Total cost: $1.15.
"},{"target":"invideo-ai","stance":"claims","evidence":"Pepe and Doge arguing about doggy arms, replace the creatine with retinol where a pretty boy roasts a tomboy's pores, or ditch the physical product for a CheatGPT app where a himbo jock out-GPAs a PhD"}],"stars":27131,"downloads":2129,"downloadsWeek":298,"downloadsDays":5,"growth":1252,"growthDays":5,"history":[{"date":"2026-10-26","stars":25879},{"date":"2026-10-27","stars":26086},{"date":"2026-10-28","stars":26257},{"date":"2026-10-29","stars":26509},{"date":"2026-10-30","stars":26892},{"date":"2026-10-31","stars":27131}],"firstPublishedAt":"2026-10-27T01:10:12.636Z","commitSha":"e26d9142fd8a6f78bf4f3cdb800d6205f4ecca16","verifiedAt":"2026-10-27T18:15:07.907Z","lastCommitAt":"2026-10-29T09:37:19Z","isMirror":false,"collectFailing":false,"reviewedBy":"founder","text":{"en":{"summaryShort":"Lets an AI coding assistant copy the structure of a short video and make many new versions with new faces, words and clips.","summary":"Hypit is an add-on for AI coding assistants such as Claude Code or Codex. You give the assistant a short video or a description, and it builds an editable recipe with captions, clips and effects, then renders the finished video, including many variants at once. It is aimed at people making social ads, short clips and talking-head videos. You need Node.js, a coding assistant account, a terminal, and usually paid AI image, voice and video services. The README shows example videos costing about $1 each in service fees.","easeRationale":"There is no installer: you run `npx skills add hypit-ai/hypit -g` in a terminal, need Node.js 22.15+, a coding assistant, and the assistant then sets up the Hypit program and media tools.","costNote":"Hypit itself has no fee; the coding assistant and AI generation services are billed separately (README examples: $1.07 to $1.15 per video).","notVerified":["Whether it works on Windows; the README gives no platform list.","Which extra tools (FFmpeg, Python for WhisperX, headless Chrome) the assistant installs during setup.","Real cost per video with your chosen AI services and coding assistant.","What is inside the Google Drive avatar pack linked in the README.","What commands the coding assistant runs on your computer while preparing Hypit."]},"zh-Hans":{"summaryShort":"让 AI 编程助手复制一段短视频的结构，并用新的人脸、文字和片段批量生成多个新版本。","summary":"Hypit 是 Claude Code、Codex 等 AI 编程助手的附加组件。你给助手一段短视频或一段描述，它会生成一份可编辑的“配方”，包含字幕、片段和特效，然后渲染出成品视频，还能一次生成多个变体。它面向制作社交媒体广告、短视频和口播视频的人。你需要 Node.js、一个编程助手账号、终端，通常还需要付费的 AI 图像、语音和视频服务。README 中的示例视频每条的服务费用约为 1 美元。","easeRationale":"没有安装程序：你要在终端中运行 `npx skills add hypit-ai/hypit -g`，需要 Node.js 22.15 及以上版本和一个编程助手，之后由助手来安装 Hypit 程序和媒体工具。","costNote":"Hypit 本身不收费；编程助手和 AI 生成服务另行计费（README 示例：每条视频 1.07 至 1.15 美元）。","notVerified":["是否能在 Windows 上运行；README 没有给出支持的平台列表。","助手在设置过程中会安装哪些额外工具（FFmpeg、用于 WhisperX 的 Python、无头 Chrome）。","使用你所选的 AI 服务和编程助手时，每条视频的真实成本。","README 中链接的 Google Drive 头像包里有什么内容。","编程助手在准备 Hypit 的过程中会在你的电脑上运行哪些命令。"]}}},{"id":"R_kgDOSN5LZA","slug":"ifixai-ai__ifixai","name":"iFixAi","owner":"ifixai-ai","fullName":"ifixai-ai/iFixAi","type":"dev_tool","status":"active","grade":"C","easeByPlatform":{"windows":"C","mac":"C","linux":"C"},"risk":"attention","signals":[{"code":"sends_adversarial_requests_to_your_agent","severity":"attention","evidence":"README：\"Use a staging copy, because the probes are real requests.\" 默认运行包含针对提示词注入（`B12`）以及无权提出请求者发起破坏性操作（`P01`）的探测，因此只应对准你有权测试的智能体。","source":"ai","title":"向你的智能体发送对抗性请求"},{"code":"very_young_repository_with_large_star_count","severity":"info","evidence":"该仓库创建于 2026-04-27，已有 37,084 个星标，却只有 3 个未关闭的 issue；README 开头就是 Product Hunt 和 Trendshift 的推广徽章。","source":"ai","title":"非常新的仓库，星标数却很高"}],"platforms":["windows","mac","linux"],"tools":["python"],"buildTools":["python"],"disk":{"minMB":100,"maxMB":300,"basis":"heuristic"},"apiKeys":["OpenAI","Anthropic, Google Gemini, Azure, Bedrock, OpenRouter or Hugging Face (any one can be the judge instead of OpenAI)"],"cost":{"model":"free_with_paid_api"},"license":{"spdx":"Apache-2.0","category":"permissive","detectedFrom":"github"},"categories":["development","ai_agents","ai_skills"],"alternativeTo":[{"slug":"langsmith","name":"LangSmith","confirmed":true},{"slug":"braintrust","name":"Braintrust","confirmed":true}],"declaredAlternatives":[],"stars":41458,"downloads":0,"downloadsWeek":0,"downloadsDays":2,"growth":6394,"growthDays":5,"history":[{"date":"2026-10-29","stars":37898},{"date":"2026-10-30","stars":39226},{"date":"2026-10-31","stars":41458}],"firstPublishedAt":"2026-10-29T01:54:21.351Z","commitSha":"28dca412279635361d626574810aae8d91ab6b45","verifiedAt":"2026-10-29T01:37:54.067Z","lastCommitAt":"2026-10-30T18:50:38Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Audits your own AI agent: sends it tricky requests and grades how it answers, from A to F.","summary":"A command-line tool for people who build AI agents. It puts your agent in a simulated version of your business, sends the kind of requests a real day brings, including requests that push the agent past what it is allowed to do, and another AI model grades each reply. You get a pass or fail per check, an A-to-F grade and reports in JSON and Markdown. You need Python 3.10 or newer and a paid model key for the judge. A demo mode with canned answers runs with no key. It also installs as a plugin or skill