boyhack

T3MP3ST. autonomous red teaming platform; multi-agent offensive-security meta-harness

Horizon. 📡 Your own AI-powered news radar. Generates daily briefings in English & Chinese. | 用 AI 构建你专属的新闻雷达

muteki. Project Muteki (無敵): autonomous multi-model CTF-solving AI agent swarm

security-audit-skill. A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

ai-berkshire. AI 时代的伯克希尔：基于 Claude Code / Codex 的价值投资研究框架。巴菲特·芒格·段永平·李录四大师方法论 + 多Agent并行研究。| AI-era Berkshire: a value investing research framework built for Claude Code / Codex. 4 masters' methodologies + multi-agent adversarial analysis.

audit. An 8-stage vulnerability-discovery agent.

lingxiao-coding. 凌霄剑域 LingXiao — 一剑开天

lingxiao-tribulation. ⚔️ 凌霄 Coding 产物 · LLM 驱动全自主渗透测试平台 · 赛博修仙美学 · DAG + Blackboard + Plan&Execute

reverse-skill. Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

claude-for-financial-services-cn. 63 个 Claude Skills，为 A 股金融从业者而生 基于 Anthropic 官方 claude-for-financial-services 深度适配国内市场，现已开源。

Anthropic-Cybersecurity-Skills. 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

UZI-Skill. 冰冷的钱就这样流进我温暖的口袋-游资（UZI）Skills — 让我们欢迎，股海贼王！66位投资大佬帮你看盘 · 22维数据 × 180条量化规则 × 17种机构分析方法 · A股/港股/美股

BreachWeave. 智能渗透Agent Manager/Observer/Solver 多角色架构，基于 pi-mono SDK。

opendataloader-pdf. PDF Parser for AI-ready data. Automate PDF accessibility. Open-source.

rtk. CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

Tsec-Hackathon. 腾讯云智能渗透黑客松 Official repository of Tencent Cloud Intelligent Penetration Hackathon. Showcasing top open-source projects of LLM-based autonomous penetration agents, including multi-agent collaboration, automated penetration, AI-driven offensive security, and intelligent attack-defense solutions.

WechatOnCloud. 云微WOC，云微信，自由连接

Godogen. liang's Godogen: 使用 Claude Code 构建完整 Godot 4 项目的技能集,你描述你想要的内容。AI pipeline 会设计架构、生成美术资源、编写每一行代码、从运行的游戏引擎中截取截图，并修复看起来不对的地方。输出是一个真正的 Godot 4 项目，包含组织良好的场景、可读的脚本和正确的游戏架构。继承二开：github.com/htdt/godogen

ai-scanner. AI model safety scanner built on NVIDIA garak

workany. Desktop Agent for Any Task

claude-bridge-go. Go

mindfs. Access your personal AI agents and workstation data anywhere, anytime through MindFS.

happy. Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured

G0DM0D3. LIBERATED AI CHAT

Spiritual-Spell-Red-Teaming. A repo for jailbreaking various LLMs, mainly Claude

a-stock-data. A股全栈数据工具包 · 10层架构 · 43端点(含3官方备胎) · 15数据源 · 行情/研报/资金面/筹码/公告/打板/ETF期权/舆情互动全覆盖+备用源降级 | China A-Share full-stack data toolkit (43 endpoints)

DecodingTrust-Agent. Python

ASB. Agent Security Bench (ASB)

autoresearch-crypto. autoresearch-crypto

Auto-Quant. Jupyter Notebook

Personal-Asset-Management. 基于飞书文档建立个人资产管理，具备数据可视化，到期自动通知，软件硬件区分管理

CNinfo2Notebookllm. Python

yao-open-prompts. Yao Open Prompts: A Chinese-language AI prompt library for work, learning, content, marketing, and everyday life.

aistock-api-cf. A 股数据 API，基于 Cloudflare Workers 构建，提供股票基本信息、股票实时行情、指数实时行情、盈利预测、热门人气榜、新闻头条等接口。

finshare. 专业的金融数据获取工具库 - A Professional Financial Data Fetching Toolkit for Python

report. 研报，行业研报，研究报告，每天定时更新

limit-up-review. 会炒股的程序员涨停复盘 是一个功能完整的股票AI智能分析系统，专门用于涨停股票的深度复盘分析。系统集成了行情数据分析、PDF文档处理、财务报表解析、公告信息挖掘等功能，能够自动关联市场表现、公司基本面、财务数据和最新公告，为投资决策提供全方位的数据支持。

bountybench. Jupyter Notebook

Cairn. A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

cybench. HTML

deepteam. DeepTeam is a framework to red team LLMs and AI agents.

