Links
AddMatchlock secures AI agent workloads with a Linux-based sandbox.
Matchlock is a CLI tool for running AI agents in ephemeral microVMs - with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Your secrets never enter the VM.
A community trust management system based on explicit vouches to participate.
People must be vouched for before interacting with certain parts of a project (the exact parts are configurable to the project to enforce). People can also be explicitly denounced to block them from interacting with the project.
Agent Skills are folders of instructions, scripts, and resources that AI agents can discover and use to perform at specific tasks. Write once, use everywhere.
Codex uses skills to help package capabilities that teams and individuals can use to complete specific tasks in a repeatable way. This repository catalogs skills for use and distribution with Codex.
Agentic AI Infrastructure for magnifying HUMAN capabilities.
PAI is a Personalized AI Platform designed to magnify your capabilities.
It's designed for humans most of all, but can be used by teams, companies, or Federations of Planets desiring to be better versions of themselves.
The scale of the entity doesn't matter: It's a system for understanding, articulating, and realizing its principal's goals using a full-featured Agentic AI Platform.
Related contents:
A lightweight alternative to Clawdbot / OpenClaw that runs in Apple containers for security. Connects to WhatsApp, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK.
My personal Claude assistant that runs securely in containers. Lightweight and built to be understood and customized for your own needs.
Related contents:
The Ultra-Lightweight Clawdbot
🐈 nanobot is an ultra-lightweight personal AI assistant inspired by Clawdbot.
MCP server for accessing Podcasting 2.0 RSS feed episode data.
A FastMCP server that parses Podcasting 2.0 RSS feeds and provides access to episode data through MCP tools.
App compatibility on de-Googled devices. Crowdsourced de-Googled Android apps status ratings.
Related contents:
Reinschrift combines a native GNOME interface with the simplicity of plain text. Your tasks remain a normal Markdown file – easy to back up, versionable via Git, and editable on any device with your favorite editor.
The app syncs the file via Nextcloud/WebDAV, reads changes live, writes directly back, and thus makes classic to-do lists in plain text suitable for everyday use – without proprietary silos. The format remains open, portable, and transparent.
Related contents:
Skills for Claude Code CLI such as full stack dev Cloudflare, React, Tailwind v4, and AI integrations.
Web UI for Claude Code built on a reverse-engineered WebSocket protocol. Launch sessions, stream responses, approve tools. All from your browser / mobile.
Claude Code in your browser. We reverse-engineered the undocumented WebSocket protocol hidden inside the CLI and built a web UI on top of it. No API key needed, it runs on your existing Claude Code subscription.
Related contents:
Apache Parquet is an open source, column-oriented data file format designed for efficient data storage and retrieval. It provides high performance compression and encoding schemes to handle complex data in bulk and is supported in many programming languages and analytics tools.
Related contents:
A place for all types of Termux packages.
Sounds like Archlinux User repository aka AUR? TUR functioning mechanism is bit different. Instead of building packages in device that too in android is quite hectic work for user. So TUR saves resources and time since user could install pre-compiled package.
Shannon is your fully autonomous AI pentester.
Shannon’s job is simple: break your web app before anyone else does. The Red Team to your vibe-coding Blue team. Every Claude (coder) deserves their Shannon.
Fully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark.
Related contents:
the Honeycomb Sampling Proxy.
Refinery is a trace-aware tail-based sampling proxy. It examines whole traces and intelligently applies sampling decisions (whether to keep or discard) to each trace.
Refinery is a tail-based sampling proxy and operates at the level of an entire trace. Refinery examines whole traces and intelligently applies sampling decisions to each trace. These decisions determine whether to keep or drop the trace data in the sampled data forwarded to Honeycomb.
A tail-based sampling model allows you to inspect an entire trace at one time and make a decision to sample based on its contents. For example, your data may have a root span that contains the HTTP status code to serve for a request, and another span that contains information on whether the data was served from a cache. Using Refinery, you can choose to keep only traces that had a 500 status code and were also served from a cache.
Create executable demo documents that show and prove an agent's work.
Showboat helps agents build markdown documents that mix commentary, executable code blocks, and captured output. These documents serve as both readable documentation and reproducible proof of work. A verifier can re-execute all code blocks and confirm the outputs still match.
Related contents:
Chrome automation from the command line. CLI tool for interacting with the web.
A Go CLI tool that drives a persistent headless Chrome instance using the rod browser automation library. Each command connects to the same long-running Chrome process, making it easy to script multi-step browser interactions from shell scripts or interactive use.
Related contents:
The formatter multiplexer.
treefmt streamlines the process of applying formatters to your project, making it a breeze with just one command line.
