**stablyai/orca** (⭐ 107,899) runs multiple coding agents in parallel, each in its own git worktree, with a mobile app for remote monitoring; **makecindy/cindy** (⭐ 7,342) wraps Claude Code and Codex into one multi-device interface; **KnockOutEZ/wigolo** (⭐ 5,507) is a keyless, fully local search-and-crawl MCP server; **morluto/rea** (⭐ 396,382) lets an agent reverse-engineer how an app's feature works without source code. pydantic-ai v2.62.0 ships several compatibility notes worth reading before you upgrade.
**morluto/rea** (356.6k★) lets AI agents drive Ghidra/IDA/Hopper over MCP to reverse-engineer anything — a niche tool six months old that rocketed to hundreds of thousands of stars. **microsoft/agent-governance-toolkit** (6.5k★) claims to cover all 10 OWASP Agentic Top 10 risks with a policy engine, zero-trust identity, and execution sandboxing. **cloudflare/security-audit-skill** (35.6k★) is Cloudflare's own coding-agent skill for multi-phase security audits with independently verifiable findings. **headroomlabs-ai/headroom** (77.1k★) compresses tool output, logs, and RAG chunks before they hit the LLM — 20% fewer tokens for plain text, 60-95% for JSON. Release: Pydantic AI v2.59.0 patches a high-severity DoS in `web_fetch_tool`; Mastra 1.79.0 ships experimental MCP Events so MCP servers can push updates via poll, stream, or webhook.
REA is an MIT-licensed MCP server that lets Claude Code, Codex, Cursor, and other agents read native binaries through Ghidra, Hopper, or IDA, and take apart Electron, .NET, APK, and web targets directly. What separates it from single-engine bridges like GhidraMCP is that every result carries an evidence ID, a coverage status, and its limitations. One npx rea-agents setup installs it, and JavaScript analysis needs no disassembler at all.
**microsoft/mxc** (2,891 stars) is Microsoft's agent sandboxing layer, GA'd on 10/7, already backing GitHub Copilot, Codex, and Replit. **perplexityai/SPACE** (1,332 stars) is Perplexity open-sourcing the Firecracker-microVM sandbox that has run Perplexity Computer's internal infrastructure since June. **Niko1221/Strata** (26,784 stars) gets Qwen3.8-Flash-Next running on consumer hardware with one click, exposing an OpenAI/Anthropic-compatible local API. **morluto/rea** (304,672 stars) shows up for a third time — in four days it blew past the 146K stars we reported last time, crossing 300K. Release: pydantic-ai v2.57.0 flags four compatibility changes, including Skills now honoring `disable-model-invocation`/`user-invocable`.
morluto/rea (146,406★, +45,495 today) holds the #1 spot on GitHub trending for a second straight day, with an even bigger one-day gain than yesterday. mksglu/context-mode (27,096★) sandboxes MCP tool output to cut context usage by 98% via MCP + hooks. cathrynlavery/diagram-design (52,255★) lets agents draw custom-branded diagrams instead of Mermaid. microsoft/BitNet (40,826★) keeps optimizing 1-bit model inference on CPU/GPU. Agno v3.1.3 lets ClaudeAgent/CodexAgent sessions resume on any replica, run in the background, and replay step by step.
morluto/rea (96,754★, +25,585 today) tops GitHub trending after a one-day surge, wiring agents through MCP into Hopper/Ghidra/IDA to reverse-engineer native binaries and JS/Electron apps with evidence instead of guesswork. mhtsec/ARTEX (3,121★) is a third-party backup of the project that placed first on overall score in Baidu's "agent+" red-vs-blue competition, letting an LLM agent run penetration tests autonomously; since Oct 7 several vendors have reported misuse, so it is covered here only to explain the risk, and we do not recommend installing or using it. zhongerxin/iPhone-use (2,983★) lets Codex drive a real iPhone over USB. rociiu/talorys (719★) deploys a personal agent into your own Cloudflare account with one command. Pydantic AI v2.55.0 drops Python 3.10 support.
NotebookLM has no official API. This extension works by combining three techniques: reverse-engineered Google batchexecute RPC calls, DOM scraping, and cross-tab message passing.
notebooklm-py reverse-engineers Google's batchexecute RPC protocol, letting you programmatically control NotebookLM via Python / CLI / AI Agent — including audio, video, slides, quiz generation and more.