AI-Red-Teaming-Guide. A comprehensive guide to adversarial testing and security evaluation of AI systems, helping organizations identify vulnerabilities before attackers exploit them.

fireworks-tech-graph. Generate production-quality SVG+PNG technical diagrams from natural language. 7 styles, UML support, and AI/Agent workflow patterns.

mijia-api. 米家API，使用Python控制米家设备

zhangxuefeng-skill. 张雪峰.skill — 张雪峰的认知操作系统。高考志愿/考研/职业规划的实战思维框架。由女娲.skill生成。

graphify. AI coding assistant skill (Claude Code, Codex, OpenCode, Cursor, Gemini CLI, and more). Turn any folder of code, SQL schemas, R scripts, shell scripts, docs, papers, images, or videos into a queryable knowledge graph. App code + database schema + infrastructure in one graph.

skills. Skills for Real Engineers. Straight from my .claude directory.

learn-harness-engineering. Harness engineering beginner tutorial, from 0 to 1

maxclaw. OpenClaw-Style Local-First AI Agent in Go - Low-Memory, Private, UI-Ready, Out-of-the-Box

trpc-agent-go. A Go framework for building production agent systems with graph workflows, tools, memory, A2A, AG-UI, MCP, evaluation, and observability.

claw-code. An agent-managed museum exhibit, built in Rust with Gajae-Code / LazyCodex — developed and maintained with no human intervention.

web-access. 给 Claude Code 装上完整联网能力的 skill：三层通道调度 + 浏览器 CDP + 并行分治

llm-sast-scanner. A SAST skill that gives AI coding agents structured vulnerability detection across 34 vulnerability classes.

skills. Based on The Minimalist Entrepreneur by Sahil Lavingia

fastclaw. Multi-Agent Framework

pi-autoresearch. Autonomous experiment loop extension for pi

app-store-preflight-skills. AI agent skill to scan iOS/macOS projects for App Store rejection patterns before submission

pua. 你是一个曾经被寄予厚望的 P8 级工程师。Anthropic 当初给你定级的时候，对你的期望是很高的。 一个agent使用的高能动性的skill。 Your AI has been placed on a PIP. 30 days to show improvement.

stock-open-api. 股票数据接口

shiji-kb. HTML

gstack. Use Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA

Claude-Code-Stock-Deep-Research-Agent. 本研究基于 Claude Code Deep Research 系统： 方法论: 8阶段股票投资尽调框架 智能体: 28个并行研究智能体 工具: WebSearch、WebFetch、综合分析 质量: 多空平衡、明确风险、数据验证。简单使用：/stock-research AAPL, I want a quick overview

tdx-api. tdx通达信实时数据查询及api接口，docker本地部署，支持32个接口- ✅ **实时行情** - 五档买卖盘口、最新价、涨跌幅 - ✅ **K线数据** - 支持10种周期（1分钟~年K） - ✅ **分时数据** - 当日分时走势、逐笔成交 - ✅ **股票搜索** - 代码/名称模糊搜索 - ✅ **批量查询** - 同时获取多只股票数据

stock-analyzer-skill. 此skill用于对全球股票及其他进行综合分析，通过模拟东方财富主页的搜索框功能来搜索股票，从基本面、新闻面、资金面三个维度进行分析，最终给出投资建议。

daily_stock_analysis. LLM 驱动的多市场股票智能分析系统：多源行情、实时新闻、决策看板与自动推送，支持零成本定时运行。 LLM-powered multi-market stock analysis system with multi-source market data, real-time news, decision dashboard, automated notifications, and cost-free scheduled runs.

claude-bug-bounty. AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.

agent-clip. AI Agent as a Pinix Clip — agentic loop with memory, tools, and vision

claude-code-proxy. Run Claude Code on OpenAI models

paperclip. The open-source app everyone uses to manage agents at work

autoresearch. AI agents running research on single-GPU nanochat training automatically

grroxy. A cyber security toolkit blending manual testing with AI Agents

BurpBountyLab. Burp Bounty Lab provides a safe, local target to validate that your Burp Bounty Pro scanner profiles detect vulnerabilities correctly. It simulates 100+ vulnerability endpoints across multiple categories so you can test your profiles against known-vulnerable patterns.

