pashov / skills
Pashov Audit Group Skills
pashov / skills
basecamp / lexxy
A modern rich text editor for Rails.
maximecb / noisecraft
Browser-based visual programming language and platform for sound synthesis.
sindresorhus / pretty-ms
Convert milliseconds to a human readable string: `1337000000` → `15d 11h 23m 20s`
3641397194-wq / gpt6-Astra
gpt6 Astra-claude-grok4.7-deepseekv4.1flash-glm5.3-gemini破甲越狱 · 冷咖啡 BREAK//OPEN 工作台
hackademix / noscript
The popular NoScript Security Suite browser extension.
researchgate / react-intersection-observer
React component for the Intersection <Observer /> API
protofire / solhint
Solhint is an open-source project to provide a linting utility for Solidity code.
prompt-security / clawsec
A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.
veliovgroup / Meteor-Files
🚀 Upload files via DDP or HTTP to ☄️ Meteor server FS, AWS, GridFS, DropBox or Google Drive. Fast, secure and robust.
atlassian / atlassian-mcp-server
Official remote MCP server for Atlassian. Securely connect Jira, Confluence, Jira Service Management, Bitbucket, and Compass to Claude, ChatGPT, Cursor, VS Code, and other AI tools using OAuth 2.1 or API tokens.
helicalinsight / helicalinsight
Free, open source BI platform with AI conversational analytics (BYO-LLM), pixel-perfect paginated reports, interactive dashboards, SSO, embedding, multi-tenancy & row-level security. Every feature free in Community Edition. Self-hosted, Docker-ready
ossf / wg-best-practices-os-developers
The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
endojs / endo
Endo is a distributed secure JavaScript sandbox, based on SES
dotenvx / dotenv-expand
Expand variables already on your machine for use in your .env file.
D0n9X1n / hexo-blog-encrypt
Yet, just another hexo plugin for security.
ruby / setup-ruby
An action to download a prebuilt Ruby and add it to the PATH in 5 seconds
devanshutak25 / 3d-resources
Curated, CC0 reference hub for 3D, VFX, and game dev. 3,400+ tools, assets, and tutorials across 12 sections. Searchable, filterable, free.
alexjoverm / v-lazy-image
Lazy load images using Intersection Observer, apply progressive rendering and css animations.
meld-cp / obsidian-encrypt
Hide secrets in your Obsidian.md vault
v-fidelusaleksander / ghcertified
Prepare for GitHub Certification exams!
zaproxy / community-scripts
A collection of ZAP scripts and tips provided by the community - pull requests very welcome!
spr-networks / super
One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access
lirantal / lockfile-lint
Lint an npm or yarn lockfile to analyze and detect security issues
asamassekou10 / ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
dotenvx / react-native-dotenv
Load .env into React Native - with support for multiple .env files.
cozuya / secret-hitler
A web adaptation of the social deduction board game Secret Hitler, originally developed in early fall 2016. https://secrethitler.io
mrrfv / cloudflare-gateway-pihole-scripts
Use Cloudflare Gateway DNS/VPN to block ads, malware and tracking domains - free alternative to NextDNS, Pi-hole and AdGuard
wasmerio / edgejs
Edge.js is a secure JavaScript runtime, designed for Edge computing and AI workloads
dwyl / hapi-auth-jwt2
:lock: Secure Hapi.js authentication plugin using JSON Web Tokens (JWT) in Headers, URL or Cookies
Juwan-Hwang / Zephyr
Zephyr: A modern, lightweight, and secure Mihomo / Clash Meta GUI client built with Tauri and Rust.
renniepak / CSPBypass
CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains.
aeonfun / soul.md
The best way to build a personality for your agent. Let Claude Code / OpenClaw ingest your data & build your AI soul.
notiflix / Notiflix
Notiflix is a dependency-free, secure, and lightweight JavaScript library built with pure JavaScript, offering client-side non-blocking notifications, popup boxes, loading indicators, and more.
gitleaks / gitleaks-action
Protect your secrets using Gitleaks-Action
w3c / trusted-types
A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
darama22 / Malware-Research-Hub
Self-contained malware research hub: curated catalog of 80 families (1971-2024) + 2,764 real encrypted samples, indexed and searchable. Local Flask app, bilingual.
aminought / firefox-second-sidebar
A Firefox userChrome.js script that brings a second sidebar with web panels like in Vivaldi/Edge/Floorp but better.
firewalla / firewalla
http://firewalla.com
scrapfly / Antibot-Detector
Real-time detection of anti-bot systems, captchas & fingerprinting techniques. Identifies Cloudflare, Akamai, DataDome, reCAPTCHA, hCaptcha, Shape Security & more with confidence scoring and advanced capture tools.
Webba-Creative-Technologies / vice
VICE is a security auditing CLI tool that finds vulnerabilities in your web applications.
FradSer / dotclaude
A comprehensive development environment with specialized AI agents for code review, security analysis, and technical leadership.
OvenMediaLabs / OvenPlayer
OvenPlayer is JavaScript-based LLHLS and WebRTC Player for OvenMediaEngine.
nodevault / node-vault
Client for HashiCorp's Vault
levelsio / superlevels
A super Chrome extension I made that's safer than installing external malware/spyware-filled extensions that form a massive security risk, this one is open source and you can read and check the source code (with AI) before you install it, and customize it to your liking!
karanb192 / claude-code-hooks
🪝 Claude Code hooks + an installable plugin marketplace: safety, cost, observability, productivity.
nhovongoc0-max / meme-radar
Meme雷达开源版：本地只读、多链 Meme 候选扫描与人工复核工具
fangyuan99 / cookie-share
Cookie-share is a tampermonkey script that allows users to send and receive cookies between different devices or browsers. It can be used for multi-account switching, sharing video memberships, co-renting planets, and other scenarios. A self-hosted Cloudflare Worker ensures data security.
rockbenben / LearnData
开源笔记模板，一键部署个人知识库和博客 | 开源工具、效率方法、心理学探索的自我提升笔记
mixbytes / audits_public
MixBytes Team public security audits
miroslavpejic85 / mirotalkc2c
📹 Open-source, self-hosted WebRTC 1-to-1 video calling for private real-time communication. Build secure browser-based consultations, coaching, support, telehealth, and other video call experiences with peer-to-peer communication and screen sharing.
dslsdzc / rev-skills
122 个逆向工程 AI 技能：恶意软件分析 / 软件逆向 / 固件嵌入式 / 协议逆向 / 移动应用 / 脱壳反混淆 / 软件破解 / 漏洞挖掘 / 托管代码 / 取证情报 / CTF。
lire1131 / dsh-undo-savepoint
DSH crash-rescue plugin: undo config & plugin-code changes, secret-safe snapshots, one-click SAFE MODE, plus offline CLI/GUI that work even when DSH won't boot.
rohasnagpal / legal-ai-skills
Set Up an AI-Powered Full-Service Law Firm in 90 Seconds
EGSECDA / vocaloid-style-mv-pipeline
Production pipeline and Claude Code skill for Vocaloid-style hand-drawn (手書き) lyric music videos: deterministic Canvas2D/WebGL2 animation engine, JIZURA lyric motion, AI illustration, Blender toon 3D, headless rendering to 16:9 and 9:16.
Atomburstofficial / geiger
A Geiger counter for AI agents — one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine
Arcanum-Sec / wraith
WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.
Akimiya-z / codex-guard
Quality gate for AI/Codex-generated pull requests: blocks TODO leftovers, leaked secrets, sloppy commits and red CI before they reach main.
lgomesappj / BlockNetDiamond
BlockNetDiamond leverages a distributed ledger infrastructure, utilizing a consensus-driven architecture framework. built for Cryptographic security
lgomesappj / Web3NodeDiamond
Web3 Web3NodeDiamond gateway that handles security audit trail, built for everyday use.