mattpocock / skills

A set of small, composable agent skills for software engineering workflows, taken from the author's own .agents directory.

zhaoxuya520 / reverse-skill

A routing pack that tells AI coding agents which reverse-engineering or pentest methodology and tools to use for APKs, binaries, JS crypto, PCAPs, and CTFs.

zero-lab-ai / skills

Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.

AI4Finance-Foundation / FinRL

Open-source Python framework for training and backtesting financial trading agents with deep reinforcement learning.

img2threejs / plugin-interior

Production interior authoring and interactive Three.js delivery plugin for img2.

ChaosCaptain / DVD-Creator

Complete DVD Creator 2025 desktop installation build, ready-to-run with all essential features activated.

logto-io / logto

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

talo58948 / herdfs

Open, pluggable shared filesystem: FUSE clients, one authority, any S3 bucket

getcadcraft / bimcraft

BimCraft: BIM authoring. Parametric walls, doors and windows on levels and grids, with views, schedules, sheets and clash checks from one model.

zubair-trabzada / geo-seo-claude

GEO-first SEO skill for Claude Code. Comprehensive AI search optimization for any website — citability scoring, AI crawler analysis, brand authority, schema markup, platform-specific optimization, and PDF reports. If you want learn how to sell this to real businesses, check out the skool community

cclank / lanshu-create-ai-presenter-video

Provider-neutral Codex Skill for producing verified AI presenter videos from a script and an authorized presenter image.

angusdevgo / Seep-Reverse-Lab

Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.

microsoft / ResearchStudio

ResearchStudio: Our AI co-author, from research problem to final publication.

sofianeelhor / PKForge

Pokémon save editor and bank for Android

cvpr-org / author-kit

—

ZeroDayEvil / CVE-2026-54121-Certighost

🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.

juspay / hyperswitch

Open-source, self-hostable payments infrastructure in Rust that connects to many payment processors and offers routing, vault, and reconciliation modules.

zitadel / zitadel

ZITADEL - Identity infrastructure, simplified for you.

openfga / openfga

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

flashrt-project / FlashRT

FlashRT is a high-performance realtime inference engine for small-batch, latency-sensitive AI workloads. The flagship integration is production VLA control for Pi0, Pi0.5, GROOT N1.6, and Pi0-FAST. Also support llm e.g, qwen3.6-27B

Xiangyu-CAS / rea-capcut

ReaCut — REA × CapCut: an independent, open-source video editor rebuilt from REA-assisted, authorized local behavior and format research. No copied CapCut proprietary code or assets. Offline desktop app + Codex plugin.

RodZill4 / material-maker

A procedural textures authoring and 3D model painting tool based on the Godot game engine

tinyauthapp / tinyauth

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

d4rken-org / sdmaid-se

SD Maid 2/SE is Android's most thorough cleaning tool.

ChenlizheMe / Infernux

Building a Neural Network-Native Engine (3N). Python authoring, C++ runtime, Vulkan/WebGPU. Windows, Linux, Android and Web.

NomaDamas / CozyClay

Open source previs software in the browser: block a scene, pose characters, author camera moves and cuts, then take the same shots to an AI video model.

apache / airflow

Apache Airflow - A platform to programmatically author, schedule, and monitor workflows

appsmithorg / appsmith

Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.

dromara / Sa-Token

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

elementalsouls / Claude-OSINT

8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.

OpenOSINT / OpenOSINT

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

artokun / comfyui-mcp

Local-first, agent-native control plane for ComfyUI — MCP server + sidebar agent that generates images, video & audio, authors and runs workflows, and edits your live graph in natural language on ANY LLM (Claude, ChatGPT, Gemini, offline Ollama, or any hosted model). 178 tools, 36 AI skills, 55 installer packs. Local, LAN, VPS, or Comfy Cloud.

TianyuCodings / JevHarness

LLM-authored task-specific Jev harnesses with optional full-trajectory reward reflection and GEPA evolution.

Wang-auspicious / paper-xray

Teach any paper cold: a Hinton-meets-3B1B deep-reading prompt that reconstructs how the authors actually thought -- full verbatim edition

Maurdekye / orgtree

A multi-provider, multi-agent AI orchestrator that organizes agents into a visual authority hierarchy on a canvas.

issuerd / issuerd

Fast, Keycloak-compatible IAM with DPoP and CIBA

Nexilume-AI / nexus-cloud

Nexus — execution infrastructure for AI agents. Host agents in the cloud or behind NAT; let users attach and authorize their own computers and Android phones. Deploy once, work across devices. Python SDK · MCP · Shared run context · Browser, terminal and files · Built-in chat UI · Model routing.

googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Abdess / retrobios

Source-verified BIOS and firmware packs for RetroArch, Batocera, Recalbox, Lakka, RetroPie, EmuDeck, RetroBat, RetroDECK, RomM, BizHawk, ROCKNIX, and MiSTer FPGA. Platform-native verification, with emulator source code as the deciding authority.

pig-mesh / pig

↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.

Permify / permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

permitio / opal

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

ServiceStack / ServiceStack

Thoughtfully architected, obscenely fast, thoroughly enjoyable web services for all

cerbos / cerbos

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

oauthlib / oauthlib

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

edrlab / thorium-reader

A cross platform desktop reading app, based on the Readium Desktop toolkit

supabase / supabase-py

Python Client for Supabase. Query Postgres from Flask, Django, FastAPI. Python user authentication, security policies, edge functions, file storage, and realtime data streaming. Good first issue.

0xSteph / pentest-ai-agents

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

ovh / the-bastion

Authentication, authorization, traceability and auditability for SSH accesses.

thorvg / thorvg

A production-ready C++ vector graphics engine supporting SVG and Lottie formats, featuring advanced rendering backends such as WebGPU for high-performance graphics.

fabriziosalmi / certmate

Self-hosted certificate lifecycle management: issue, renew, discover, inventory and deploy TLS certificates across your infrastructure

juspay / hyperswitch-prism

One library | Many payment processors | Scale to multiple processors with few lines of code.

LottieFiles / dotlottie-web

High-performance Lottie & dotLottie web player powered by Rust + WASM, with React, Vue, Svelte, Solid & Web Components.

DeepXiv / deepxiv_sdk

Talk to research papers like talking to authors - Python package with AI agent for arXiv papers

litestar-org / advanced-alchemy

A carefully crafted, thoroughly tested, optimized companion library for SQLAlchemy

FeijiangHan / PaperForge

An active paper-reading skill that reconstructs author reasoning, explains methods mechanistically, stress-tests assumptions, and generates follow-up research ideas.

bahattinkoc / ipaverse

Download, re-sign, and sideload iOS, iPadOS, macOS, tvOS & visionOS apps without Xcode or Terminal — plus an authorized security-testing toolkit (ATS bypass, Frida injection, static scan, FairPlay dump).

flybrainlabs / node

flybrainlabs authority nodes, complete simulation replay, archives, and service APIs.

simgine / bevy_replicon

A server-authoritative replication crate for Bevy.