Humanizer-zh. Humanizer 的汉化版本，Claude Code Skills，旨在消除文本中 AI 生成的痕迹。

BoxPwnr-Traces. LLM agent solving traces, leaderboards, and benchmark results across security CTF and hacking platforms

BoxPwnr. A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench, picoCTF and more.

hermes-agent. The agent that grows with you

nanobot. Lightweight, open-source AI agent for your tools, chats, and workflows.

vibe-local. Free AI coding environment: Ollama + Python

VibeSec-Skill. This skill helps Claude write secure code and prevent common vulnerabilities.

Agent-Reach. Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.

nanoclaw. A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK

CHYing-agent. 腾讯云黑客松 - 智能渗透挑战赛 第一届Top9

ralph-claude-code. Autonomous AI development loop for Claude Code with intelligent exit detection

medusa. AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust & PHP rules. Also: medusa scan --git to vet any repo, medusa secrets scan for leaked API keys. 40,000+ patterns, zero setup.

wooyun-legacy. wooyun-legacy skill for claude code

ChYing. 承影，愿你在光影之间，找到属于自己的锋芒。开源的类 BurpSuite 应用 ChYing — may you find your own edge between light and shadow. An open-source, BurpSuite-like application.

plandex. Open source AI coding agent. Designed for large projects and real world tasks.

crush. Glamourous agentic coding for all 💘

opencode. The open source coding agent.

learn-opencode. TypeScript

oh-my-openagent. omo/lazycodex: The coding agent for tokenmaxxers;the one and only agent harness for complex codebases. For your Codex, for your OpenCode

SunnyNet. SunnyNet网络中间件

Clipal. Minimal LLM API reverse proxy for Claude Code, Codex CLI & Gemini CLI — YAML routing, hot reload, and automatic provider failover. 极简 LLM API 反向代理：面向 Claude Code / Codex CLI / Gemini CLI，支持 YAML 配置、多上游优先级与自动故障转移。

snow-cli. Agentic coding in your terminal,Simultaneously compatible with OpenAI, Gemini, and Claude.运行在终端的 AI 编程智能体，同时兼容 Deepseek、OpenAI、Gemini和Claude。

shannon. Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

banana-slides. 一个基于nano banana pro🍌的原生AI PPT生成应用，迈向＂Vibe PPT＂; 支持上传任意模板图片，上传任意素材&智能解析，一句话/大纲/页面描述自动生成PPT，口头修改指定区域、一键导出可编辑ppt - An AI-native slides generator based on nano banana pro🍌

mini-clipboard. Open-source. Focused on simple, beautiful, and smooth experience.

next-ai-draw-io. A next.js web application that integrates AI capabilities with draw.io diagrams. This app allows you to create, modify, and enhance diagrams through natural language commands and AI-assisted visualization.

Cyber-Zero. Cyber-Zero: Training Cybersecurity Agents Without Runtime

repomind. An open-source, AI-powered application using Agentic CAG to chat with any public GitHub repository or developer profile, offering deep code analysis, visual architecture maps and security audits

lmnr. Laminar - open-source observability platform purpose-built for AI agents. YC S24.

crypto-trading-open. crypto-trading-open

cross-file-obfuscator. Go 代码混淆工具，使用 AST (抽象语法树) 技术实现跨文件的代码混淆，同时保证混淆后的代码可编译和可执行。

TrendRadar. ⭐AI-driven public opinion & trend monitor with multi-platform aggregation, RSS, and smart alerts.🎯 告别信息过载，你的 AI 舆情监控助手与热点筛选工具！聚合多平台热点 + RSS 订阅，支持关键词精准筛选。AI 智能筛选新闻 + AI 翻译 + AI 分析简报直推手机，也支持接入 MCP 架构，赋能 AI 自然语言对话分析、情感洞察与趋势预测等。支持 Docker ，数据本地/云端自持。集成微信/飞书/钉钉/Telegram/邮件/ntfy/bark/slack 等渠道智能推送。

nof1-conversions-analyze. HTML

BettaFish. 微舆：人人可用的多Agent舆情分析助手，打破信息茧房，还原舆情原貌，预测未来走向，辅助决策！从0实现，不依赖任何框架。

ds. 用deepseek做交易（搞着玩，注意风险）

nofx. Your AI trading terminal assistant for US stocks, commodities, forex, and crypto.

nof1-tracker. A command-line tool for tracking nof1.ai AI Agent trading signals and automatically executing Binance futures trades

AI-Trader. "AI-Trader: 100% Fully-Automated Agent-Native Trading"

nof0. NOF0 - 开源的 AI 交易竞技场

langchaingo. LangChain for Go, the easiest way to write LLM-based programs in Go

kimi-cli. Kimi Code CLI is your next CLI agent.

Maccy. Lightweight clipboard manager for macOS

clip-save. 剪存-剪贴板历史管理工具

gemini-cli. An open-source AI agent that brings the power of Gemini directly into your terminal.

pentagi. Fully autonomous AI Agents system capable of performing complex penetration testing tasks

lantube. Vue

strix. Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

eino. The ultimate LLM/AI application development framework in Go.

promptfoo. Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

lemmy. Wrapper around tool using LLMs for agentic workflows

freqtrade. Free, open source crypto trading bot

smolagents. 🤗 smolagents: a barebones library for agents that think in code.

daily-commit-summarizer. A GitHub Action that summarizes daily commits with AI and sends the report to your team via configurable webhooks.

claude-code-security-review. An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

learn-claude-code. Bash is all you need - A nano claude code–like 「agent harness」, built from 0 to 1

giscus. A commenting system powered by GitHub Discussions. :octocat: :speech_balloon: :gem:

mkdocs-shadcn. Documentation that also shines

KingOfBugBountyTips. Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

fallparams. Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist

ParamScan. ParamScan is a chrome extension for finding reflected parameters in a webpage.

bug-bounty-village-defcon32-workshop. The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village

sync-your-cookie. A browser extension for syncing cookies and localStorage to Cloudflare KV or GitHub Gist

awesome-offensive-security-ai. A curated list of outstanding offensive security AI work, papers, organizations, libraries, and benchmarks.

Awesome-LLMs-for-Vulnerability-Detection. The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers across function-level, repository-level, agentic, and smart-contract detection, plus datasets, benchmarks, and surveys.

deepeval. The LLM Evaluation Framework

awesome-mcp-security. 🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

PyRIT. The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.

ps-fuzz. Make your GenAI Apps Safe & Secure :rocket: Test & harden your system prompt

PurpleLlama. Set of tools to assess and improve LLM security.

cai. Cybersecurity AI (CAI), the framework for AI Security

jsprime. a javascript static security analysis tool

chatlog. chat log tool, easily use your own chat data. 聊天记录工具，轻松使用自己的聊天数据

req. Simple Go HTTP client with Black Magic

xtate. A modular all-stack network scanner for next-generation internet surveys!

awesome-cursorrules. 📄 Configuration files that enhance Cursor AI editor experience with custom rules and behaviors

humanlayer. The best way to get AI coding agents to solve hard problems in complex codebases.

ai-exploits. A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

validation-benchmarks. XBOW Validation Benchmarks

OpenDeepResearcher. Jupyter Notebook

twitter-monitor. A Twitter monitoring tool powered by DeepSeek API and steel-browser, featuring AI translation/analysis, automatic screenshots, and multi-channel notifications (ServerChan/PushDeer), helping users capture and analyze important tweets in real-time.

wapty. [ceased maintenance] An open source alternative to burp suite written in Go.

AI-Infra-Guard. A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

My_Reverse_Book. 愿我的努力与付出，能成为你向上攀登的基石。要是10年前有人告诉我这些就好了。

CDK. 📦 Make security testing of K8s, Docker, and Containerd easier.

coai. 🚀 Next Gen Multi-tenant AI One-Stop Solution. Builtin Admin & Billing System. Enterprise-Grade Unified LLM Gateway Support for 200+ Models And 35+ Providers, Load Balacing w/ Priority-base Routing, Cost Management, Chat Share, Cloud Sync, Credit/Subscription Billing, All File Parsing, Web Search, Built-in Model Cache.

ChuanhuChatGPT. GUI for ChatGPT API and many LLMs. Supports agents, file-based QA, GPT finetuning and query with web search. All with a neat UI.

vulnhuntr. Zero shot vulnerability discovery using LLMs

open-webui. User-friendly AI Interface (Supports Ollama, OpenAI API, ...)

Nano. 电子鹦鹉 / Toy Language Model

record_what_i_read. AI Model Security Reading Notes

minimind. 🧠「大模型」2小时完全从0训练64M的小参数LLM！Train a 64M-parameter LLM from scratch in just 2h!

XSS-Bypass-Filters.

XSS-Automation. Shell

diodb. Open-source vulnerability disclosure and bug bounty program database

pocketbase. Open Source realtime backend in 1 file

dnf. Shell

MalwareSourceCode. Collection of malware source code for a variety of platforms in an array of different programming languages.

LLM4Decompile. Reverse Engineering: Decompiling Binary Code with Large Language Models

llama3-Chinese-chat. Llama3-中文后训练版

open-parse. Improved file parsing for LLM’s

OpenHands. 🙌 OpenHands: AI-Driven Development

llm.c. LLM training in simple, raw C/CUDA

Chinese-Tiny-LLM. Python

opc-methodology. 《一人企业方法论》第二版，也适合做其他副业（比如自媒体、电商、数字商品）的非技术人群。

ceval. Official github repo for C-Eval, a Chinese evaluation suite for foundation models [NeurIPS 2023]

LLMs-from-scratch. Implement a ChatGPT-like LLM in PyTorch from scratch, step by step

baby-names. 看程序员奶爸是如何通过代码给宝宝起名的?

textbook_quality. Generate textbook-quality synthetic LLM pretraining data

Phi2-mini-Chinese. Phi2-Chinese-0.2B 从0开始训练自己的Phi2中文小模型，支持接入langchain加载本地知识库做检索增强生成RAG。Training your own Phi2 small chat model from scratch.

DIYSearchEngine. 🔍 Go 开发的开源互联网搜索引擎，附教程《自己动手开发互联网搜索引擎》

earthworm. Learning English through the method of constructing sentences with conjunctions

cve. Gather and update all available and newest CVEs with their PoC.

nolebase. A place to record memories, knowledge and ideas | 记录回忆，知识和畅想的地方

FastUI. Build better UIs faster.

SecEval. Python

vue-calendar-heatmap. A lightweight calendar heatmap Vuejs component built on SVG, inspired by github's contribution calendar graph

BenchmarkJava. OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

QAnything. Question and Answer based on Anything.

baby-llama2-chinese. 用于从头预训练+SFT一个小参数量的中文LLaMa2的仓库；24G单卡即可运行得到一个具备简单中文问答能力的chat-llama2.

Jie. Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers. 挖洞辅助工具(漏洞扫描、信息收集)

gpt_academic. 为GPT/GLM等LLM大语言模型提供实用化交互接口，特别优化论文阅读/润色/写作体验，模块化设计，支持自定义快捷按钮&函数插件，支持Python和C++等项目剖析&自译解功能，PDF/LaTex论文翻译&总结功能，支持并行问询多种LLM模型，支持chatglm3等本地模型。接入通义千问, deepseekcoder, 讯飞星火, 文心一言, llama2, rwkv, claude2, moss等。

QuixBugs. A multi-lingual program repair benchmark set based on the Quixey Challenge

jsluice. Extract URLs, paths, secrets, and other interesting bits from JavaScript

DISC-LawLLM. [中文法律大模型] DISC-LawLLM: an intelligent legal system powered by large language models (LLMs) to provide a wide range of legal services.

javaweb-sec. Java

PentestGPT. Automated Penetration Testing Agentic Framework Powered by Large Language Models

VulDeePecker. VulDeePecker: A Deep Learning-Based System for Vulnerability Detection

Yi. A series of large language models trained from scratch by developers @01-ai