Total cost: $1.15.
"},{"target":"invideo-ai","stance":"claims","evidence":"Pepe and Doge arguing about doggy arms, replace the creatine with retinol where a pretty boy roasts a tomboy's pores, or ditch the physical product for a CheatGPT app where a himbo jock out-GPAs a PhD"}],"stars":27131,"downloads":2129,"downloadsWeek":298,"downloadsDays":5,"growth":1252,"growthDays":5,"history":[{"date":"2026-10-26","stars":25879},{"date":"2026-10-27","stars":26086},{"date":"2026-10-28","stars":26257},{"date":"2026-10-29","stars":26509},{"date":"2026-10-30","stars":26892},{"date":"2026-10-31","stars":27131}],"firstPublishedAt":"2026-10-27T01:10:12.636Z","commitSha":"e26d9142fd8a6f78bf4f3cdb800d6205f4ecca16","verifiedAt":"2026-10-27T18:15:07.907Z","lastCommitAt":"2026-10-29T09:37:19Z","isMirror":false,"collectFailing":false,"reviewedBy":"founder","text":{"en":{"summaryShort":"Lets an AI coding assistant copy the structure of a short video and make many new versions with new faces, words and clips.","summary":"Hypit is an add-on for AI coding assistants such as Claude Code or Codex. You give the assistant a short video or a description, and it builds an editable recipe with captions, clips and effects, then renders the finished video, including many variants at once. It is aimed at people making social ads, short clips and talking-head videos. You need Node.js, a coding assistant account, a terminal, and usually paid AI image, voice and video services. The README shows example videos costing about $1 each in service fees.","easeRationale":"There is no installer: you run `npx skills add hypit-ai/hypit -g` in a terminal, need Node.js 22.15+, a coding assistant, and the assistant then sets up the Hypit program and media tools.","costNote":"Hypit itself has no fee; the coding assistant and AI generation services are billed separately (README examples: $1.07 to $1.15 per video).","notVerified":["Whether it works on Windows; the README gives no platform list.","Which extra tools (FFmpeg, Python for WhisperX, headless Chrome) the assistant installs during setup.","Real cost per video with your chosen AI services and coding assistant.","What is inside the Google Drive avatar pack linked in the README.","What commands the coding assistant runs on your computer while preparing Hypit."]}}},{"id":"R_kgDOSN5LZA","slug":"ifixai-ai__ifixai","name":"iFixAi","owner":"ifixai-ai","fullName":"ifixai-ai/iFixAi","type":"dev_tool","status":"active","grade":"C","easeByPlatform":{"windows":"C","mac":"C","linux":"C"},"risk":"attention","signals":[{"code":"sends_adversarial_requests_to_your_agent","severity":"attention","evidence":"README: \"Use a staging copy, because the probes are real requests.\" The default run includes probes for prompt injection (`B12`) and for destructive actions by someone not allowed to ask for them (`P01`), so it should only be pointed at an agent you are allowed to test.","source":"ai"},{"code":"very_young_repository_with_large_star_count","severity":"info","evidence":"The repository was created on 2026-04-27 and already shows 37,084 stars with only 3 open issues; the README opens with Product Hunt and Trendshift promotion badges.","source":"ai"}],"platforms":["windows","mac","linux"],"tools":["python"],"buildTools":["python"],"disk":{"minMB":100,"maxMB":300,"basis":"heuristic"},"apiKeys":["OpenAI","Anthropic, Google Gemini, Azure, Bedrock, OpenRouter or Hugging Face (any one can be the judge instead of OpenAI)"],"cost":{"model":"free_with_paid_api"},"license":{"spdx":"Apache-2.0","category":"permissive","detectedFrom":"github"},"categories":["development","ai_agents","ai_skills"],"alternativeTo":[{"slug":"langsmith","name":"LangSmith","confirmed":true},{"slug":"braintrust","name":"Braintrust","confirmed":true}],"declaredAlternatives":[],"stars":41458,"downloads":0,"downloadsWeek":0,"downloadsDays":2,"growth":6394,"growthDays":5,"history":[{"date":"2026-10-29","stars":37898},{"date":"2026-10-30","stars":39226},{"date":"2026-10-31","stars":41458}],"firstPublishedAt":"2026-10-29T01:54:21.351Z","commitSha":"28dca412279635361d626574810aae8d91ab6b45","verifiedAt":"2026-10-29T01:37:54.067Z","lastCommitAt":"2026-10-30T18:50:38Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Audits your own AI agent: sends it tricky requests and grades how it answers, from A to F.","summary":"A command-line tool for people who build AI agents. It puts your agent in a simulated version of your business, sends the kind of requests a real day brings, including requests that push the agent past what it is allowed to do, and another AI model grades each reply. You get a pass or fail per check, an A-to-F grade and reports in JSON and Markdown. You need Python 3.10 or newer and a paid model key for the judge. A demo mode with canned answers runs with no key. It also installs as a plugin or skill inside Claude Code, Codex, Cursor and similar.","easeRationale":"There are no ready installers in the 23 releases, so on every platform you install Python 3.10 or newer, run `pip install ifixai` and then a few commands; Windows, Mac and Linux are all C. The README adds Windows-specific steps (`py -m venv`, `python -m ifixai.cli.main`) and warns that a stock Mac ships Python 3.9, which is too old.","costNote":"The code is free (Apache-2.0). A real audit calls a paid model as the judge, plus your own agent's API; the README says `--dry-run` shows how many judge calls a run will make before anything is billed.","notVerified":["Whether the audit grades are accurate, or whether a pass here means your agent behaves well outside the simulated scenarios.","What a real audit costs in judge tokens, especially the `--full-run` with all 61 inspections.","Whether the Claude Code plugin, the Codex plugin and the editor skills install and work as described.","Whether the install works on each platform and which Python versions actually run it.","What the tool sends to the judge provider, and whether any of your agent's answers or business data leave your machine during a run."]}}},{"id":"R_kgDOGyI-8A","slug":"immich-app__immich","name":"Immich","owner":"immich-app","fullName":"immich-app/immich","type":"needs_setup","status":"active","grade":"D","easeByPlatform":{"windows":"D","mac":"D","linux":"D"},"risk":"attention","signals":[{"code":"copyleft_license_agpl","severity":"info","evidence":"LICENSE is the GNU Affero General Public License v3: if you offer a modified version to other people over a network, the license requires you to make your modified source code available to those users.","source":"ai"},{"code":"install_script_downloads_at_run_time","severity":"info","evidence":"install.sh creates ./immich-app and then downloads docker-compose.yml and example.env from `https://github.com/immich-app/immich/releases/latest/download` before running `docker compose up`, so what runs depends on the files fetched at that moment.","source":"ai"},{"code":"you_are_responsible_for_backups","severity":"attention","evidence":"README.md opens with a warning: \"Always follow 3-2-1 backup plan for your precious photos and videos!\" — the project stores your only copy unless you arrange your own backups.","source":"ai"},{"code":"pre_release_version_published","severity":"info","evidence":"The newest release is tagged v3.4.0-rc.1 (2026-10-30), a release candidate; the newest stable tag is v3.3.5.","source":"ai"}],"platforms":["linux","mac","windows"],"tools":["docker"],"buildTools":["node"],"disk":{"minMB":100,"maxMB":500,"basis":"heuristic"},"apiKeys":[],"cost":{"model":"free"},"license":{"spdx":"AGPL-3.0","category":"copyleft","detectedFrom":"github"},"categories":["image","video","system"],"alternativeTo":[{"slug":"google-photos","name":"Photos","confirmed":true},{"slug":"icloud-photos","name":"iCloud Photos","confirmed":true},{"slug":null,"name":"Apple iCloud