Data-Shield IPv4 Blocklist Community provides an official, curated registry of IPv4 addresses identified as malicious. Updated continuously, this resource offers vital threat intelligence to bolster your Firewall and WAF instances,...
Related contents:
SysWarden is a tool based on the Data-Shield IPv4 Blocklists Community, Wazuh and Fail2ban that blocks up to 99% of noisy, disruptive, and malicious IP addresses and focuses on real signals.
Related contents:
Open Source DevOps Control Plane.
Run operational workflows across the tools you already use. Stay in control of releases, incident response, infrastructure provisioning, notifications, disaster recovery, and everything in between. SuperPlane is an open source DevOps control plane for defining and running event-based workflows. It works across the tools you already use such as Git, CI/CD, observability, incident response, infra, and notifications.
Related contents:
Minimal CVE Hardened container image collection.
A collection of production-ready container images with minimal CVEs, rebuilt daily using Chainguard's apko and Wolfi packages. By including only required packages, these images maintain a reduced attack surface and typically have zero or near-zero known vulnerabilities.
Related contents:
The bridge between Burp Suite and modern AI.
Burp AI Agent is an extension for Burp Suite that integrates AI capabilities into your security workflow.
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
Related contents:
LLM Service Fingerprinting Tool.
Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 30+ other AI services in seconds.
Julius is an LLM service fingerprinting tool for security professionals. It detects which AI server software is running on network endpoints during penetration tests, attack surface discovery, and security assessments.
Unlike model fingerprinting tools that identify which LLM generated text, Julius identifies the server infrastructure: Is that endpoint running Ollama? vLLM? LiteLLM? A Hugging Face deployment? Julius answers in seconds.
Related contents:
Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems.
Related contents:
Fluorite is the first console-grade game engine fully integrated with Flutter. Its reduced complexity by allowing you to write your game code directly in Dart, and using all of its great developer tools. By using a FluoriteView widget you can add multiple simultaneous views of your 3D scene, as well as share state between game Entities and UI widgets - the Flutter way!
UI Components and Blocks Built with Tailwind CSS.
Discover a curated collection of over 100 handcrafted UI components made with Tailwind CSS, React, and shadcn/ui. Designed for seamless integration, these components combine aesthetic precision with developer-friendly flexibility to help you build beautiful, production-ready interfaces faster.
Professionally crafted React & Figma components for building beautiful products or starting your own design system.
Multi-track audio editor for the web. Built with React & Tone.js.
Multitrack Web Audio editor and player with canvas waveform preview. Set cues, fades and shift multiple tracks in time. Record audio tracks or provide audio annotations. Export your mix to AudioBuffer or WAV! Add effects from Tone.js. Project inspired by Audacity.
Fine-Grained Authorization. A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
Relationship-based access control made fast, scalable, and easy to use.
OpenFGA is an open-source authorization solution that allows developers to build granular access control using an easy-to-read modeling language and friendly APIs.
Related contents:
Fine-grained authorization for AI agents using OpenFGA.
AI agents are getting access to production systems - databases, APIs, file systems. But who decides what they can do? Traditional RBAC wasn't designed for autonomous agents that make decisions without human approval.
Related contents:
Context window optimization for LLMs. Reliable LLM outputs start with clean context.
A reliability layer for LLM context. Deterministic deduplication that removes redundancy before it reaches your model. Less redundant data. Lower costs. Faster responses. More efficient & deterministic results.
Related contents:
A security-focused library OS supporting kernel- and user-mode execution.
LiteBox is a sandboxing library OS that drastically cuts down the interface to the host, thereby reducing attack surface. It focuses on easy interop of various "North" shims and "South" platforms. LiteBox is designed for usage in both kernel and non-kernel scenarios.
Pebble smartwatch emulator running in the browser. QEMU compiled to WebAssembly boots real Pebble firmware and renders the display to an HTML canvas.
Runs entirely in your browser — no server, no install. QEMU is compiled to WebAssembly, emulating the original Pebble ARM hardware and booting real PebbleOS firmware. Tested on desktop, doesn't work well on mobile yet.
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
Related contents:
You might never open your editor again.
Use sidecar next to CLI agents for diffs, file trees, conversation history, and task management with td.
Sidecar puts your entire development workflow in one shell: plan tasks with td, chat with AI agents, review diffs, stage commits, review past conversations, and manage workspaces—all without leaving Sidecar.
Coding agents, visible to your team. Collaboration in the age of agentic engineering .
Open-source and self-hostable. Track sessions, share prompts, and link every conversation to the commit it produced.
AgentLogs captures and analyzes transcripts from AI coding agents (like Claude Code, Codex, OpenCode, and Pi) to give your team visibility into how AI tools are used in their codebases.
Related contents:
Helm chart, that enables scheduled scaling of a target resource, intended to be add overprovisioning to an autoscaling k8s cluster.
