Reports / monthly / Nov 1, 2026
GitHub Trending Monthly Report — 2026-11
A monthly view of the repositories that defined the last thirty days in open source.
Repository of the month
cloudflare/security-audit-skill — A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings This project implements a specialized skill designed for AI coding agents to perform deep security auditing on codebases. Built on the Model Context Protocol (MCP), it exposes complex security analysis tools as a clean, standardized interface that LLM-powered agents can easily invoke. It integrates tools for static analysis, dependency vulnerability scanning, and secret detection. Rather than acting as a standalone CI/CD scanner, it is designed to be used interactively by an agent to investigate potential vulnerabilities during the development process. It allows an AI assistant to autonomously scan files, interpret the results, and subsequently propose or apply security patches.
- Stars: 56,273 | Forks: 3,670 | Language: JavaScript | License: MIT
- Typical use cases: Interactive security review; Automated patching; Dependency upgrading
- View the full repository profile or see it on GitHub
Trending this month
| Rank | Repository | Language | Total stars | Stars this month | Description |
|---|---|---|---|---|---|
| 1 | cloudflare/security-audit-skill | JavaScript | 56,273 | +31,731 | A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings |
| 2 | heygen-com/hyperframes | TypeScript | 77,052 | +22,303 | Write HTML. Render video. Built for agents. |
| 3 | Nutlope/hallmark | CSS | 44,750 | +14,378 | Anti-AI-slop design skill for Claude Code, Cursor, and Codex. |
| 4 | anthropics/knowledge-work-plugins | Python | 34,347 | +8,375 | Open source repository of plugins primarily intended for knowledge workers to use in Claude Cowork |
| 5 | pbakaus/impeccable | Rust | 99,229 | +25,479 | The design vocabulary for your coding agent. Steer with polish and bolder, review with critique and audit, cat |
| 6 | NationalSecurityAgency/ghidra | Java | 96,747 | +16,685 | Ghidra is a software reverse engineering (SRE) framework |
| 7 | pingdotgg/t3code | TypeScript | 37,632 | +9,973 | |
| 8 | anthropics/claude-plugins-official | Python | 45,702 | +8,525 | Official, Anthropic-managed directory of high quality Claude Code Plugins. |
| 9 | flutter/flutter | Dart | 180,945 | +2,257 | Flutter makes it easy and fast to build beautiful apps for mobile and beyond |
| 10 | cursor/plugins | TypeScript | 14,997 | +5,799 | Cursor plugin specification and official plugins |
| 11 | android/skills | Kotlin | 10,219 | +2,568 | |
| 12 | AgriciDaniel/claude-seo | Python | 25,479 | +6,891 | Universal SEO skill for Claude Code. 26 sub-skills + 19 sub-agents covering technical SEO, E-E-A-T, schema, GE |
| 13 | vercel-labs/skills | TypeScript | 37,590 | +4,721 | The open agent skills tool - npx skills |
| 14 | tashfeenahmed/freellmapi | TypeScript | 45,662 | +15,643 | 7.4 billion tokens per month. 34 free LLM providers. 635 free model endpoints. All behind one /v1 endpoint, pl |
Want the next one in your inbox?
One email a week: repository of the week, the biggest star gainers, and new projects worth watching.
The newsletter is not wired up yet. Subscribe to the RSS feed in the meantime — every weekly digest is published there first.