Practical tools for AI that works with your data.

An AI assistant can help with real work: read messages, check documents and keep an eye on a process. Limbs gives it tools for those tasks, a place to keep access keys, and a way to ask you when a decision needs a person.

Two tools are available: csec for access keys and ahh for checks, messages and human decisions. They run on your computer and work with an AI assistant you already use.

A small black character considers a key and an empty work glove: thinking is only part of doing the job. — An assistant needs practical tools as well as a good answer.

What could you use them for?

Connect an assistant to a service: Keep the service's access key in csec and retrieve it when the workflow needs it, instead of copying it into every project or chat.
Check material before an assistant uses it: Use ahh to look for exposed credentials and suspicious instructions in incoming text. Read how much it was able to check, and the limits of your installed version, before relying on a result.
Keep yourself in the loop: Let ahh deliver a message, monitor a task or collect a human answer. Your workflow decides when to ask and what that answer permits.

Available tools

These are command-line tools: a developer or a technically comfortable operator sets them up. You do not need to replace your AI assistant. Each tool has its own guide.

csec

Available

A place for the keys your software needs.

Access keys let software use services such as email or an AI model. csec stores those values in an encrypted file on your computer and lets authorised local workflows retrieve them when needed.

You can also synchronise an encrypted collection through a private Git repository. This helps you use the same credentials on more than one machine.

Start with csec

Install csec

For macOS or Linux, run this in a terminal. Read Setup & trust before installing.

curl -fsSL https://csec.limbs.dev/install | bash

For Windows and first-use instructions, see the csec guide.

The character gathers loose keys and holds them together. — Keep access keys together, then retrieve the one a task needs.

ahh

Available

Checks, communication and a way to ask you.

ahh helps an assistant handle incoming content, work with email and Telegram, monitor ongoing tasks, and present questions to a person. It uses csec for the credentials its integrations need.

A scan reports dangerous, unknown or safe. Read the result alongside what was checked: these verdicts are not a guarantee that a document or instruction is harmless.

Using ahh 0.8.0 with PDFs? It can report safe while missing some text. Read the known PDF limitation before relying on that version.

Start with ahh

Install ahh and try a check

For macOS or Linux, run this in a terminal. Windows and first-use instructions are in the ahh guide.

curl -fsSL https://ahh.limbs.dev/install | bash

Start with the preflight check, then read help for the task you want:

ahh doctor
ahh scan --help
ahh mail --help

The first-use guide includes an offline text check and setup for the online model. Downloaded releases can lag fixes in development; check your installed version and its known limits.

The character handles an unfamiliar envelope carefully and marks it unknown instead of stamping it safe. — When a check is incomplete, make the uncertainty visible.

What these tools can and cannot protect

Limbs is a set of tools you choose to put into a workflow. It does not automatically control everything an AI assistant or another app can do on your computer.

csec protects stored credentials through encryption. A program with permission to retrieve a key can still use it. ahh can check incoming content and apply the controls documented for each command; it cannot promise to recognise every harmful instruction.

Some ahh scans use configured external services. Read the manual before sending private material for analysis. Offline and unavailable checks have explicit limits.

Start with a trusted installation

The first installation depends on trusting the download source. Later updates are checked against a signing key embedded in the installed tool, so replacing files on a download server alone is not enough to create a trusted update.

Start with the csec guide and ahh guide. The installed tool's help describes the commands available in your release.

Later & maybe

Ideas we may explore. They are not available features, a release schedule or a promise.

Explore the ideas

who

Later & maybe

Make it clearer which assistant is responsible for an action.

tick

Later & maybe

Give workflows a dependable account of when something happened.

A check at the door before a message leaves.

veto

Later & maybe

Check outgoing content before a workflow sends it to someone else.

tab

Later & maybe

Set limits on the resources an assistant can spend.

leash

Idea

Limit which internet destinations a program can contact. There is no installer for this idea.

Other sketches include undoing a run, recording the origin of edits, protecting saved memory and checking reusable skills. These remain exploratory.