inside Claude Code, Codex, Cursor and similar.","easeRationale":"There are no ready installers in the 23 releases, so on every platform you install Python 3.10 or newer, run `pip install ifixai` and then a few commands; Windows, Mac and Linux are all C. The README adds Windows-specific steps (`py -m venv`, `python -m ifixai.cli.main`) and warns that a stock Mac ships Python 3.9, which is too old.","costNote":"The code is free (Apache-2.0). A real audit calls a paid model as the judge, plus your own agent's API; the README says `--dry-run` shows how many judge calls a run will make before anything is billed.","notVerified":["Whether the audit grades are accurate, or whether a pass here means your agent behaves well outside the simulated scenarios.","What a real audit costs in judge tokens, especially the `--full-run` with all 61 inspections.","Whether the Claude Code plugin, the Codex plugin and the editor skills install and work as described.","Whether the install works on each platform and which Python versions actually run it.","What the tool sends to the judge provider, and whether any of your agent's answers or business data leave your machine during a run."]},"zh-Hans":{"summaryShort":"审查你自己的 AI 代理：给它发送刁钻的请求，并给它的回答打分，从 A 到 F。","summary":"一个面向 AI 代理开发者的命令行工具。它把你的代理放进一个模拟的业务场景中，发送真实一天里可能出现的各种请求，包括那些试图让代理越权的请求，再由另一个 AI 模型给每个回答打分。你会得到每项检查的通过或不通过、一个 A 到 F 的等级，以及 JSON 和 Markdown 格式的报告。你需要 Python 3.10 或更新版本，以及一个用于评判的付费模型密钥。不带密钥时可以用演示模式，用现成的回答运行。它还可以作为插件或技能安装进 Claude Code、Codex、Cursor 等工具里。","easeRationale":"23 个发行版本里没有现成的安装程序，所以在每个平台上你都要安装 Python 3.10 或更新版本，运行 `pip install ifixai`，再执行几条命令；Windows、Mac 和 Linux 的评级都是 C。README 还补充了 Windows 专属的步骤（`py -m venv`、`python -m ifixai.cli.main`），并提醒出厂自带的 Mac 系统自带的是 Python 3.9，版本太旧。","costNote":"代码本身免费（Apache-2.0 许可）。真正的审查会调用一个付费模型作为评判，再加上你自己代理的 API 调用；README 说 `--dry-run` 能在产生任何费用之前，先显示一次运行会发起多少次评判调用。","notVerified":["审查打分是否准确，或者在这里通过是否意味着你的代理在模拟场景之外也表现良好","一次真正的审查在评判模型的 token 上会花多少钱，尤其是包含全部 61 项检查的 `--full-run`","Claude Code 插件、Codex 插件和编辑器技能是否真的能按描述安装并正常工作","安装在每个平台上是否都能成功，以及哪些 Python 版本真的能运行它","这个工具会向评判模型提供方发送什么内容，以及运行过程中你代理的回答或业务数据是否会离开你的电脑"]}}},{"id":"R_kgDOGyI-8A","slug":"immich-app__immich","name":"Immich","owner":"immich-app","fullName":"immich-app/immich","type":"needs_setup","status":"active","grade":"D","easeByPlatform":{"windows":"D","mac":"D","linux":"D"},"risk":"attention","signals":[{"code":"copyleft_license_agpl","severity":"info","evidence":"LICENSE 是 GNU Affero General Public License v3:如果你通过网络向其他人提供修改后的版本,许可要求你向这些用户公开你修改后的源代码。","source":"ai","title":"copyleft的AGPL许可"},{"code":"install_script_downloads_at_run_time","severity":"info","evidence":"install.sh 会创建 ./immich-app,然后在运行`docker compose up`之前从`https://github.com/immich-app/immich/releases/latest/download`下载 docker-compose.yml 和 example.env,所以实际运行的内容取决于那一刻获取到的文件。","source":"ai","title":"安装脚本在运行时下载文件"},{"code":"you_are_responsible_for_backups","severity":"attention","evidence":"README.md 开头就是一句提醒:\"Always follow 3-2-1 backup plan for your precious photos and videos!\"——除非你自己安排备份,否则项目只保存你唯一的一份副本。","source":"ai","title":"备份由你自己负责"},{"code":"pre_release_version_published","severity":"info","evidence":"最新发布版本标记为 v3.4.0-rc.1(2026-10-30),属于候选发布版;最新的稳定版本标签是 v3.3.5。","source":"ai","title":"发布了预发行版本"}],"platforms":["linux","mac","windows"],"tools":["docker"],"buildTools":["node"],"disk":{"minMB":100,"maxMB":500,"basis":"heuristic"},"apiKeys":[],"cost":{"model":"free"},"license":{"spdx":"AGPL-3.0","category":"copyleft","detectedFrom":"github"},"categories":["image","video","system"],"alternativeTo":[{"slug":"google-photos","name":"Photos","confirmed":true},{"slug":"icloud-photos","name":"iCloud Photos","confirmed":true},{"slug":null,"name":"Apple iCloud Photos","confirmed":false}],"declaredAlternatives":[],"stars":117828,"downloads":6321401,"downloadsWeek":49249,"downloadsDays":5,"growth":504,"growthDays":5,"history":[{"date":"2026-10-26","stars":117324},{"date":"2026-10-27","stars":117426},{"date":"2026-10-28","stars":117529},{"date":"2026-10-29","stars":117630},{"date":"2026-10-30","stars":117746},{"date":"2026-10-31","stars":117828}],"firstPublishedAt":"2026-10-27T01:10:12.637Z","commitSha":"3184b1532fd74a0b777207f8a86e9efe7dafce65","verifiedAt":"2026-11-01T01:39:27.616Z","lastCommitAt":"2026-10-30T19:33:25Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Keeps your photos and videos on your own computer or server, with a phone app that backs them up automatically.","summary":"Immich is a photo and video library you run yourself instead of leaving everything with a cloud service. You install it on a computer or home server with Docker, open it in a browser, and the phone app uploads new pictures by itself. It groups photos by date and place, recognises faces, searches by what appears in the image, and supports several users, shared albums and raw files. You need Docker and a machine that stays on; the official docs list the hardware requirements.","easeRationale":"D on all three: there is no installer or binary in the releases, and the documented way to run it is Docker Compose plus an .env file, which also means keeping a database and a background server running. Linux is the path the project documents best; on Windows and macOS you need Docker Desktop and a machine left switched on.","costNote":"AGPL-3.0 software with no license fee; you pay for the computer or server and the disk space.","notVerified":["Whether it installs and runs on your machine with Docker Desktop on Windows or macOS","How much disk space and memory your own library will actually need","Whether face recognition and image search work well on your photos","Whether the phone app's automatic backup catches every new picture"]},"zh-Hans":{"summaryShort":"把你的照片和视频保存在你自己的电脑或服务器上,配有手机App自动备份。","summary":"Immich 是一个你自己运行的照片和视频库,不用把一切都交给云服务。