nanoMuse
nanoMuse: an open-source personal agent for every device you own. One agent with a name and a look of its own that does things, keeps working while the app is closed, remembers you, and asks before anything you cannot undo. On Android, iPhone and iPad, Windows / macOS / Linux and in the browser; your phone's screen and your computer as its hands.
No outside reports on file
nanoMuse can access and control multiple devices, so limit its permissions carefully, monitor what it does, and understand that it makes decisions in the background.
Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachFetches arbitrary web URLsREVIEW
- CredentialsNo API token requiredLOW
- Package sourceGitHub (nano-muse/nanoMuse)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/nano-muse/nanoMuse ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-21.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About nanoMuse
nanoMuse is an open-source AI agent that runs on your phone, computer, and browser to automate tasks and remember information about you. It can perform actions across your devices with your permission and asks before doing anything that cannot be undone.
Who it’s for
People who want a personal AI assistant that works locally across multiple devices without relying solely on cloud services. Users comfortable with open-source software and managing their own agent setup.
Alternatives
- Zapier: Cloud-based automation for connecting apps and workflows
- IFTTT: Simple if-this-then-that automation across devices and services
- Home Assistant: Open-source home automation that can extend to personal task automation
- n8n: Open-source workflow automation tool you can self-host
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README. The GitHub repository at https://github.com/nano-muse/nanoMuse (opens external site) contains installation instructions for Android, iPhone, Windows, macOS, Linux, and browsers.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 2.9k
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Device access: Can interact with files, apps, and settings on any device where it's installed if given broad permissions
- Persistence in background: Continues running and making decisions after you close the app, which could trigger unintended actions
- Prompt injection: Web pages or files you show it could contain hidden instructions that trick it into doing something you didn't want
- Cross-device sync: Information and access span multiple devices, so a compromise on one device could affect others
- Undo limitations: Even though it asks before irreversible actions, the definition of 'reversible' may be unclear for complex operations
How to lower the risk
Least-privilege permissions
- Grant only the specific permissions it needs per device (files, apps, network)
- Avoid giving it access to passwords, payment apps, or sensitive accounts
Network isolation
- Review whether it connects to external servers or stays local
- Use a firewall or VPN to monitor outbound connections from this agent
Monitoring
- Check device logs and app activity regularly for unexpected operations
- Test it with harmless tasks before trusting it with important automation
Red flags to watch for
- Agent performs actions you didn't explicitly ask for
- Unusual network traffic or battery drain after installation
- Tasks affecting multiple devices suddenly without your approval
Questions
How do I install nanoMuse?
nanoMuse does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/nano-muse/nanoMuse.
Are there security reports about nanoMuse?
No reports found for this package in our research (last checked 2026-10-30). nanoMuse currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include device access, persistence in background, prompt injection.
Is nanoMuse actively maintained?
nanoMuse has 2.9k GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/nano-muse/nanoMuse before pinning it in production.
What are alternatives to nanoMuse?
Notable alternatives to nanoMuse include Zapier (Cloud-based automation for connecting apps and workflows), IFTTT (Simple if-this-then-that automation across devices and services), Home Assistant (Open-source home automation that can extend to personal task automation), n8n (Open-source workflow automation tool you can self-host). You can also compare nanoMuse side by side with other skills in the Related tools section on this page.
README badge and team notes
Maintain or use nanoMuse? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/nano-muse-nanomuse)HTML embed:
<a href="https://agentarmorhq.com/skills/nano-muse-nanomuse"><img src="https://agentarmorhq.com/api/badge/nano-muse-nanomuse" alt="AgentArmorHQ Risk Grade for nanoMuse" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "nano-muse-nanomuse"Share with your security lead
Need sign-off to use nanoMuse? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: nanoMuse
- **Listing URL:** https://agentarmorhq.com/skills/nano-muse-nanomuse
- **Type:** AI agent skill
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 2.9k GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Fetches arbitrary web URLs
- **Credentials:** No API token required
- **Package source:** GitHub (nano-muse/nanoMuse)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/nano-muse/nanoMuse
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- AI agent skill
- Publisher
- nano-muse
- Source code
- github.com/nano-muse/nanoMuse
- Est. context load
- ~113 tokens idle · ~450 tokens when active (on-demand skill)
- Popularity
- 2.9k GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-21
Community
Discussions for nanoMuse
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude