
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Open-source Personal Assistant Wizard for Claude Code. Turn Claude Code into your PA with CLI tools and skills.
Turn Claude Code into a personal assistant.
Claude Code is powerful, but out of the box it only knows how to code. OpenPaw turns it into a full personal assistant — one that reads your email, plays your music, controls your lights, manages your calendar, tracks your packages, and remembers what you told it last week.
Run one command and OpenPaw:
After setup, you just talk to Claude:
"Check my email and summarize anything urgent"
"Play lo-fi beats on Spotify"
"Turn the bedroom lights to 20%"
"What's on my calendar tomorrow?"
"Add milk to my reminders"
"Go to Hacker News and summarize the top 5 posts"
Claude figures out which skill to use. No special syntax needed.
No daemon, no cloud, no subscriptions. OpenPaw runs once, writes config, and gets out of the way. Everything runs locally through your existing Claude Code subscription.
npx pawmode
The wizard walks you through picking skills, choosing your interface (terminal, Telegram, or both), setting up a task dashboard, and authenticating with services. Or skip the wizard entirely:
npx pawmode --preset essentials # common skills, no prompts
npx pawmode --preset developer --yes # fully non-interactive
38 skills across 8 categories. Install only what you need.
| Skill | What it does | Tools |
|---|---|---|
c-notes | Apple Notes + Reminders | memo, remindctl |
c-obsidian | Obsidian vault management | obsidian-cli |
c-notion | Notion pages + databases | notion-cli |
c-tasks | Todoist / Taskwarrior | todoist, taskwarrior |
| Skill | What it does | Tools |
|---|---|---|
c-email | Gmail or IMAP — read, send, search | gog, himalaya |
c-calendar | Google Calendar + Apple Calendar | gog, icalBuddy |
c-messaging | iMessage + WhatsApp | imsg, wacli |
c-slack | Slack channels + DMs | slack-cli |
c-telegram | Telegram bridge (built-in) | — |
| Skill | What it does | Tools |
|---|---|---|
c-music | Spotify playback + search | spogo |
c-video | YouTube download + convert | yt-dlp, ffmpeg |
c-video-edit | Programmatic video creation | remotion |
c-screen | Screenshots, OCR, webcam | peekaboo, camsnap |
c-voice | Speech-to-text + TTS | sag |
| Skill | What it does | Tools |
|---|---|---|
c-lights | Philips Hue control | openhue-cli |
c-speakers | Sonos speakers | sonoscli |
c-bluetooth | Bluetooth devices | blueutil |
| Skill | What it does | Tools |
|---|---|---|
c-browser | Headless browser — navigate, click, scrape | playwright |
c-cron | Cron jobs + launchctl services | lunchy |
c-schedule | Recurring tasks with cost control | built-in |
c-briefing | Daily morning briefing | depends on email + calendar |
| Skill | What it does | Tools |
|---|---|---|
c-system | Volume, wifi, battery, dock | m-cli |
c-apps | Mac App Store from CLI | mas |
c-files | Cloud sync (Drive, S3, Dropbox, 70+) | rclone |
c-display | Brightness + safe trash | brightness, macos-trash |
c-notify | Native macOS notifications | terminal-notifier |
c-clipboard | Copy, paste, transform clipboard | built-in |
c-contacts | Search macOS Contacts | built-in |
c-timer | Countdown, alarms, pomodoro | terminal-notifier |
| Skill | What it does | Tools |
|---|---|---|
c-weather | Weather forecasts | built-in (curl + wttr.in) |
c-research | Summarize URLs, PDFs, videos | summarize |
c-location | Apple Maps + nearby places | goplaces |
c-tracking | Package tracking (UPS, FedEx, etc.) | ordercli |
c-secrets | 1Password / Bitwarden | op, bw |
c-network | DNS + HTTP client | doggo, httpie |
| Skill | What it does | Tools |
|---|---|---|
c-github | PRs, issues, repos, actions | gh, jq |
c-linear | Linear issues + projects | linear |
c-jira | Jira issues + sprints | jira-cli |
| Preset | Skills |
|---|---|
| Everything | All 38 skills |
| Essentials | Email, calendar, notes, music, weather, clipboard, browser, system, notifications |
| Productivity | Notes, Obsidian, tasks, email, calendar, Slack, cloud files, notifications |
| Developer | GitHub, Linear, Jira, browser, network, cron |
| Creative | Music, video, screen, voice, browser, research |
| Smart Home | Lights, speakers, Bluetooth, system, display, notifications |
Telegram Bridge — Talk to Claude from your phone. Set up with openpaw telegram setup, start with openpaw telegram.
Task Dashboard — Local kanban board with 3 themes (Paw, Midnight, Neon). Run openpaw dashboard.
Scheduling — Recurring tasks with per-run and daily cost caps. openpaw schedule add "weekdays 8am" --run "check email".
CLAUDE.md Integration — OpenPaw writes a section into ~/.claude/CLAUDE.md so Claude knows its name, installed skills, and personality on every session start. Your existing CLAUDE.md content is preserved.
| Command | Description |
|---|---|
openpaw | Interactive setup wizard |
openpaw configure | Menu to add skills, edit personality, manage dashboard |
openpaw add <skills> | Add skills — openpaw add notes music email |
openpaw remove <skills> | Remove skills |
openpaw list | Show all available skills |
openpaw status | Show installed skills + tool versions |
openpaw doctor | Diagnose issues |
openpaw update | Upgrade CLI tools |
openpaw dashboard | Task dashboard (--theme midnight, --port 8080) |
openpaw telegram | Start Telegram bridge |
openpaw schedule add | Add a scheduled job |
openpaw schedule list | List scheduled jobs |
openpaw schedule costs | View cost usage |
openpaw soul | Edit personality |
openpaw export / import | Backup and restore config |
openpaw reset | Remove everything OpenPaw installed |
gh repo fork daxaur/openpaw
mkdir skills/c-yourskill
# Write a SKILL.md with YAML frontmatter (name, description, tags)
# Add tool definitions to src/catalog/index.ts
gh pr create
MIT — @daxaur
FAQs
Open-source Personal Assistant Wizard for Claude Code. Turn Claude Code into your PA with CLI tools and skills.
The npm package pawmode receives a total of 19 weekly downloads. As such, pawmode popularity was classified as not popular.
We found that pawmode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.