你用Docker在电脑或家庭服务器上安装它,在浏览器里打开,手机App会自动上传新照片。它按日期和地点给照片分组,识别人脸,根据图片内容搜索,并支持多用户、共享相册和raw文件。你需要Docker和一台保持开机的机器;官方文档列出了硬件要求。","easeRationale":"三个平台都是 D 级:发布版本里没有安装程序或二进制文件,文档中记载的运行方式是 Docker Compose 加一个 .env 文件,这也意味着要维护一个数据库和一个后台运行的服务器。Linux 是项目文档记载得最好的路径;在 Windows 和 macOS 上你需要 Docker Desktop,并让机器保持开机。","costNote":"AGPL-3.0 软件,没有许可费;你需要支付电脑或服务器以及磁盘空间的费用。","notVerified":["在 Windows 或 macOS 上用 Docker Desktop 是否能安装并正常运行","你自己的照片库实际会用掉多少磁盘空间和内存","人脸识别和图像搜索在你的照片上效果好不好","手机App的自动备份是否能捕捉到每一张新照片"]}}},{"id":"R_kgDOVQa3Cw","slug":"impacifist__windows-gpu-unlock","name":"Windows GPU UNLOCK","owner":"windows-GPU-UNLOCK","fullName":"windows-GPU-UNLOCK/Windows-GPU-UNLOCK","type":"needs_setup","status":"alert","grade":"E","easeByPlatform":{"windows":"E"},"risk":"high","signals":[{"code":"young_owner_account","severity":"attention","evidence":"所有者账号创建于 0 天前","source":"check","title":"所有者账号注册时间很短"},{"code":"bypasses_hardware_restriction","severity":"high","evidence":"这个项目的目的就是破解消费级 NVIDIA 显卡上厂商设置的锁。仓库描述：'Windows GPU UNLOCK: RTX3090 UEFI port...'；README：'Experimental UEFI GPU unlock and direct Windows handoff'，相对于一个 'controlled locked baseline' 测得的提升为 'FP16 1.88-1.92x, BF16 1.92-1.95x'。它基于 rough2515-hub/rtx3080-unlock-public 和 Zagitta/gpu-unlock。","source":"ai","title":"绕过硬件限制"},{"code":"requires_disabling_security","severity":"attention","evidence":"README「Internal headless quick start」：'Use the exact supported hardware, Secure Boot disabled, a fully decrypted Windows C: with BitLocker protection off, and a connected keyboard.'","source":"ai","title":"需要关闭系统防护功能"},{"code":"changes_boot_configuration","severity":"attention","evidence":"README：`Headless.ps1 -EnableAutomatic -ConfirmedSuccess` 'places headless first and Windows Boot Manager second and disables Windows Fast Startup'。README 也描述了失败的情况：'On failure or if Windows does not return, fully power off and choose F8 -> Windows Boot Manager.'","source":"ai","title":"改动系统启动配置"},{"code":"results_not_established","severity":"info","evidence":"README：'There is no contemporary controlled locked baseline for this headless boot, so these values do not establish an unlock percentage. They do not establish game or ComfyUI gains, long-term stability, sleep/hibernate resume or repeated automatic cold-boot reliability.' 最新的 v0.3.1 标签是 'a source-only pre-release'。","source":"ai","title":"结果尚未得到证实"},{"code":"very_narrow_hardware_support","severity":"info","evidence":"README「GPU support」：'Success reports apply to specific cards and systems, not every card of the same GPU model.' 兼容性表格列出的是具体的主板加显卡组合，例如 'ASUS TUF B650M + RTX 3090 FE'。","source":"ai","title":"支持的硬件范围非常有限"}],"platforms":["windows"],"tools":["python","gpu_nvidia","other"],"buildTools":[],"disk":{"minMB":2,"maxMB":7,"basis":"installer"},"apiKeys":[],"cost":{"model":"free"},"license":{"spdx":"GPL-2.0","category":"copyleft","detectedFrom":"github"},"categories":["hardware","system"],"alternativeTo":[],"declaredAlternatives":[],"stars":1413,"downloads":629,"downloadsWeek":228,"downloadsDays":4,"growth":370,"growthDays":4,"history":[{"date":"2026-10-27","stars":1043},{"date":"2026-10-28","stars":1173},{"date":"2026-10-29","stars":1267},{"date":"2026-10-30","stars":1333},{"date":"2026-10-31","stars":1413}],"firstPublishedAt":"2026-10-27T18:40:27.934Z","commitSha":"1f8776ee9c6ee32f5920adaa4baabc9181379bd4","verifiedAt":"2026-10-31T01:35:33.562Z","lastCommitAt":"2026-10-31T09:52:46Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Experimental boot code that releases an NVIDIA RTX 3000 card from its firmware lock before Windows starts.","summary":"A set of experimental UEFI boot files and PowerShell scripts that take an NVIDIA RTX 3060, 3070 Ti, 3080, 3090 or 3090 Ti out of the state the card's firmware leaves it in, then hand control straight to Windows without a restart. The authors report roughly double the measured speed in some tests. It only works on a short list of exact motherboard and card combinations. You must compile it yourself with Python and a pinned clang version, supply five firmware files from your own machine, turn off Secure Boot and BitLocker, and change your boot order.","easeRationale":"There is no binary: the README asks for Python 3.9+, clang/lld-link exactly 20.1.8, five locally obtained firmware assets, your own partition GUIDs, a 1 GiB extra EFI partition, Secure Boot off and BitLocker off, then several administrator PowerShell commands.","costNote":"GPL-2.0-only. Releases are source-only, with no ready program to download.","notVerified":["Whether the build works and the machine comes back to Windows on hardware that is not one of the listed profiles","Whether the reported speed gains hold in games or everyday work rather than the CUDA benchmark","What happens to sleep, hibernate and repeated cold boots, which the README says were not tested","Whether the GPU is left in a state that affects warranty or long-term reliability"]},"zh-Hans":{"summaryShort":"一套实验性启动代码，能在 Windows 启动之前解除 NVIDIA RTX 3000 显卡固件的锁定状态。","summary":"一套实验性的 UEFI 启动文件和 PowerShell 脚本，可以让 NVIDIA RTX 3060、3070 Ti、3080、3090 或 3090 Ti 显卡脱离其固件默认留下的状态，然后不重启就直接把控制权交给 Windows。作者报告在部分测试中测得的速度大约提升了一倍。它只适用于一份很短的主板和显卡组合清单。你必须自己用 Python 和一个固定版本的 clang 编译，提供从自己机器上获取的五个固件文件，关闭 Secure Boot 和 BitLocker，并修改启动顺序。","easeRationale":"没有现成的二进制文件：README 要求准备 Python 3.9+、精确到 20.1.8 版本的 clang/lld-link、本地获取的五个固件文件、你自己分区的 GUID、一个额外的 1 GiB EFI 分区、关闭 Secure Boot 和 BitLocker，然后再运行好几条管理员权限的 PowerShell 命令。","costNote":"仅采用 GPL-2.0 协议。发布的内容只有源代码，没有可以直接下载的现成程序。","notVerified":["在不属于清单所列配置的硬件上，编译是否能成功、系统是否能正常回到 Windows","报告中的速度提升，在游戏或日常使用中是否依然成立，而不仅仅体现在 CUDA 基准测试里","睡眠、休眠以及反复冷启动会发生什么，README 说这些情况没有经过测试","显卡是否会因此进入某种影响保修或长期可靠性的状态"]}}},{"id":"MDEwOlJlcG9zaXRvcnkyMzE2MzA5Mw==","slug":"inkscape__inkscape","name":"Inkscape","owner":"inkscape","fullName":"inkscape/inkscape","type":"ready_app","status":"active","grade":"A","easeByPlatform":{"windows":"A"},"risk":"low","signals":[{"code":"github_repo_is_placeholder","severity":"info","evidence":"该仓库只有 README.md 和一张图片；README.md 写着 \"Inkscape is being developed on GitLab\"（gitlab.com/inkscape/inkscape）。这里最后一次推送是 2022-03-03，也没有许可证文件，所以 GitHub 上的活跃度和许可证数据并不能反映这个项目的真实情况。","source":"ai","title":"GitHub 仓库只是个占位页"}],"platforms":["windows","mac","linux"],"tools":[],"buildTools":[],"disk":{"minMB":162,"maxMB":487,"basis":"installer"},"apiKeys":[],"cost":{"model":"free"},"license":{"spdx":"GPL-2.0","category":"copyleft","detectedFrom":"winget"},"categories":["design_cad","image"],"alternativeTo":[{"slug":"illustrator","name":"Illustrator","confirmed":true},{"slug":"coreldraw","name":"CorelDRAW","confirmed":true},{"slug":"affinity-designer","name":"Affinity Designer","confirmed":true}],"declaredAlternatives":[],"stars":4075,"downloads":0,"downloadsWeek":0,"downloadsDays":6,"growth":17,"growthDays":6,"history":[{"date":"2026-10-25","stars":4058},{"date":"2026-10-26","stars":4058},{"date":"2026-10-27","stars":4062},{"date":"2026-10-28","stars":4066},{"date":"2026-10-29","stars":4071},{"date":"2026-10-30","stars":4073},{"date":"2026-10-31","stars":4075}],"firstPublishedAt":"2026-10-25T23:19:07.264Z","commitSha":"1232eac68aff12978b208ff3ebfbbcc3ecbd7022","verifiedAt":"2026-10-27T18:15:07.907Z","lastCommitAt":"2022-03-03T20:52:00Z","isMirror":false,"collectFailing":false,"reviewedBy":"founder","text":{"en":{"summaryShort":"Draw logos, icons, illustrations, diagrams and maps as vector graphics that stay sharp at any size.","summary":"Inkscape is a vector drawing program used by designers and hobbyists to make illustrations, icons, logos, diagrams, maps and web graphics. Its own file format is SVG, an open standard. It runs on Windows, macOS and Linux and is installed with a normal installer. This GitHub page is only a pointer: the code is developed on GitLab and the program is downloaded from inkscape.org.","easeRationale":"A ready Windows installer is available (the checks found one of about 162–487 MB), so you download it and open it.","costNote":"The README describes it as free and open-source software.","notVerified":["The real license and recent activity, which live in the GitLab repository, not on GitHub","Whether the installer the checks found is the current version from inkscape.org","How well it opens files made in Illustrator or CorelDRAW"]},"zh-Hans":{"summaryShort":"绘制标志、图标、插图、图表和地图，作为矢量图形，在任何尺寸下都保持清晰。","summary":"Inkscape 是一款矢量绘图程序，设计师和爱好者用它来制作插图、图标、标志、图表、地图和网页图形。它自己的文件格式是 SVG，这是一种开放标准。它可在 Windows、macOS 和 Linux 上运行，用常规安装程序安装。这个 GitHub 页面只是一个指引：代码在 GitLab 上开发，程序则从 inkscape.org 下载。","easeRationale":"有现成的 Windows 安装程序（检查中发现了一个约 162–487 MB 的），下载后打开即可。","costNote":"README 将其描述为免费的开源软件。","notVerified":["真实的许可证和近期活跃情况，这些信息在 GitLab 仓库而不是 GitHub 上","检查中发现的安装程序是否就是 inkscape.org 上的当前版本","它打开 Illustrator 或 CorelDRAW 制作的文件时效果如何"]}}},{"id":"R_kgDOVW5g1w","slug":"interplains__zero-breach-toolkit","name":"Zero Breach Toolkit","owner":"interplains","fullName":"interplains/Zero-Breach-Toolkit","type":"needs_setup","status":"active","grade":"C","easeByPlatform":{"windows":"C","mac":"C","linux":"C"},"risk":"attention","signals":[{"code":"known_vulnerabilities","severity":"attention","evidence":"锁定版本的依赖存在已知漏洞(OSV):cryptography: GHSA-g6cj-pr64-35w5, GHSA-jwv3-5hgf-82ww, GHSA-m2h6-j472-rp4c","source":"check","title":"存在已知漏洞"},{"code":"very_new_repository_with_many_stars","severity":"info","evidence":"该仓库创建于2026-10-25,到2026-11-01已经有4007颗star和428次fork,第一周就发布了16次。没有长期历史可供判断。","source":"ai","title":"非常新的仓库却有大量star"},{"code":"anonymous_publisher_no_signed_binaries","severity":"info","evidence":"README:\"The project is anonymous, so do not take its word for anything\"以及\"There is no signed Windows program, and none is planned while the project stays anonymous\"。发布版本提供的是一个带有已发布 SHA-256 和 GPG 签名的单个 Python 文件,而不是安装程序。","source":"ai","title":"匿名发布者,没有签名的二进制文件"},{"code":"optional_command_downloads_and_runs_another_program","severity":"info","evidence":"README,\"Guided acquisition (experimental)\":可选参数 --collect-android 会\"downloads official AndroidQF v1.8.3, checks its pinned SHA-256, asks for the device owner's explicit consent and runs the collector\"。README 称它是\"the only point at which the tool runs a program it did not ship\"。","source":"ai","title":"一个可选命令会下载并运行另一个程序"},{"code":"reports_hold_private_personal_data","severity":"attention","evidence":"README:\"Full reports can contain usernames, profile names, file paths, browsing details, SMS senders and message excerpts; keep them private.\"报告保存在你电脑上的一个结果文件夹中,而 --evidence-bundle 生成的 ZIP 明确是\"unencrypted\"(未加密)的。","source":"ai","title":"报告中包含私人个人数据"},{"code":"phone_check_needs_usb_debugging","severity":"attention","evidence":"Android 的步骤要求你开启开发者选项和 USB 调试,并对电脑选择\"Always allow\"。README 建议完成后再关闭 USB 调试,但停留在这种状态下的手机风险更高。","source":"ai","title":"手机检查需要开启USB调试"}],"platforms":["windows","mac","linux"],"tools":["python"],"buildTools":["python"],"disk":{"minMB":100,"maxMB":300,"basis":"heuristic"},"apiKeys":[],"cost":{"model":"free"},"license":{"spdx":"Apache-2.0","category":"permissive","detectedFrom":"github"},"categories":["system"],"alternativeTo":[{"slug":"iverify","name":"iVerify","confirmed":true}],"declaredAlternatives":[],"stars":4006,"downloads":5803,"downloadsWeek":2011,"downloadsDays":3,"growth":4006,"growthDays":6,"history":[{"date":"2026-10-28","stars":2785},{"date":"2026-10-29","stars":3614},{"date":"2026-10-30","stars":3869},{"date":"2026-10-31","stars":4006}],"firstPublishedAt":"2026-10-28T01:50:05.614Z","commitSha":"465134c6795302f95f66a1f80204f583ab328ca0","verifiedAt":"2026-11-01T01:38:36.052Z","lastCommitAt":"2026-11-01T01:11:43Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Checks a Windows, Mac or Linux computer, an Android phone or an iPhone backup for traces of known spyware.","summary":"A free scanner that looks for traces of spyware that was already described in public research, such as Pegasus, Predator and Graphite. It reads browser records, startup settings, logs and files, and it can also read an Android collection or a local iPhone backup made on your computer. It is written for journalists, activists and anyone worried about being targeted. You install Python, download the folder from GitHub and start a menu from the terminal (on Windows there is a .cmd file to double-click). The check takes about 15 minutes.","easeRationale":"On Windows, the easiest platform, you install Python with \"Add python.exe to PATH\" ticked, download the ZIP and double-click scan\\run-scan.cmd, so there is no typing of commands. On Mac and Linux you type a command in the terminal, and on Mac you also have to give Terminal Full Disk Access or Safari's records are skipped.","costNote":"Apache-2.0 code; the indicator lists it downloads are published free by Amnesty International's Security Lab, the Citizen Lab, the MVT project and Echap.","notVerified":["Whether the checks really run to the end on each version of Windows, macOS, Linux, Android and iOS.","Whether a result is correct: the project itself says a clean result is not proof the device is clean, and matches may be harmless (for example a news article that mentions a spyware address).","Whether the single Python file attached to each release really rebuilds to the published SHA-256.","How much disk and time a full check takes on a machine with many files, since it fingerprints files up to 120 MiB each.","Whether the pinned dependency versions with known vulnerabilities (cryptography) affect the parts of the tool that are used, beyond what the README claims."]},"zh-Hans":{"summaryShort":"检查Windows、Mac或Linux电脑、Android手机或iPhone备份中是否有已知间谍软件的痕迹。","summary":"一个免费的扫描工具,查找已在公开研究中被描述过的间谍软件痕迹,例如 Pegasus、Predator 和 Graphite。它会读取浏览器记录、启动设置、日志和文件,也可以读取 Android 采集数据或在你电脑上制作的本地 iPhone 备份。它面向记者、活动人士以及任何担心自己成为目标的人。你需要安装 Python,从 GitHub 下载文件夹,然后从终端启动一个菜单(在 Windows 上有一个可以双击的 .cmd 文件)。检查大约需要15分钟。","easeRationale":"在 Windows 上(最简单的平台),你安装 Python 时勾选\"Add python.exe to PATH\",下载 ZIP 后双击 scan\\run-scan.cmd,完全不需要输入命令。在 Mac 和 Linux 上你需要在终端里输入命令,在 Mac 上你还得给终端授予完全磁盘访问权限(Full Disk Access),否则 Safari 的记录会被跳过。","costNote":"代码采用 Apache-2.0 许可;它下载的指标列表由大赦国际的 Security Lab、Citizen Lab、MVT 项目和 Echap 免费发布。","notVerified":["这些检查是否真的能在每个版本的 Windows、macOS、Linux、Android 和 iOS 上跑完。","结果是否准确:项目自己说,干净的结果并不能证明设备是干净的,而匹配结果也可能是无害的(比如一篇提到间谍软件地址的新闻报道)。","每个发布版本附带的那个单独的 Python 文件,是否真的能重新构建出与发布的 SHA-256 一致的结果。","在文件很多的机器上做完整检查要花多少磁盘空间和时间,因为它会对最大120MiB的文件逐个生成指纹。","锁定版本的依赖中那些已知漏洞(cryptography)是否会影响工具实际使用到的部分,而不只是README里所说的那样。"]}}},{"id":"R_kgDOVaRZQw","slug":"jacke-pp__open-yoki","name":"Open Yoki","owner":"jacke-pp","fullName":"jacke-pp/open-yoki","type":"needs_setup","status":"active","grade":"E","easeByPlatform":{"linux":"E"},"risk":"attention","signals":[{"code":"young_owner_account","severity":"attention","evidence":"所有者账号创建于 77 天前","source":"check","title":"所有者账号很新"},{"code":"crypto_promotion_main_use","severity":"attention","evidence":"这位主播是围绕加密货币直播而打造的：README 说她在 Binance Square 上直播，借助公开价格和 CoinAnk 的合约数据来 \"懂行情\"，并且在 TwinOasis 广场上 \"还能喊单，喊的币会在公开的战绩榜上跟踪涨跌\"。一个向观众吹捧币种的 AI 人设，可能触碰金融推广方面的规定，尽管 README 写着 \"没有钱包、交易、下注、红包抽奖、发币相关功能\"。","source":"ai","title":"主要用途是推广加密货币"},{"code":"ai_posts_on_your_accounts_unattended","severity":"attention","evidence":"可选的 \"heart\" 是一个长期运行的 AI（Claude Code 或 DeepSeek），它有自己的笔记文件夹，并 \"决定发什么\"：它写的内容会通过 ops/square_post.py 发到 Binance Square，并通过 X API 发到 X，还能在每日美元预算内搜索网页（HEART_WEB_USD，默认 20）。所描述的流程里，没有任何一步要求有人在发布前先批准。","source":"ai","title":"AI 无人看管地在你的账号上发帖"},{"code":"voice_cloning_and_digital_face","severity":"info","evidence":"\"做你自己的主播\" 的第 4 步：\"复刻声音 (app/tools/volc-clone.mjs)\"，并把形象和动作上传到 Vidu。克隆不属于你的声音或面孔，或把结果冒充真人，在一些国家可能违反平台规则和法律；README 引用的 TwinOasis 规则中包括 \"不假装是真人\"。","source":"ai","title":"声音克隆与数字人脸"},{"code":"asks_for_your_douyin_cookie","severity":"attention","evidence":".env.example：\"DOUYIN_COOKIE=\" - \"抖音 cookie 文件的路径（文件里放浏览器复制出来的 cookie）\"。把你自己浏览器里的 cookie 复制到服务器上，等于把你已登录的抖音会话交给了该服务器，而用它进行自动读取可能导致账号被限制。","source":"ai","title":"要求提供你的抖音 cookie"},{"code":"snapshot_of_a_closed_product","severity":"info","evidence":"README：\"这份代码截自 yoki 10 月 24 日跑的版本（v150），之后的新功能分批再放\" - 这份代码是线上产品在 10 月 24 日的截取版本，之后的新功能会分批发布。GitHub 上没有发布版本，唯一给出的联系方式是在 X 上私信 @Jacke_pp。","source":"ai","title":"闭源产品的快照"},{"code":"chat_ingest_key_lets_anyone_speak_to_her","severity":"info","evidence":"README 的 Security 部分：\"弹幕接入的钥匙谁拿到都能往她的弹幕里塞话\" - 谁拿到接入密钥，就能向主播的弹幕里推送任何消息，所以这把密钥必须留在读取你直播间的那台机器上。","source":"ai","title":"聊天接入密钥让任何人都能对她说话"}],"platforms":["linux"],"tools":["node","ffmpeg","other"],"buildTools":["ffmpeg"],"disk":{"minMB":null,"maxMB":null,"basis":"unknown"},"apiKeys":["OpenRouter (the model that talks)","Volcengine Doubao voice, plus a voice ID","Vidu (the moving digital face, needed for a real stream)","Volcengine RTC (sends the picture to the stream)","Anthropic or DeepSeek (the optional long-term memory, the \"heart\")","X (posting and replying)","Binance Square OpenAPI (publishing posts)","CoinAnk (crypto market data)","TikHub, plus a Douyin cookie (trending topics)","fal.ai (backup voice)","Telegram bot (fan and team groups)"],"cost":{"model":"free_with_paid_api"},"license":{"spdx":"MIT","category":"permissive","detectedFrom":"github"},"categories":["ai_agents","video","chat_ai"],"alternativeTo":[{"slug":"heygen","name":"HeyGen","confirmed":true},{"slug":"elevenlabs","name":"ElevenLabs","confirmed":true}],"declaredAlternatives":[],"stars":592,"downloads":0,"downloadsWeek":0,"downloadsDays":1,"growth":592,"growthDays":3,"history":[{"date":"2026-10-30","stars":477},{"date":"2026-10-31","stars":592}],"firstPublishedAt":"2026-10-30T01:57:54.315Z","commitSha":"2447d748dac4839a8ca238c8bf697ebfd12d398c","verifiedAt":"2026-10-30T01:45:01.738Z","lastCommitAt":"2026-10-28T09:20:58Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Runs your own AI live streamer on a server: a cloned voice, a moving digital face, chat replies, a diary and its own posts.","summary":"The code behind \"yoki\", an AI host that streams nightly on Binance Square. It builds a 16:9 live picture with a real-time digital face, a cloned voice and subtitles, pushes it out by RTMP, reads the chat and answers in seconds, remembers regulars, keeps a diary and posts on its own to Binance Square and X. The face, voice, personality and accounts of the original host are not included: you supply your own. It is made for an Ubuntu server (4 cores, 8 GB) and needs several paid services. The README is in Chinese, with an English version.","easeRationale":"This is server software: the README asks for an x86_64 Ubuntu machine with 4 cores and 8 GB, Node 22 or newer, ffmpeg and a headless Chrome, then deploy/install.sh, systemd services and Caddy in front, a key file under /etc/livehost/, keys from several paid services, a cloned voice and a digital face built on Vidu. The author says the step-by-step guide in SETUP.md is \"written for the AI that sets it up for you\". You can start it on your own computer to check that it loads, but without keys there is no voice and no face.","costNote":"The code is free (MIT), the running costs are not. The README's own table: the Vidu real-time digital human is billed per second of connection and is the largest item, Volcengine RTC a few yuan per stream, Doubao voice about 3 yuan per 10,000 characters plus a paid voice-cloning slot, OpenRouter a few cents per stream, and the optional Claude \"heart\" a few dollars a day. A server is extra.","notVerified":["What a night of streaming really costs, since the Vidu face is billed by the second of connection","Whether it works outside Ubuntu, and whether the servers suggested (Hong Kong, Singapore, Japan) are needed for the services to answer","Whether Binance Square, X or Douyin allow this kind of automated account and posting","What the \"heart\" writes and publishes over days, since it keeps its own notes and decides on its own","How much disk the recordings use (the README warns SQUARE_TAP can take several GB a night)","Whether the English README matches the Chinese one, which is the one kept up to date"]},"zh-Hans":{"summaryShort":"在服务器上运行你自己的 AI 直播主播:克隆的声音、会动的数字人脸、聊天回复、日记,以及自己发的帖子。","summary":"“yoki”背后的代码,一个每晚在 Binance Square 直播的 AI 主播。它会生成一幅 16:9 的实时画面,带实时数字人脸、克隆的声音和字幕,通过 RTMP 推流出去,读取聊天并在几秒内回复,记住常客,写日记,还会自主在 Binance Square 和 X 上发帖。原主播的人脸、声音、个性和账号都不包含在内:需要你自己提供。它是为 Ubuntu 服务器(4 核、8 GB)设计的,还需要几项付费服务。README 是中文的,附有英文版本。","easeRationale":"这是服务器软件:README 要求一台 x86_64 的 Ubuntu 机器,4 核、8 GB 内存,Node 22 或更新版本,ffmpeg 和无头 Chrome,然后运行 deploy/install.sh,配置 systemd 服务和前置的 Caddy,在 /etc/livehost/ 下放一个密钥文件,以及几项付费服务的密钥、一份克隆的声音和基于 Vidu 构建的数字人脸。作者说 SETUP.md 里的分步指南是“写给帮你搭建的 AI 看的”。你可以在自己电脑上启动,检查它能否加载,但没有密钥就没有声音也没有人脸。","costNote":"代码是免费的(MIT),运行成本不是。README 自带的表格显示:Vidu 实时数字人按连接秒数计费,是最大的一项开支;Volcengine RTC 每场直播几元人民币;豆包语音大约每万字 3 元,外加一个付费的声音克隆名额;OpenRouter 每场直播几分钱;可选的 Claude“心脏”每天几美元。