /krow

Core stance

  • model capability is already good enough for many engineering tasks
  • quality comes from orchestration, not prompt bloat
  • do not guess; gather evidence first
  • when clarification is needed, ask for the full current bundle at once
  • one worker owns one task with one clear output boundary
  • use the filesystem for baton passing, resume, and durable state

Layout

  • AGENTS.md: always-loaded execution contract
  • HARNESS.md: full system blueprint
  • FOUNDATIONS.md: philosophy and design lineage
  • skills/: reusable workflow surfaces
  • prompts/: narrow role prompts
  • schemas/: payload, signal, and state schemas
  • reference-runtime/: strict state-machine reference implementation
  • install/: host wrapper installer

Usage

  • In Codex, invoke $krow ...
  • In Claude Code, invoke /krow ...
  • In Gemini CLI, invoke /krow ...

The host wrapper is only an entry mechanism. The core system still operates on explicit work intent, evidence-backed clarification, and clarify -> execute -> verify.

Keywords

agent

FAQs

Package last updated on 04 Apr 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts