Hidden gems, rated before they trend.
今天发现 320 个新项目，194 个评了级。
收录新建 2026-10-20 – 2026-10-22抓取 600粗筛 50已评级 38
用一个小型 PHP 扩展逐组件镜像官方修复，覆盖 5.6–8.5，引擎自带补丁后自动让位，还列了 Sury、cPanel、DirectAdmin、Docker 的部署路径——共享主机运维这周正需要它；代价是生产环境背一个非官方补丁。
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP …
★56
用 Browser Use agent 从真实网页挖案例自动生成 RL 环境,解决 agent 训练缺真实任务分布的问题;0.8 天 102 星背靠 browser-use 品牌与 RL 训练热;路径是把环境生成做成训练数据或评测的付费 API;风险是环境质量与可复现性存疑,竞品是各家自建 benchmark。
Build RL environments for any domain from real cases that Browser Use agents mine from the web
★102
给 Quadro K420 这类老卡写的推理引擎，跑三值量化 2B 模型到 20+ tokens/s，还带 OpenAI 兼容服务。把旧硬件榨出可用速度的思路少见，数字也给得具体；局限是只针对一张卡和一个模型。
A custom LLM inference engine for the NVIDIA Quadro K420: Ternary-Bonsai-2-2B at 20+ tokens/s with an OpenAI-compatible server
★26
让编码 agent 在训练过程中不断重写优化器本身，思路接近 AlphaEvolve 一类自动算法搜索。对做训练优化的研究者有吸引力，一天 55 星也算有反响。但只有一句话，能否装上用起来还得看代码与实验。
OPAL: a reactive optimizer. A coding agent rewrites the optimizer while your model trains.
★55
把 Bazzite 的 Steam 游戏模式镜像做到 PS5 上，Game Mode、VCN 硬解和 Wi-Fi 都能工作。对折腾 PS5 Linux 的人是实质进展；局限是只覆盖特定固件与机型，普通玩家门槛很高。
Bazzite Deck (Steam Gaming Mode) images for the PS5 with working Game Mode, VCN and Wi-Fi
★19
把参考视频或图片转成可编辑的 Blender 程序化节点树，附带一套测过的 Geometry、Shader 和合成节点库，做成 coding-agent skill。做 3D 参考复现的人能省下大量搭节点时间；局限是依赖特定 agent 客户端，16 star 还没人验证过效果。
Turn a reference video, image or idea into an editable procedural Blender node system: a coding-agent skill with a tested Geometry/Shader/compositor node-group library
★16
用模拟化工厂 90 天的 historian 数据做根因分析基准，故障埋在数据里等人定位。工业时序 RCA 一直缺可公开复现的数据集，做过程控制或时序诊断的团队值得看一眼；局限是场景单一、规模偏小。
HistorianRCA: a root cause analysis benchmark. 90 days of simulated plant historian data from a steam-heated hold tank, with hidden faults to find and diagnose.
★17
给 Google TV / Android TV 的安静无广告桌面，范围小、描述老实，电视桌面确实是长期痛点；同类有 Projectivy 等成熟选择，它要靠细节打磨才站得住。
A calm, ad-free home screen for Google TV and Android TV
★42
让 FreeCAD 直接打开 SolidWorks 的 SLDPRT/SLDASM 和 Parasolid 文件，省掉一次付费转换。机械设计圈长期缺这条路，范围也讲得清楚；难点是复杂装配体的保真度还没人验证。
FreeCAD addon: open and import SolidWorks parts (.SLDPRT), assemblies (.SLDASM) and Parasolid files
★14
把「离线复现某 PHP RCE 漏洞并据此写检测规则」收成一个可重跑的 Shell 实验环境，明确说明不含 exploit、需自带样本，对做检测工程的蓝队有直接用处。范围克制、描述诚实；局限是只覆盖单一 CVE，样本仍要自己找。
Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618/109619 and build detection rules. No exploit included; bring your own sample.
★19
把 Amiga 的 Sensible World of Soccer 用 C 重写成跨平台、可联网对战的开源版本，经典游戏重制一直是社区刚需。风险是原版素材版权与一天建库带来的完成度疑问。
An open-source C port of Sensible World of Soccer (Amiga), for Windows, macOS, Linux, Amiga and the web, with online multiplayer.
★16
纯 Go 中间件，给任意 LLM API 补上工具调用能力，Go 服务端想接 function calling 不必再绑 Python 生态。一句话说清定位、范围克制；要面对的是 LiteLLM 这类成熟网关的生态优势。
给任意 LLM API 补上工具调用能力的纯 Go 中间件库。
★12
针对三星 U8000F/Tizen 9 的原生清爽桌面、可回退的去预装工具，还配了给 agent 读的说明。目标窄到具体型号反而显得诚实；局限是只对这一台电视有效，动系统分区有风险。
Native Quiet Home launcher, reversible cleanup tools, and an agent-readable guide for the Samsung U8000F running Tizen 9.
★64
Rust 写的桌面种子播放器，边下边播、秒级拖动进度，明确不联网、不要账号、不收集遥测。对常看种子视频的人确实省事；但 Stremio、WebTorrent 已覆盖类似需求，能否稳定解码才是关键。
Stream any torrent, video or audio, and skip to any moment in about a second. Free, open-source desktop app for Windows, macOS and Linux. No servers, no accounts, no telemetry.
★27
把 Ming-3.0-tts 封成 ComfyUI 节点，做视频配音的人可以直接在工作流里出语音。范围克制、描述诚实，不吹牛；但本质是移植封装，价值上限取决于上游模型，替代品是同类的 TTS 节点。
Native ComfyUI port of Ming-3.0-tts, supporting 0.5B and Tiny 9B speech generation.
★17
今天就到这里。下面是其余等级和榜单。
DYT CN: reproducible China-market research CLI and agent skills
多機錄影：免費開源的手機多機位錄影工具，用電腦一鍵遙控多支 Android 手機同步錄影。即時畫面、各別變焦、手機原生 4K、臉部優先對焦曝光、直式＋橫式同時錄（長影片＋短影音），邊錄邊傳回電腦，還能一次裁掉每台的頭尾。Free open-source multi-camera recorder: control multiple Android phones from a web dashboa…
🚆 Rozkład jazdy PKP, PKS i komunikacji miejskiej dla AI – serwer MCP: wyszukiwarka połączeń z przesiadkami, odjazdy, opóźnienia na żywo, ceny biletów. Polish train & bus timetables for Claude, ChatGPT…
Skills for coding agents: rebuild a motion design video as looping SVG + GSAP code, checked frame by frame against the source
Official code and project page for PACE-Bench: When Coding Agents Outpace Review: Evaluating PRD-Driven Development in Mature Enterprise Repositories.
Turn a gaming PC or a MacBook/Mac Mini into a local AI server with one install. A web dashboard installs and switches the models: chat and coding on both, image and video on NVIDIA. Tuned for 12 to 24…
Organize your iPhone home screen from any MCP-compatible AI client
简居 TV：面向中国大陆常用视频应用的简约 Android TV 桌面，基于 Aerial 定制。
Stretchtext replies for Pi: the model answers in one to three short sentences, and the phrases that hold more open in place into longer text, which may hold further phrases to open.
白板手绘风格的动效视频 Skill：手写字、马克笔线稿、贴胶带的截图和视频片段，配音对时、卡点配乐，逐帧渲染成 MP4
Glass globes of water, simulated live on the GPU with WebGPU and three.js
The official code of StreamingSwap, a real-time video face swapping method.
ComfyUI node that feeds a reference image through the Qwen3.5-9B vision tower and injects its embeddings into the text prompt (MOSS-Image conditioning)
A screen reader for the Mac that works alongside VoiceOver. Free and open source.
An Evidence-Grounded Benchmark for Audio-Visual Reasoning
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.1…
基于麦当劳官方 MCP 的本机面板与 Agent Skill：单人热量/预算配餐、多人拼单与透明分账、团购比价，以及纸板像素风 McDNA 双面分享卡；确定性内核负责选配与分账。2026 麦当劳程序员创意开发大赛参赛项目。
Try Xteink X3 / X4 Classic / X4 Pro e-reader firmwares without the reader: in the browser or on Windows (unofficial)
A CrossPlatform Studio for TF2 HUD development, Perfect for everyone
Local autoresearch on a MacBook, with Flint: geometry, scheduling and machine learning experiments.
🔓 An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWASP WSTG, validates findings, and writes dev + stakeholder rep…
Deterministic bytecode VM for agent execution - verified images, snapshots and a hash-chained replay journal
Python SDK, CLI, and MCP server for isolated AWS microVM sandboxes
Run Hermes Agent's terminal, file and code tools inside a Cua Space
Run applications from Mac OS X 10.6 Snow Leopard on anywhere.
Script Python que inicia sesión en tu router XGB430vPro de Digi, se descarga la configuración, la descifra y te muestra las credenciales de administrador, PPPoE y SIP.
Reachability + change detector for the php2shell PHP RCEs (CVE-2026-109618 / CVE-2026-109619). Agent-ready, stdlib only, read-only by default.
A Windows WebSocket client and server library for Delphi and FreePascal.
Unofficial VLC 4 build with the interface designed by Juxtopposed (CC BY 4.0), running on Windows. Not affiliated with VideoLAN.
Unofficial Android (arm64) port of Mortal Kombat: Shaolin Monks (Xbox), statically recompiled with XboxXBE-Recomp. Vulkan renderer, touch controls, gamepad support, optional CRT/scanline filters, FXAA…
Офлайн-конвертер файлов для macOS: перетащите файл, нажмите клавишу, бросьте на колесо
Would an AI let a grandma die to protect copyright?
一键修改PCL，PCLCE,HMCL的exe，恢复下载功能的应用
Self-hosted private websites for your team. Upload a folder of HTML and get a link only your coworkers can open, with a database, live updates, uploads and AI built in. An open-source take on Shopify …
Make AI agents aim higher without losing control: a Claude Code skill with two bars per task, a cheap gate check before expensive work, and an independent verifier that never sees the worker's reasoni…
Grids — fast multi-pane file manager for Windows (Rust, Win32)
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress.
视频人物替换制作 Skill：分镜与逐镜参考、MiniMax H3 ComfyUI、双 DGX Spark 合算及多机分段、原声合成与动态质检，附图文教程。
An app that tries to minimize SUNO's artifacts and noises
Working Linux Loader For PS5 Firmware 12.40 Phat
Python framework for monthly sector ETF allocation and multifactor stock backtesting, with transaction-cost accounting and separate Chinese and English research reports.
PCL 下载与整合包安装功能恢复工具，原生 WPF 单文件 GUI。
A TypeScript content mapper that types JSON imports as const
Sistema gratuito para lives interativas de cobrinha no TikTok
Claude Code agent team (PM, Scout, Engineer, QA, Growth) plus YouTube and Instagram skills for running a content channel with human approval.
Home Assistant dashboard for Echo Show and Echo Spot running Kiosk Satellite. Plain HTML, CSS and JavaScript.
Source code of Mac CLI tool szt (sizetree), which shows what's taking up your disk. Distribution via Homebrew
CVE-2026-109618 / CVE-2026-109619 — PHP session.upload_progress RCE PoC & Vulnerable Lab
11 Claude skills for day trading: scan thousands of charts, track breaking news, time every entry and exit, and replay every outcome before you risk a dollar.
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
Open-source AI agents : web search, code sandbox, file analysis, agent teamwork, payments and sign-ups. Hosted or fully local.
Browser-based educational inference simulator and learning workbench. No GPU required. Real server integration and desktop app planned.
A Claude Code skill for clean, honest dashboard UI: KPI tiles, charts, date pickers, ranked lists, states, layouts and a screenshot QA pass. Distilled from 127 shipped dashboards.
把文章、案例或笔记排成 3:4 小红书图文 | 1080×1440 | 20 个母版 | 浅色 / 深色 | Claude Code Skill
Spotify on Linux in ~60 MB: Spotify's official Soloist player as an MPRIS player, so bars, media keys and playerctl just work.
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes onl…
Open-source template for "one photo → AI video that follows a viral template" SaaS sites, one site per trending keyword. Cloudflare Workers + D1/R2/KV/Queues, TanStack Start + Hono, Google sign-in, cr…
Codex skill：拆解代码功能板块，以彩色流程图和运行证据复核代码功能的实现--辅助你进行ai代码写作与更新。
A portable /dy skill for cc-connect + Claude Code: Douyin videos, image posts and collections to Obsidian, with local ASR/OCR and private configuration.
归藏电视：适配国内小米电视的简洁 Android 桌面，大字列表、壁纸轮播与 HDMI 直达。
A small, readable inference engine inspired by DeepInfer. CPU first, built for learning.
Dragonwilds Inventory Planner is a Windows companion project for RuneScape: Dragonwilds, focused on inventory organization and equipment planning. Explore its documentation and packaged release.
Claude Code가 하는 일을 브라우저 속 미니어처 사무실 캐릭터로 보여주는 로컬 도구 🏢
3D Gaussian Splatting scene registration and ROS-driven mobile-manipulator digital twin modules for HoloLens spatial interaction.
LumaDock — a native macOS launcher for player-imported Switch games, powered by nxnative
Super Mario Galaxy on the PlayStation 5: Nebula's static recompilation on a Win32 compatibility layer, Direct3D 12 on vkd3d and RADV
CT modem (家庭网关/光猫) 风格 OpenWrt LuCI 主题
防污涂料配方模拟器 · Antifouling coating formulation simulator (Android + iOS + Electron). Simulation ≠ measurement. Track A/C example data in public repo.