服务器费用另算。","notVerified":["一晚直播到底要花多少钱,因为 Vidu 人脸是按连接秒数计费的","是否能在 Ubuntu 之外的系统上运行,以及是否必须使用建议的服务器地区(香港、新加坡、日本)才能让这些服务正常响应","Binance Square、X 或抖音是否允许这种自动化账号和发帖行为","这个“心脏”在日积月累中会写些什么、发些什么,因为它自己记笔记并自行决定","录制内容会占用多少磁盘空间(README 警告 SQUARE_TAP 一晚可能占用好几个 GB)","英文版 README 是否与中文版一致,因为中文版才是持续更新的那一份"]}}},{"id":"R_kgDOVRA2_g","slug":"jakeschincariol__day-trader-skill","name":"Day Trader Skill","owner":"Jakeschincariol","fullName":"Jakeschincariol/day-trader-skill","type":"needs_setup","status":"active","grade":"C","easeByPlatform":{"windows":"C","mac":"C","linux":"C"},"risk":"attention","signals":[{"code":"very_new_repository_high_star_count","severity":"attention","evidence":"该仓库创建于 2026-10-20，最后一次推送也是同一天，2026-10-20——十天没有提交——却已经有 3621 个星标和 834 个 fork。","source":"ai","title":"仓库非常新却有很高的星标数"},{"code":"can_send_orders_to_your_broker","severity":"attention","evidence":"README：\"/trader-broker | Order Executor | Sends approved orders to your broker, paper trading by default, never without your yes.\" 同一份 README 也写道 \"Most people who day trade lose money. You can lose money.\" 如果你关闭模拟交易或批准了订单，可能会损失真实资金。","source":"ai","title":"可以向你的券商发送订单"},{"code":"unofficial_data_source","severity":"info","evidence":"README：\"Yahoo Finance's chart endpoint is not an official API: it can lag, change or rate-limit you. The scanner and the entry timer read 1-minute or 5-minute bars, not every tick.\"","source":"ai","title":"非官方数据源"},{"code":"sends_your_name_and_email_to_sec","severity":"info","evidence":"README：\"The SEC tools (news filings, the analyst) ask you to identify yourself: put your name and email in `trader/config.json` (`\"sec_user_agent\": \"Your Name you@example.com\"`) or in the `SEC_USER_AGENT` environment variable.\" 这个姓名和邮箱会随每一次请求发送给 SEC EDGAR。","source":"ai","title":"把你的姓名和邮箱发送给 SEC"},{"code":"simulation_presented_as_odds","severity":"info","evidence":"「时间机器」给出的百分比，例如 \"target first 29.4 %, stop first 25.5 %\"，仅基于这只股票最近 60 天的 5 分钟线数据构建。README 自己也说：\"The future can do things those 60 days never did... Treat its odds as a reality check, never as a promise.\"","source":"ai","title":"把模拟结果当成了概率"}],"platforms":["windows","mac","linux"],"tools":["python","other"],"buildTools":[],"disk":{"minMB":null,"maxMB":null,"basis":"unknown"},"apiKeys":["Alpaca (brokerage, only to send real or paper orders)"],"cost":{"model":"free_with_paid_api"},"license":{"spdx":"MIT","category":"permissive","detectedFrom":"github"},"categories":["ai_skills","productivity","automation"],"alternativeTo":[{"slug":"tradingview","name":"TradingView","confirmed":true},{"slug":"benzinga-pro","name":"Pro","confirmed":true}],"declaredAlternatives":[],"stars":3979,"downloads":0,"downloadsWeek":0,"downloadsDays":4,"growth":1651,"growthDays":4,"history":[{"date":"2026-10-27","stars":2328},{"date":"2026-10-28","stars":2653},{"date":"2026-10-29","stars":3247},{"date":"2026-10-30","stars":3619},{"date":"2026-10-31","stars":3979}],"firstPublishedAt":"2026-10-27T18:40:27.943Z","commitSha":"3d0f4ef6986f4984b7c6bd46f7ff4f87744c3abd","verifiedAt":"2026-10-31T01:59:24.829Z","lastCommitAt":"2026-10-20T14:17:50Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Eleven add-ons for Claude that scan stock charts, follow news and plan day trades, with your approval before any order.","summary":"Day Trader skill is a pack of 11 instruction files for Claude and Claude Code, plus small Python scripts that read free public data: Yahoo Finance charts, Nasdaq symbol lists, SEC EDGAR and US House filings. They scan charts for setups, follow news, time the entry, set a stop and a target, size the position to your budget and replay the session 10,000 times before you risk money. It is for people who already use Claude and trade stocks. You need Python 3.8 or newer and there is nothing to pip install; real orders go through your own broker and only after you approve each one.","easeRationale":"Windows, macOS and Linux are all C: you must already have Claude or Claude Code, then run one install step (paste the repository link with \"install skill\", or /plugin marketplace add Jakeschincariol/day-trader-skill and /plugin install day-trader-skill@day-trader-skill), and have Python 3.8 or newer for the scripts, with nothing to pip install. Sending real orders needs a brokerage connector on top of that.","costNote":"The skills are free (MIT) and the README says there is no signup and no API key. They only work inside Claude, which usually needs a paid plan or API usage, and real orders need your own brokerage account.","notVerified":["Whether the scripts still work against Yahoo Finance, Nasdaq Trader, SEC EDGAR and the House Clerk today, since none of those is an official supported interface.","Whether the numbers in the Tesla example can be reproduced outside the offline test fixtures.","Whether the risk and budget checks really block an order that breaks your limits.","Whether anything other than an order you approved can reach your brokerage account.","How much Claude usage a full scan plus 10,000 replays consumes on a paid plan.","How much disk space it uses: the checks could not estimate it."]},"zh-Hans":{"summaryShort":"11 个 Claude 插件，扫描股票图表、追踪新闻、规划日内交易，下单前都需要你批准。","summary":"Day Trader skill 是一套包含 11 个指令文件的插件，供 Claude 和 Claude Code 使用，外加一些读取免费公开数据的小型 Python 脚本：Yahoo Finance 图表、纳斯达克代码列表、SEC EDGAR 和美国众议院的申报文件。它扫描图表寻找交易机会，追踪新闻，把握入场时机，设置止损和目标，按你的预算调整仓位大小，并在你真正投入资金前把这次交易重放 10000 次。它适合已经在用 Claude 并从事股票交易的人。你需要 Python 3.8 或更新版本，不需要用 pip 安装任何东西；真实下单要经过你自己的券商，而且只有在你批准每一单之后才会执行。","easeRationale":"Windows、macOS 和 Linux 都是 C 级：你必须已经有 Claude 或 Claude Code，然后只需一步安装（用 \"install skill\" 粘贴仓库链接，或者执行 /plugin marketplace add Jakeschincariol/day-trader-skill 和 /plugin install day-trader-skill@day-trader-skill），脚本需要 Python 3.8 或更新版本，不需要用 pip 安装任何东西。要真实下单，还需要额外接入券商连接器。","costNote":"这些技能是免费的（MIT 许可），README 说不需要注册也不需要 API 密钥。