Helm Chart for overprovisioning an autoscaling Kubernetes Cluster, based on the Cluster Proportional Autoscaler and a deployment, that's acting as a "placeholder" for overprovisioning which is inspired by Cluster Overprovisioning Helm Chart from Delivery Hero.
Related contents:
AI coding agent for the terminal.
AI agent toolkit: coding agent CLI, unified LLM API, TUI & web UI libraries.
Related contents:
Build your agent team in OpenClaw with one command.
You don't need to hire a dev team. You need to define one. Antfarm gives you a team of specialized AI agents — planner, developer, verifier, tester, reviewer — that work together in reliable, repeatable workflows. One install. Zero infrastructure.
Related contents:
Trigger warnings for movies, TV, books, video games and more!
Self-hosted, Simple Markdown Web Editor and Notes Organizer.
FrankMD (Frank Markdown) is a simple, feature-rich, self-hosted markdown note-taking app built with Ruby on Rails 8. The name honors Frank Rosenblatt, inventor of the Perceptron - the pioneering neural network that laid the foundation for modern AI.
A fast, simple alternative to NextCloud.
☁️ Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust.
NextCloud was too slow on my home server. So I built OxiCloud: a file storage system written in Rust that runs on minimal hardware and stays out of your way.
A High-Performance S3 to File Translation Tool. Turn your local filesystem into an S3 server with a single command!
The Versity S3 Gateway serves as a bridge between file based storage systems and applications that rely on S3 object interfaces. It enables applications to interact with file storage using familiar S3 operations like put and get, allowing for easy integration and compatibility. Built from scratch in Go, a highly efficient programming language known for its performance and scalability, the Versity S3 Gateway leverages Go’s benefits to deliver exceptional speed and efficiency.
Related contents:
Scalable Distributed Storage.
SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, cloud tiering. Filer supports Cloud Drive, xDC replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding. Enterprise version is at seaweedfs.com.
Offline first, self hostable note taking application
Anchor focuses on speed, privacy, simplicity, and reliability across mobile and web. Notes are stored locally, editable offline, and synced across devices when online.
Related contents:
Self-hosted database backup manager for MySQL, PostgreSQL & MariaDB with scheduled backups, cross-server restore, and S3/SFTP storage support.
Related contents:
Secure File Sharing.
Self-hostable, open-source, and encrypted by default. Built with RustFS for speed and FastAPI for reliability.
Chithi (pronounced: chee-thee | IPA: /ˈtʃiː θiː/) is an open source end-to-end encrypted file sharing system with a zero trust backend server architecture.
Related contents:
OptiStack is a professional-grade, self-hosted platform designed for biohackers and health optimizers. It brings order to complex protocols with AI-powered interaction analysis, smart inventory tracking, precise timing schedules, and doctor-ready PDF reports.
Whether you're taking a daily multivitamin or managing a complex longevity protocol, OptiStack handles the cognitive load—tracking dosages, checking for contraindications, and helping you stay consistent—all in a privacy-first, Docker-deployable package.
Related contents:
The open source server management software for SSH, VNC & RDP.
Connect to your servers via SSH, VNC & RDP. Manage files, deploy containers, and monitor your infrastructure - all from one place.
Related contents:
A free and open source personal finance manager.
"Firefly III" is a (self-hosted) manager for your personal finances. It can help you keep track of your expenses and income, so you can spend less and save more. Firefly III supports the use of budgets, categories and tags. Using a bunch of external tools, you can import data. It also has many neat financial reports available.
Related contents:
Open source load testing tool. A modern load testing tool, using Go and JavaScript. Like unit testing, for performance. Modern load testing for developers and testers in the DevOps era.
A git diff pager based on delta but with a file tree, à la GitHub.
Security Scanner for Agent Skills.
A security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines pattern-based detection (YAML + YARA), LLM-as-a-judge, and behavioral dataflow analysis for comprehensive threat detection.
Related contents:
Transform Terraform Plans Into Readable Reports
Stop drowning in verbose plan output. Generate structured Markdown reports that render perfectly in PR comments.
Related contents:
Postgres Lock Explainer.
From the Postgres community for the Postgres community. An in-depth explainer of locks that prioritizes warm design, demos, and developer stories based on my experience as a support engineer specializing in Postgres.
Dropbear is a relatively small SSH server and client. It runs on a variety of unix platforms. Dropbear is open source software, distributed under a MIT-style license. Dropbear is particularly useful for "embedded"-type Linux (or other Unix) systems, such as wireless routers.
Related contents:
Display Toolkit, Unlimited.
Text signs, light effects, sound visualizers, and clock displays — turn any screen into a display in seconds. No apps, no accounts, just a URL.
Related contents: