An ice creamAI agent that lives in your browser.

SLICC runs entirely client-side — it uses your browser sessions to automate web apps, run shell commands, and coordinate parallel agents. No server, no API keys, nothing to approve.

Get SLICC See it work
npm macOS Chrome GitHub
Install globally
Add SLICC to your system. Run slicc from any directory.
Sliccstart for macOS
Native launcher. Download .dmg, drag to Applications, double-click.
no terminal needed
Chrome side panel
Browser extension. No server, no approval. Uses your logged-in sessions directly.
zero install
View source on GitHub
Browse code, file issues, read docs, contribute. Apache-2.0 licensed.
open source

Automate the apps you already use

SLICC works with any web app you're logged into. Your browser sessions, its hands.

GitHub Gmail Jira Notion Figma Salesforce Slack VS Code Discord Obsidian
0:00
"I can't believe it's not
a UNIX system."
— Claude, after seeing the WASM shell for the first time

What you can do with SLICC

SLICC can write code, automate web apps, run tasks in parallel, and learn new workflows from a simple text file. Everything runs in your browser — no server, no setup, no IT ticket.

Coding
Write and ship code with shell, git, and your whole codebase
Refactor, debug, and ship — with shell, git, and your entire codebase accessible. Not a chat window pretending to code.
Automation
Automate tasks in web apps you're already logged into
Fill forms, scrape data, click through workflows — in any web app you're logged into.
Orchestration
Run multiple agents in parallel across tabs and apps
Spin up parallel agents across tabs, browsers, even Electron apps. Each gets its own sandbox. All report back.
Skills
Teach it new workflows with a markdown file
Drop a markdown file in a folder. The agent learns a new workflow. No code, no deploys, no kidding.

Write and ship code with shell, git, and your whole codebase

Refactor, debug, and ship — with shell, git, and your entire codebase accessible. Not a chat window pretending to code.

$ git diff --stat
src/agent.ts | 14 +++++---
src/shell.ts | 8 ++--
2 files changed, 16 insertions(+), 6 deletions(-)
$ node test/run.js
✓ 23 tests passed

Automate tasks in web apps you're already logged into

Fill forms, scrape data, click through workflows. Your login cookies. Its hands.

expenses.corp.internal/new
slicc
Date
2026-03-25
← calendar invite
Amount
$142.00
← receipt scan
Reason
Team offsite lunch
← Slack thread

Run multiple agents in parallel across tabs and apps

Spin up parallel agents across tabs, browsers, even Electron apps. Each gets its own sandbox. All report back.

vendor-a.com
vendor-b.io
vendor-c.dev
vendor A $2,400/mo · 10 seats
vendor B $1,800/mo · unlimited
vendor C $3,100/mo · 25 seats
3 tabs · same task · one answer

Teach it new workflows with a markdown file

Drop a markdown file in a folder. The agent learns a new workflow. No code, no deploys, no kidding.

deploy-staging.md
# Deploy to Staging
---
trigger: "deploy staging"
tools: bash, git, browser
---
1. Run tests, abort if red
2. Push to staging branch
3. Open preview URL and screenshot
"You can make an engineer fill out an expense report only so many times until they start writing a slicc skill."
— ████ Slack thread, █████ redacted

Under the waffle hood.

A cone orchestrates. Scoops do the work. Sprinkles are the UI.

chmod +x everything.

78 Unix commands. 17 custom tools. One WASM shell. Zero servers.

slicc@browser:~
$ ls /tools
Unix
lscatgrepfindsort uniqmvcprmmkdir rmdirtouchchmodheadtail wcsedawkcuttr teexargsdiffpatchtar gzipgunzipcurlwgetecho printftesttruefalseyes seqdatesleepenvexport readcdpwdbasenamedirname realpathlnstatdudf whoamiidhostnameuptimeps killtrapwaitjobsbg fgnohupaliasunaliassource evalexecsetunsetshift getoptscaseselectforwhile untilifthenfido
SLICC custom
node python3 git playwright-cli sqlite3 serve open zip unzip convert pdftk screencapture imgcat webhook crontask upskill sprinkle oauth-token

Everything a model already knows how to use. No plugins, no API keys, no "please install this SDK."

You're still scrolling. Good.
0 days since the last prompt injection incident

Here's where it gets weird.

Gmail ×
GitHub ×
SLICC Agent ×
Figma ×
🔒 slicc.local/agent
Agent · Running
It lives inside your browser.
Entirely client-side. Entirely yours.
tabs sessions cookies logged-in apps

It sees your tabs, your sessions, your logged-in apps. Close the tab and it stops. That's the whole security model.

Parallel sub-agents

a.k.a. scoops
cone main agent · delegating
▼ 3 scoops
S1 sandbox
auth/middleware.ts
- const token = req.cookies.session
+ const token = await getSession(req)
if (!token) return redirect('/login')
+ await validateCSRF(req)
S2 sandbox
✓ auth flow 0.4s
✓ session expiry 0.2s
✓ CSRF protection 0.1s
3 passed · 0.7s
S3 sandbox
## 2.4.1
fix session token validation
add CSRF middleware
test auth flow coverage
3 parallel isolated reporting back Each scoop gets its own sandbox, shell, and conversation.
Teach it a new job
in a text file.
weekly-report.md
skill
1name: Weekly Analytics Report
2trigger: every Monday 9am
3tools: browser, sheets, slack
4
5# steps
61. Pull metrics from dashboard
72. Run analysis notebook
83. Generate charts
94. Post to #analytics
Agent execution plan
1 Open analytics dashboard browser
2 Run weekly_metrics.ipynb shell
3 Export PNG charts to /tmp files
4 Send summary + charts to Slack browser
No code changes. No deploys. Install a skill and the agent learns a new workflow.
If you've read this far, you should probably just try it.

Install

One command. Every platform.

install
Quick start
$ npx sliccy
Downloads SLICC, launches Chrome, and opens the workspace. Requires Node 22+.
Global install
$ npm install -g sliccy
Installs SLICC globally. Run slicc from any directory.
Desktop & Extension
Download for macOS Chrome Extension
macOS app: download, drag to Applications, double-click. Chrome extension: side panel agent with access to your logged-in sessions.

Open source, Apache-2.0 licensed. View on GitHub