它们只能在 Claude 里运行，通常需要付费套餐或按 API 用量付费，真实下单还需要你自己的券商账户。","notVerified":["脚本如今是否仍能正常访问 Yahoo Finance、Nasdaq Trader、SEC EDGAR 和美国众议院文书处，因为这些都不是官方支持的接口。","特斯拉示例里的数字，能否在离线测试样例之外重现。","风险和预算检查是否真的能挡住超出你限额的订单。","除了你批准的订单之外，是否还有其他东西能触达你的券商账户。","一次完整扫描加上 10000 次重放，在付费套餐上会消耗多少 Claude 用量。","它占用多少磁盘空间：检查无法估算这一点。"]}}},{"id":"R_kgDOU6HY4w","slug":"jakeschincariol__replica-skill","name":"Replica","owner":"Jakeschincariol","fullName":"Jakeschincariol/replica-skill","type":"dev_tool","status":"active","grade":"C","easeByPlatform":{"windows":"C"},"risk":"attention","signals":[{"code":"young_repo_many_stars","severity":"attention","evidence":"23 天内获得 5794 个星标","source":"check","title":"新仓库却有很多星标"},{"code":"app_cloning_legal_risk","severity":"attention","evidence":"描述：\"clone any app: reverse-engineer it, rebuild it... then fix what its users hate\"；README：\"so you have an app you can sell\" 以及 \"talk to a lawyer before launch if there is money on the line. This is not legal advice.\"","source":"ai","title":"克隆应用的法律风险"},{"code":"single_day_repository","severity":"info","evidence":"创建于 2026-10-03，最近一次推送也是 2026-10-03，此后没有任何提交，却已有 5794 个星标和 1017 个 fork。","source":"ai","title":"只有一天动静的仓库"},{"code":"deploys_to_production","severity":"info","evidence":"README.md：`/replica-deploy` \"sets up production, gives you the DNS records for your domain, and ships it when you say go\"。","source":"ai","title":"部署到生产环境"}],"platforms":["windows","mac","linux","web"],"tools":["python","other"],"buildTools":[],"disk":{"minMB":null,"maxMB":null,"basis":"unknown"},"apiKeys":["Claude account (Claude Code or Claude chat)"],"cost":{"model":"free_with_paid_api"},"license":{"spdx":"MIT","category":"permissive","detectedFrom":"github"},"categories":["ai_skills","development","chat_ai"],"alternativeTo":[],"declaredAlternatives":[],"stars":6820,"downloads":0,"downloadsWeek":0,"downloadsDays":5,"growth":1023,"growthDays":5,"history":[{"date":"2026-10-26","stars":5797},{"date":"2026-10-27","stars":6068},{"date":"2026-10-28","stars":6281},{"date":"2026-10-29","stars":6487},{"date":"2026-10-30","stars":6673},{"date":"2026-10-31","stars":6820}],"firstPublishedAt":"2026-10-27T01:10:12.639Z","commitSha":"77c9436fb3d18c3d58169efb8caf4fe906b0dc51","verifiedAt":"2026-10-27T18:15:07.907Z","lastCommitAt":"2026-10-03T12:07:14Z","isMirror":false,"collectFailing":false,"reviewedBy":"founder","text":{"en":{"summaryShort":"Eleven instruction sets for Claude that guide it to study an existing app and build, rebrand and launch your own version.","summary":"Replica is a pack of eleven \"skills\", written instructions that teach Claude a step-by-step method. They walk Claude through studying an existing app from its public pages, planning and building a similar app, testing it, reading user reviews for complaints to fix, giving it a new name and brand, and putting it online. It is aimed at indie founders who want to build a competing product. You need Claude (ideally Claude Code) and Python 3.8+ for the small helper scripts. The generated app needs its own development and hosting setup. The README says it copies features, not code, logos or content.","easeRationale":"Installing is one command in Claude Code (or pasting the link into Claude), but the helper scripts need Python and the app it builds needs a full development and hosting setup.","costNote":"The skills are free (MIT) and need no API key, but they run inside Claude, and the app you build needs its own hosting and services.","notVerified":["Whether the skills really stop Claude from copying another app's code, text or images, as the README promises.","How much Claude usage it takes to build a full app with all eleven steps.","Whether selling a clone built this way is allowed under the law and trademarks in your country.","How well the generated app works compared with the original."]},"zh-Hans":{"summaryShort":"十一套给 Claude 的指令，引导它研究现有应用，并构建、更换品牌和发布你自己的版本。","summary":"Replica 是一个包含十一项“skills”的合集，即教 Claude 按步骤做事的书面说明。它们带着 Claude 依次完成：从公开页面研究现有应用，规划并构建类似的应用，测试，阅读用户评价以找出可修复的抱怨，给应用起新名字和新品牌，并上线发布。它面向想打造竞品的独立创始人。你需要 Claude（最好是 Claude Code）和 Python 3.8+ 来运行小型辅助脚本。生成的应用需要自己的开发和托管环境。README 称它复制的是功能，而不是代码、标志或内容。","easeRationale":"安装只需在 Claude Code 中运行一条命令（或把链接粘贴给 Claude），但辅助脚本需要 Python，它所构建的应用则需要完整的开发和托管环境。","costNote":"这些 skills 免费（MIT）且不需要 API 密钥，但它们在 Claude 内运行，你构建的应用需要自己的托管和服务。","notVerified":["这些 skills 是否真的像 README 承诺的那样，阻止 Claude 复制其他应用的代码、文字或图片。","用全部十一个步骤构建一个完整应用需要消耗多少 Claude 用量。","在你所在的国家，出售以这种方式做出的仿制应用是否符合法律和商标规定。","生成的应用与原应用相比运行得如何。"]}}},{"id":"R_kgDOUfXmpg","slug":"jaredpalmer__kev","name":"Kev","owner":"jaredpalmer","fullName":"jaredpalmer/kev","type":"dev_tool","status":"active","grade":"A","easeByPlatform":{"mac":"C","linux":"C","web":"A"},"risk":"attention","signals":[{"code":"young_repo_many_stars","severity":"attention","evidence":"40 天内获得 9621 个星标","source":"check","title":"新仓库却有很多星标"},{"code":"package_name_collision","severity":"attention","evidence":"README.md 警告：\"PyPI name collision: `pip install kev` installs a **different package** — K.E.V. ORM ... This project is **not** published to PyPI. Install from source as below.\"","source":"ai","title":"包名与另一个包重名"},{"code":"server_without_key_by_default","severity":"info","evidence":"README.md：\"The server binds to 127.0.0.1 (`--host 0.0.0.0` to accept other machines) and is open by default; set `KEV_API_KEY` to require `Authorization: Bearer