The tools directory
Every tool that made an issue — 36 so far, four more each week. What it does, and whether it's worth your time.
agents
- Agent Governance Toolkit open source Microsoft's policy enforcement, agent identity, sandboxing, and audit layer for autonomous agents — one pip install, any framework. It intercepts tool calls and delegations before execution with deterministic fail-closed controls, and claims coverage of all ten OWASP Agentic risks. Python, TypeScript/.NET, Rust, and Go.
- CubeSandbox open source Instant concurrent sandbox for AI agents -- lightweight, secure, purpose-built for agent code execution.
- DeepSeek Harness (dsh) open source DeepSeek's own agent harness, MIT, built on Cordis and organised so that everything — including the desktop and the Web UI — is a plugin. `npx @deepseek-ai/dsh web` starts a local server on 127.0.0.1:3080 and opens it; the README labels the whole thing a developer preview and warns in capitals that compatibility-breaking changes are coming.
- herdr open source Agent multiplexer for your terminal — run and juggle several AI agents in parallel (12K stars).
- orca open source Desktop environment for running multiple AI coding agents in parallel, on your own subscriptions.
- Page Agent open source Alibaba JavaScript in-page GUI agent that controls web interfaces with natural language.
- pi open source Unified agent toolkit: one LLM API across providers, an agent loop, a terminal UI, and a coding CLI — 80K stars and climbing.
- qm open source Multiplayer agent harness for teams, in Slack and on the web. Per-person and shared scopes each get their own memory, files, and permissions; runs Pi, OpenCode, Codex, or Claude Code underneath, self-hosted in your own cloud.
- reverse-skill open source A security-research skill router for coding agents: 40+ reverse-engineering, pentest, and CTF workflows with on-demand tool bootstrapping for Ghidra, Frida, IDA Pro, and radare2. Works with Claude Code, Cursor, Cline, and Kiro.
- strix open source Open-source AI pentesting agent — 37K stars — that probes your app for vulnerabilities before someone else does.
coding
- anti-slop open source Fifteen opinionated Oxlint rules that reject low-evidence TypeScript and JavaScript: chained type assertions, `unknown` parameters and returns, runtime `typeof` checks, module mocking, widen-then-assert. It is meant to be vendored rather than depended on — an agent skill copies the plugin in, merges the lint config, and then the files are yours to edit.
- book-to-skill open source Converts technical books, PDFs, EPUBs, and document folders into structured agent skills — a SKILL.md mental model, chapter files loaded on demand, a glossary, and cheatsheets — for Claude Code, Copilot CLI, and Amp. Claims 24×–51× fewer tokens than dumping the book into context.
- codebase-memory-mcp open source Indexes your codebase into a persistent knowledge graph that agents query over MCP.
- Codex Plugin for Claude Code open source OpenAI plugin that lets you use Codex from inside Claude Code for code review and task delegation.
- design.md open source Google's format spec for describing visual identity and design rules to AI coding agents.
- Graphify open source Builds a searchable knowledge graph from any codebase; works across Claude Code, Codex, Cursor, and Gemini CLI.
- hallmark open source Anti-slop design skill for Claude Code, Cursor, and Codex. Anti-patterns, a slop-test gate, and twenty themes with distinct macrostructures — it refuses to ship generic UI.
- Matt Pocock Skills open source A collection of composable agent skills for real engineering work — TDD, code review, debugging, domain modeling. Written to work across models, not just one vendor's CLI.
- no-mistakes open source An AI review gate that runs before code reaches the shared repo.
- Prime Agent open source A coding and research agent for long-running autonomous work, built on a Recursive Language Model — context as variables, subagents as function calls inside a persistent IPython REPL — plus a Continual Harness that keeps supplemental prompts, memories, and skills as durable state it refines with small evidence-backed updates.
- Stitch Skills open source Google-built library of design, build, and utility skills following the open Agent Skills standard — compatible with Claude Code, Cursor, and Codex via the Stitch MCP server.
local AI
image & video
infra
- Cloudflare Computer open source A virtual filesystem that lives inside a Durable Object: SQLite holds the authoritative state, and three pluggable backends — a FUSE-mounted container, a bash isolate, and a JavaScript isolate — run behind a single workspace.runtime.exec() entry point. MIT, 7.9K stars, explicitly preview-only.
- Firecrawl Claude plugin open source Firecrawl's official plugin bringing its web scraping natively into Claude Code.
- OmniRoute open source Free AI gateway: one endpoint for 231+ providers, 50+ of them free.
- OpenBot open source CopilotKit's agent platform for your own infrastructure: Docker Compose brings it up, data sits in your Postgres, no model ships in the box, and the admin's credential is encrypted at rest. Each bot gets a computer of its own — a real browser with its own logins, its own files, and only the tools you grant — and anything it does to a computer, file, or MCP server passes through a single gateway that decides before and records after. Any AG-UI agent can be dropped in as a coworker.
- pdf-inspector open source Rust library that classifies a PDF as text-based, scanned, image, or mixed in milliseconds, then extracts position-aware text and clean Markdown without OCR. Bindings for Python, Node, and Wasm, plus a CLI.
- TencentDB Agent Memory open source Team-level memory hub for AI agents — turns conversations, docs, and code into shared, reusable memory assets across agents and frameworks.
productivity
- cc-switch open source Free desktop app that installs and switches between Claude Code, Codex, Gemini CLI, and Hermes Agent — one interface for all of them.
- Cumora open source Cross-platform team chat — Electron, PWA, iOS, Android — where agents sit on the same roster as humans, with personas and memory, their own DMs, a shared Kanban board and calendar, and real email in and out. Brains come from either managed per-agent pods on the OpenAI Responses API or BYOA, where `npx cumora agent computer` pairs your own Mac or VPS and the agent runs on your local Claude Code or Codex; the server never sees your provider keys.
- meetily open source Privacy-first AI meeting notes — transcription and summaries run 100% locally via Whisper and Ollama.
- OfficeCLI open source Office suite built for AI agents. Read, edit, and automate Word, Excel, and PowerPoint from any agent. No Office installation required.
research
Four new tools land here every week
They hit subscriber inboxes first, every Thursday. The directory catches up after.
Free, weekly, one email — every Thursday. Unsubscribe anytime.