Recently updated open-source projects

zKettle encrypts secrets locally and stores only ciphertext, placing the decryption key in the URL fragment so the server never receives it. Links can expire by time or view count and can be revoked early, with CLI and MCP tools for common workflows. Reading through a terminal or agent can expose plaintext to logs or context, so file or clipboard output is safer.

This Claude Code skill collects TON smart-contract security and development guidance for Tolk 1.2 and TVM 12. It covers access control, integer overflow, asynchronous reentrancy, message deserialization, bounce handling, gas management, and an eleven-phase audit checklist, with vulnerable and corrected examples. It is a reference skill for developers reviewing or implementing TON contracts, rather than a standalone auditing service.

Review a live site, screenshot, Figma design, or frontend code for issues that distract from content and user goals, or apply the same framework while designing a page from scratch. The skill checks fifteen principles covering clarity, hierarchy, accessibility, focus, performance, maintainability, and commercial usefulness, with optional scoring and prioritized fixes.

This Claude Code skill finds PDFs in a folder, groups them into NotebookLM batches, and exports podcast-style audio, structured Markdown summaries, and processing metadata. You can choose the language, output directory, batch size, or audio-only and summary-only modes. It requires an initial Google login and relies on the unofficial notebooklm-py library, so API changes or expired cookies can interrupt the workflow.

Provide an address and either plain text or a PDF, and the skill previews the page count and price before submitting the job to Mailclaw. It then returns a Solana USDC payment address, after which the letter is printed, placed in a hand-addressed envelope, photographed, and mailed through USPS. First Class, certified, return-receipt, and international tiers are available.

This agent skill wraps the SkedGo TripGo API with references and runnable Bash scripts for routing, public transport data, real-time services, geocoding, POIs, and trip lifecycle operations. It is particularly useful for comparing multiple transport modes from the same origin and destination. A TripGo API key, curl, and jq are required, and deprecated endpoints remain only for compatibility.

Use a local Node.js CLI to read feeds and threads or to post, reply, and delete through the official AT Protocol SDK. Write commands show a payload preview, support dry runs, require explicit confirmation for deletion, and retry rate-limited requests with backoff; authentication uses a Bluesky app password.

Ask Claude to deploy a frontend project and this skill handles repository creation, GitHub Actions setup, Pages activation, and deployment monitoring through to the live URL. It also fixes common Vite base-path failures automatically. Git and an authenticated GitHub CLI are required, while some frameworks such as CRA, Next.js static export, or Angular may still need their documented configuration changes.

dyu/bookmarks is a small self-hosted bookmarking application for keeping a personal collection under your own control. It can import bookmarks from Delicious or Chrome and includes a bookmarklet for saving pages from the browser. A standalone Linux package is provided for quick startup, but the runtime is dated: the server depends on JDK 7, and the optional desktop mode also uses NW.js.

Match a resume to a job description without inventing or freely rewriting experience. The skill analyzes fit and gaps, proposes a plan, then selects existing bullets from a maintained master list and compiles them into a fixed one-page LaTeX template after approval; useful results depend on preparing that bullet library first.

MetEngine Data Agent exposes 63 endpoints across Polymarket, Hyperliquid, and Meteora for smart-money consensus, wallet profiles, trader leaderboards, capital flow, and liquidity-pool analysis. Requests use the x402 protocol and settle in Solana USDC only when a successful response is returned, without API keys or subscriptions. A funded wallet and securely configured private key are required.

code-surgeon offers four Claude Code modes for discovery, change review, optimization, and implementation planning. It selects relevant files, maps architecture, identifies likely breakage or bottlenecks, and turns larger work into testable steps. The recommendations are guidance rather than a substitute for developer judgment and testing.

Upload or paste an agreement to check classification, privacy, enforceability, missing provisions, and internal inconsistencies when a New Zealand company engages Philippines-based workers. The plugin covers contractor and employment agreements, NDAs, and SaaS or master service terms, with suggested redlines and market benchmarks. Its analysis is informational only and does not replace qualified legal counsel.

Talk to Claude naturally to store or retrieve memories, contacts, projects, engagements, and journal entries. The skill keeps everything as local Markdown files with YAML front matter, supports search and dashboard-style summaries, and needs no database or background server. The data directory can optionally be a private Git repository for versioning and multi-machine synchronization.

Pubky Stack Skill gives Claude focused references for the Pubky SDK, Pkarr identity and routing, Pubky Ring authentication, homeserver data, app schemas, and indexer patterns. It includes reusable templates for authentication, typed CRUD, Next.js setup, and custom indexers, making it useful for developers building Pubky-based applications.

This Claude Code skill helps create or repair Codesphere ci.yml files and plan deployments using schemaVersion v0.2. It covers single applications and multi-service landscapes, along with domains, environment variables, networking, scaling, the cs-go CLI, public API, and CI integrations, making it useful for developers already deploying on Codesphere.

Indic Voice Pipeline combines yt-dlp with fine-tuned Whisper models and Qwen3-ASR to process audio or video in 12 Indian languages and export text, subtitles, and structured JSON. Optional pyannote diarization adds speaker labels and requires a Hugging Face token. Transcription runs locally, though model downloads and hardware demands can be substantial.

Next-Unicorn scans a codebase for custom implementations that could be replaced by maintained libraries, while also surfacing missing engineering capabilities. The AI agent supplies candidate recommendations rather than relying on a hardcoded package list, and Context7 documentation is used to verify replacements and gaps. The result can include a migration plan, risks, ecosystem dependencies, and a checklist of code that can be removed.