AI Coworker done Ask for an outcome, not just an answer. Toggle Security, everyday, trigger, and platform options inspired by openworker.com — governed by AI Pass approvals and membership.
Source framing from openworker.com : finished deliverables, approval check-ins, BYO models, and Security coworkers first. On AI Pass these ship as platform options you can turn on per workspace.
Security Reviewer Drives semgrep and secret scans, triages findings by reachability — not just severity — and ships fix PRs that match your codebase.
Works with GitHub · your repos · your scanners
Checks in before opening a PR
Never prints a secret value, or replaces your scanners Cloud Posture Scans Terraform, verifies against live cloud (read-only), and lands every fix as an infrastructure PR — with evidence per claim.
Works with Terraform · AWS (read-only) · GitHub
Checks in before opening a PR
Never writes to your cloud, or runs terraform apply Dependency Audit Finds vulnerable dependencies, prioritizes what’s reachable, and proposes the smallest upgrade that closes the hole.
Works with GitHub · lockfiles · your test suite
Checks in before touching a lockfile
Never bumps past the smallest safe version, or merges on red tests Sales Researches accounts, preps every call, drafts follow-ups that sound like you.
Works with HubSpot · Email · CRM
Checks in before sending email or CRM writes
Never sends outreach without approval Executive Assistant Owns the calendar, triages the inbox, and keeps your day on rails.
Works with Calendar · Email · Slack
Checks in before rescheduling or sending notes
Never cancels meetings without confirmation Marketing Spend, attribution, and the Monday report — without five dashboards.
Works with Analytics · Slack · Docs
Checks in before publishing or posting
Never changes ad spend without approval Ops On-call Triages alerts, digs through runbooks, drafts the incident notes nobody wants to write.
Works with Slack · GitHub · Runbooks
Checks in before posting incident updates
Never rolls back production without approval Build your own Describe any job in plain language — AI Pass assembles a coworker for it.
Works with Agent Studio · Skills · MCP
Checks in before consequential tool calls
Never grants itself new permissions Slack mention Triage the alert — check the runbook and draft an in-thread response.
Works with Slack
Checks in before posting replies
Never auto-posts without a standing rule Incoming email Prepare the reply — gather answers and hold the draft for review.
Works with Gmail · Outlook
Checks in before sending
Never sends mail unattended without allowlist Your schedule Deliver the report — pull the numbers and finish it before standup.
Works with Automations · Calendar
Checks in before external sends
Never self-approves unattended runs BYO models Cloud, open-weight, or fully local via Ollama — switch per task.
Works with OpenAI · Anthropic · Gemini · Ollama · more
Checks in N/A — model routing only
Never locks you into one vendor Everyday connectors Slack, Outlook, Gmail, Calendar, Notion, HubSpot, GitHub, Jira, Linear, Drive, and MCP.
Works with 25+ tools · MCP
Checks in per-tool permission gates
Never stores tokens outside your tenant vault policy Approval gates Hard floors + earned autonomy — consequential actions always check in.
Works with Governance · Audit trail
Checks in before send / write / shell
Never lets prompts bypass hard floors Artifacts & deliverables Finished docs, spreadsheets, reports, and diffs land as files you can open and share.
Works with Chat · Slack · Files
Checks in before external share
Never replaces your review of shippable work Local-first mode Prefer on-device secrets and optional desktop shell; cloud only when you choose.
Works with Desktop shell · Provider Hub
Checks in before any cloud egress
Never uploads secrets to AI Pass cloud by default Module: ai-coworker · AI Pass Platform