Reports / weekly / Oct 25, 2026
GitHub Trending Weekly Digest — 2026-W43
The week in open source: what developers starred, which projects broke out, and where momentum is building.
Repository of the week
cloudflare/security-audit-skill — A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings This project implements a specialized skill designed for AI coding agents to perform deep security auditing on codebases. Built on the Model Context Protocol (MCP), it exposes complex security analysis tools as a clean, standardized interface that LLM-powered agents can easily invoke. It integrates tools for static analysis, dependency vulnerability scanning, and secret detection. Rather than acting as a standalone CI/CD scanner, it is designed to be used interactively by an agent to investigate potential vulnerabilities during the development process. It allows an AI assistant to autonomously scan files, interpret the results, and subsequently propose or apply security patches.
- Stars: 46,568 | Forks: 2,893 | Language: JavaScript | License: MIT
- Typical use cases: Interactive security review; Automated patching; Dependency upgrading
- View the full repository profile or see it on GitHub
Trending this week
| Rank | Repository | Language | Total stars | Stars this week | Description |
|---|---|---|---|---|---|
| 1 | cloudflare/security-audit-skill | JavaScript | 46,568 | +12,680 | A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings |
| 2 | morluto/rea | TypeScript | 383,820 | +78,562 | Reverse engineer anything with agents, from app behavior down to native binaries. |
| 3 | anthropics/claude-plugins-official | Python | 44,525 | +3,232 | Official, Anthropic-managed directory of high quality Claude Code Plugins. |
| 4 | ruvnet/ruflo | TypeScript | 79,243 | +3,241 | 🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and bu |
| 5 | stablyai/orca | TypeScript | 105,655 | +9,828 | Orca is the place for working with a fleet of agents (e.g. Grok Bot, Claude Code). Run any coding agent with y |
| 6 | cursor/plugins | TypeScript | 14,021 | +1,729 | Cursor plugin specification and official plugins |
| 7 | android/skills | Kotlin | 9,706 | +1,317 | |
| 8 | anthropics/knowledge-work-plugins | Python | 32,943 | +2,631 | Open source repository of plugins primarily intended for knowledge workers to use in Claude Cowork |
| 9 | heygen-com/hyperframes | TypeScript | 72,052 | +5,633 | Write HTML. Render video. Built for agents. |
| 10 | Comfy-Org/ComfyUI | Python | 142,895 | +4,648 | The most powerful and modular diffusion model GUI, api and backend with a graph/nodes interface. The fastest l |
| 11 | akitaonrails/ai-memory | Rust | 13,481 | +3,541 | Solution for long term memory for agent coding CLIs and to facilitate handoff between different agent vendors |
| 12 | Graphify-Labs/graphify | Python | 135,062 | +6,868 | Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphif |
| 13 | HKUDS/CLI-Anything | Python | 57,076 | +3,069 | "CLI-Anything: Making ALL Software Agent-Native" -- CLI-Hub: https://clianything.cc/ |
Biggest star gainers (tracked repos, last 7 days)
| Repository | Language | Total stars | Stars gained (7d) |
|---|---|---|---|
| morluto/rea | TypeScript | 383,820 | +62,701 |
| ai-job-search-dev/ai-job-search | Python | 64,859 | +16,756 |
| cloudflare/security-audit-skill | JavaScript | 46,568 | +15,467 |
| debpalash/VoiceStudio | Python | 85,746 | +13,660 |
| stablyai/orca | TypeScript | 105,655 | +9,152 |
| DietrichGebert/ponytail | JavaScript | 176,087 | +9,109 |
| mattpocock/skills | Shell | 303,134 | +7,033 |
| Graphify-Labs/graphify | Python | 135,062 | +6,704 |
| xerj-org/xerj | Rust | 14,281 | +5,948 |
| affaan-m/ECC | JavaScript | 288,737 | +5,523 |
| heygen-com/hyperframes | TypeScript | 72,052 | +5,392 |
| ifixai-ai/iFixAi | Python | 34,368 | +5,254 |
| pbakaus/impeccable | Rust | 87,493 | +5,064 |
| anomalyco/opencode | TypeScript | 221,449 | +4,984 |
| boykopovar/AnyPS5 | C++ | 48,041 | +4,972 |
Want the next one in your inbox?
One email a week: repository of the week, the biggest star gainers, and new projects worth watching.
The newsletter is not wired up yet. Subscribe to the RSS feed in the meantime — every weekly digest is published there first.