SCSKiller

SkillSpector is an open-source security scanner for AI agent skills, developed by NVIDIA. It scans Git repositories, URLs, ZIP archives, directories, and individual skill files before installation, looking for prompt injection, data exfiltration, privilege escalation, supply-chain issues, dangerous code, MCP permission problems, tool poisoning, and other malicious patterns. Its two-stage pipeline combines static analysis—including regex, Python AST, taint tracking, YARA signatures, and OSV.dev dependency lookups—with optional LLM-based semantic evaluation. It produces terminal, JSON, Markdown, or SARIF reports containing findings, severity labels, a 0–100 risk score, and installation recommendations. Baselines can suppress accepted findings, and the CLI can be used in CI or install gates through exit codes and machine-readable output. SkillSpector can also run as an MCP server callable by compatible agents. It does not execute scanned skills or sandbox them; optional LLM analysis sends eligible file contents to the configured provider, while dependency checks query OSV.dev. The project is distributed under the Apache License 2.0 and is part of NVIDIA's Verified Skills pipeline.

RenoDX, short for “Renovation Engine for DirectX Games,” is a toolset for modding DirectX games. It uses ReShade’s add-on system to hook into DirectX without patching version-specific executable files. The toolset can replace shaders, inject buffers, add overlays, upgrade swapchains and texture resources, and write user settings to disk. Its repository also provides an FPS limiter add-on, a developer kit for building add-ons, and a Shader Model 6.0+ decompiler.

DwarfStar is a self-contained, model-specific native inference engine for running DeepSeek V4 Flash, GLM 5.2, and, on high-memory systems, DeepSeek V4 PRO locally. It combines model loading, prompt rendering, tool calls, persistent KV state, an HTTP server, and a coding agent rather than serving as a general GGUF runner. The engine supports Metal on Macs, CUDA including multi-GPU systems, and ROCm on Strix Halo hardware; it also provides SSD streaming for machines with insufficient RAM, distributed tensor and pipeline parallelism, and server-side micro-batching for multi-user inference. The repository includes tooling and data for GGUF, imatrix, quality, and speed testing, and acknowledges code and design contributions from llama.cpp and GGML.

Highball is a native macOS app and CLI for running Windows games on Apple Silicon. It assembles Wine engines from pinned upstream builds, sets up bottles, and supports renderer overlays for WineD3D, DXMT, D3DMetal, and DXVK; it can install Steam, connect an Epic library through Legendary, and switch renderers per bottle or launch. Its compatibility database records verified runs, per-game renderer verdicts, community reports, machine-derived predictions, provenance, and kernel-anti-cheat blocklist entries. Declarative JSON recipes describe installer, registry, Winetricks, synchronization, renderer, version-pinning, and note steps applied to bottles, while the CLI can submit game results to the open database. Highball requires Apple Silicon and macOS 14 or later. The app and CLI are licensed under GPL-3.0, while the recipes and compatibility database are CC0; D3DMetal is downloaded separately after acceptance of Apple's Game Porting Toolkit license. The project documents limitations with several Chromium-based launchers, Rockstar, Ubisoft Connect, GOG Galaxy, Battle.net, and the EA app.

CodeBurn is a free, open-source, local-first tool by AgentSeal that reads session files written by AI coding tools and reports token usage and estimated cost by provider, model, project, task, and activity. It provides a terminal dashboard and reports, a localhost web dashboard, desktop and tray or menubar views, exports, model comparisons, subscription-plan tracking, and optional cross-device aggregation. Its deterministic analyzers classify work into task categories from tool usage and message keywords, calculate token costs using LiteLLM pricing cached locally, and scan coding-agent sessions for patterns such as repeated file reads, low read-to-edit ratios, uncapped shell output, unused MCP servers, bloated configuration, and retry-heavy work. The optimize command produces estimated savings and fixes; applicable configuration changes are backed up and journaled so they can be undone and later compared with observed usage. The yield command heuristically correlates sessions with Git commits to classify spend as productive, reverted, abandoned, or ambiguous. The guard feature installs opt-in Claude Code hooks for soft and hard session-spending caps, checkpoints, and status-line reporting. CodeBurn also exposes local usage and savings through an MCP server over stdio. The CLI reads data from the local machine without wrappers, proxies, API keys, or uploads; the optional desktop applications can send anonymous bucketed telemetry after consent. It requires Node.js 22.13 or newer, and the repository is licensed under MIT.