Metal Gear Solid 2 HD (NVIDIA SHIELD) para Android ARM64 — recompilação estática ARM32→ARM64, Adreno e Mali, LSFG, menus em 7 idiomas. Traga sua própria cópia do jogo. / Static recompilation port, bri…
Scala Interpreter / AOT Compiler written in Rust
Head-aligned spatial robot teleoperation with hand-pose tracking, quaternion motion commands, clutching, and ROS integration.
Operational information regarding the 2026 php2shell vulnerabilities
McCosmos · 麦门星图｜基于麦当劳 MCP 营养数据的三维卡通美食宇宙，支持真实餐品图片、营养图鉴与星际探索。
Your Omarchy machine draws its own little mark from its specs and stats.
Free, open-source desktop video editor in the style of CapCut: timeline editing, offline auto captions (Whisper), GPU animated effects & transitions, music/SFX & stock libraries, and an AI assistant. …
CVE-2026-109618/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)
Analyze, draft, or revise Introductions for computer science papers — especially ML, computer vision, NLP, multimodal learning, information retrieval, and data mining. Its guidance is distilled from a…
Home HQ: a family dashboard for a wall-mounted photo frame and phones. Rails 8, Hotwire, SQLite, Kamal.
独立的 /dy-author Skill：将抖音作者作品整理为 Obsidian 知识笔记与面试题，支持个人配置与 cc-connect。
Ferry — 原生 macOS 百度网盘下载工具。Native macOS client for Baidu Netdisk.
AppLens 软件透视：让软件内部看得见。本地软件分析工具箱与 MCP 服务，提供 Windows 安装和验收。
Marco de fotos convertido en panel familiar de pared: calendario iCal, turnos, tareas de los niños, compra, luz y Home Assistant. Basado en Planify-Dashboard de eusonlito.
Telegram iOS feature suggestion: Clear History as a black hole from the Dynamic Island. UIKit + Metal, ready to integrate.
Rust-based native fast search tool for Windows
Torchlight build for modern portable systems
Ornith-1.5-122B (EXL3-EAQ) on one DGX Spark with TensorFold
a relay on Runflare with a password-protected web panel
Your own design studio inside the coding agent you already use.
Design Style · 每天一个设计风格 — 动效短片、风格图与制作指南，全部源码开放。
Nintendo Switch port of Black Ops 2 (Requiem Project)
nxnative + RomFS archive: pack a Switch RomFS into ~100 files so large games can be installed on iOS
Notifys you when your items on donutsmp's auction house have expired.
设计Skill：面向 AI 生图与视觉设计的开源 Agent Skills | Design Skills: Open-source Agent Skills for AI image creation and visual design.
A native C++ port(able) of Buckshot Roulette. General Release of Liability on the Vita
Pocket proof-of-concept and lab materials for PHP2SHELL remote code execution research.
vibe coded supermimic within 1h, LAFAN passed within 1.5 gpuh training
Configurable system-prompt section for DeepSeek Harness, rendered after every built-in section.
基于视觉模型的 AI 运营智能体
Single-player tModLoader controller for Fargo's Mutant.
在通话里看见你：自建 AI 的语音通话、共享屏幕和镜头（Android 套壳篇）
A virtual agentic office in 3D where four AI robot agents (Evan, Lummi, Athena, Zed) chat, collaborate and get work done. Zed, the reception manager, takes your commands and delegates tasks. Includes …
Run a PS4 game backup inside SWRR on PS5 through Luac0re, without a kernel exploit (tooling only, no game files)
Research papers on the mechanisms, generalization, and interpretability of learned world models.
The open TMS built for AI
Game development plugin for Hermes Agent: sound effects, music, NPC voices, pixel art, 3D models, Godot/Unity/Blender/Unreal, a playtester that actually plays the build, and one-click export.
AI Roadmap 2026: a beginner's path through Foundations, LLM Engineering, Agents, Evaluation, and Production, with verified free resources and a mini-project per layer
Always-on personal AI assistant with web chat, Telegram, proactive reminders, long-term memory, and app integrations. Includes a builder that deploys configured copies in one click.
An Agent Harness for Inverse Physics of Dynamic Scenes
CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.
The robot runtime for IslandOS Aether, connecting hardware, perception, and skills through shared interfaces for robot state and actions.
APIMesa — 150+ pay-per-call APIs for AI, web scraping, data, SEO, lead generation, media & developer utilities. One API key, live playground.
DLSS 5 Swapper brings DLSS 5 installation and configuration into one desktop application, so you don't have to manage every game modification by hand. It can detect games from supported libraries, wor…
AI jailbreaks: 35 paste-ready AI jailbreak prompts for 25+ frontier and open-weight models - system prompts, AGENTS.md specs, and Ollama Modelfiles. Built for AI security research and red-team testing…
A minimalist, classless-first CSS framework.
chat-keeper专注于提供Claude镜像站 提供了1:1还原官网的体验，国内直连可用
麦卡收藏家 · 基于麦当劳中国 MCP 的卡牌收集 Skill + 网页版（麦当劳程序员创意开发大赛参赛作品）
A custom home screen for a Samsung Q70B (Tizen 6.5)
Taskmanager For Linux
这是一个虚拟商品交易平台，账号、皮肤、道具、点卡，安全交易
A customizable, open-source Discord-style bio website template with smooth animations, social links, and a clean design. Live demo available.
Our lightning-fast inference engine.
Clove API 1.0.6 source code
PiP for Steam Machine - Coded with Calude
轻量版鲸鱼娘 DSH 皮肤 Lightweight Whale Musume theme for DeepSeek Harness.
🔥 cs-2-cs2-skin-changer-skin-swapper-skinchanger-skinswapper-all-skins
Open-source YouTube AI video editing system: Eyeline teleprompter, editing agents, JSON, Claude Design, animation and motion graphics.
🔥 valorant-weapon-skin-changer-swapper-all-skins
用多彩的人类世界，训练 DSH 的人格：默认积累信笺反思于专用 human-world.md；允许通过 DSH 与外部插件接驳。历史、收藏、点赞与投币独立默认关闭；本项目不提供评论接口。
Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.
🔥 roblox-scripts-executor-mod-menu-with-cheats-and-hacks
🔥 league-of-legends-lol-skin-swapper-skin-changer
PoC for CVE-2026-109618 / CVE-2026-109619 (php2shell): PHP session.upload_progress UAF. check = GET fingerprint + bulk JSONL; exploit = smart 618 (multi-path trigger) or 619 with --call. Stdlib only.
Android & iOS version of ip-please
Bulk-create Retriever AI (rtrvr.ai) accounts, harvest Firebase tokens and session cookies, and serve 10 free managed models through an OpenAI-compatible pool wired into 9Router.
CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)
Cinq propositions de simplification du droit français par @alexmasmej (https://x.com/alexmasmej/status/2112088220804722917?s=46)
Independent security research on the critical PHP session.upload_progress vulnerabilities (CVSS v4.0 9.2).
DLSS 5 Swapper is a Windows utility designed to help users install and manage DLSS 5 neural-rendering components in compatible games and supported emulators.
Retired example projects from Ostorlab's interview process, kept for reference.
Camtasia 2026: Full working installer for professional video editing, screen recording, and VFX. Ready-to-use desktop edition with all...
Kms Pico Free 2026: Full working installer for professional desktop software utility configuration, ready to run without activation hassles.
A better TV
Professional Cinema 4D configuration utility for 2026, offering a full working installer with all essential features pre-configured and ready to run.
Full working installer for Borisfx 2026, your professional VFX solution ready to run.
Kursy Bootcamp AI DeepDive 2026/2027
Fixer unexpected error 1413677057 Wardogs - fix your game
leaksdarkbreach
Mornye for macOS, Windows and Linux. Coming soon.
把 agent 主循环做成 Postgres 事件日志加无状态 worker 的持久化 harness,解决 agent 重启丢状态、无法多机接管、空闲仍烧钱的真痛点;2969 星与创始人长文说明团队已有真实用户基础;开源核心加托管版是企业级标准件的典型打法,可直接替代 Claude Managed Agents;最大风险是 Anthropic/OpenAI 官方托管服务碾压。
Hey all, Kartik from Omnara ( https://omnara.com) here. We're building an open-source API for running durable agents. You create an agent with an API call, and Omnara runs the agent loop, gives the ag…
▲16
把 2B 小模型塞进手机本地驱动 Android 应用操作,解决 GUI agent 依赖云端大模型带来的延迟、隐私与调用成本问题;12 分不高但端侧 computer-use 是真空白,容易被转发扩散;路径是 OEM 预装、无障碍自动化或移动端自动化测试 SDK 授权;最大风险是 Google 自家端侧 agent 与系统权限封锁。
▲12
GitHub 原始排序 · 看相对平时的热度，不按涨星
GitHub 原始排序 · 看相对平时的热度，不按涨星
GitHub 原始排序 · 看相对平时的热度，不按涨星