Photos","confirmed":false}],"declaredAlternatives":[],"stars":117828,"downloads":6321401,"downloadsWeek":49249,"downloadsDays":5,"growth":504,"growthDays":5,"history":[{"date":"2026-10-26","stars":117324},{"date":"2026-10-27","stars":117426},{"date":"2026-10-28","stars":117529},{"date":"2026-10-29","stars":117630},{"date":"2026-10-30","stars":117746},{"date":"2026-10-31","stars":117828}],"firstPublishedAt":"2026-10-27T01:10:12.637Z","commitSha":"3184b1532fd74a0b777207f8a86e9efe7dafce65","verifiedAt":"2026-11-01T01:39:27.616Z","lastCommitAt":"2026-10-30T19:33:25Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Keeps your photos and videos on your own computer or server, with a phone app that backs them up automatically.","summary":"Immich is a photo and video library you run yourself instead of leaving everything with a cloud service. You install it on a computer or home server with Docker, open it in a browser, and the phone app uploads new pictures by itself. It groups photos by date and place, recognises faces, searches by what appears in the image, and supports several users, shared albums and raw files. You need Docker and a machine that stays on; the official docs list the hardware requirements.","easeRationale":"D on all three: there is no installer or binary in the releases, and the documented way to run it is Docker Compose plus an .env file, which also means keeping a database and a background server running. Linux is the path the project documents best; on Windows and macOS you need Docker Desktop and a machine left switched on.","costNote":"AGPL-3.0 software with no license fee; you pay for the computer or server and the disk space.","notVerified":["Whether it installs and runs on your machine with Docker Desktop on Windows or macOS","How much disk space and memory your own library will actually need","Whether face recognition and image search work well on your photos","Whether the phone app's automatic backup catches every new picture"]}}},{"id":"R_kgDOVQa3Cw","slug":"impacifist__windows-gpu-unlock","name":"Windows GPU UNLOCK","owner":"windows-GPU-UNLOCK","fullName":"windows-GPU-UNLOCK/Windows-GPU-UNLOCK","type":"needs_setup","status":"alert","grade":"E","easeByPlatform":{"windows":"E"},"risk":"high","signals":[{"code":"young_owner_account","severity":"attention","evidence":"Owner account created 0 days ago","source":"check"},{"code":"bypasses_hardware_restriction","severity":"high","evidence":"The project exists to defeat a manufacturer lock on consumer NVIDIA cards. Repository description: 'Windows GPU UNLOCK: RTX3090 UEFI port...'; README: 'Experimental UEFI GPU unlock and direct Windows handoff', with measured gains over a 'controlled locked baseline: FP16 1.88-1.92x, BF16 1.92-1.95x'. It is based on rough2515-hub/rtx3080-unlock-public and Zagitta/gpu-unlock.","source":"ai"},{"code":"requires_disabling_security","severity":"attention","evidence":"README 'Internal headless quick start': 'Use the exact supported hardware, Secure Boot disabled, a fully decrypted Windows C: with BitLocker protection off, and a connected keyboard.'","source":"ai"},{"code":"changes_boot_configuration","severity":"attention","evidence":"README: `Headless.ps1 -EnableAutomatic -ConfirmedSuccess` 'places headless first and Windows Boot Manager second and disables Windows Fast Startup'. The README also describes failure cases: 'On failure or if Windows does not return, fully power off and choose F8 -> Windows Boot Manager.'","source":"ai"},{"code":"results_not_established","severity":"info","evidence":"README: 'There is no contemporary controlled locked baseline for this headless boot, so these values do not establish an unlock percentage. They do not establish game or ComfyUI gains, long-term stability, sleep/hibernate resume or repeated automatic cold-boot reliability.' The latest tag v0.3.1 is 'a source-only pre-release'.","source":"ai"},{"code":"very_narrow_hardware_support","severity":"info","evidence":"README 'GPU support': 'Success reports apply to specific cards and systems, not every card of the same GPU model.' The compatibility table lists named motherboard + card profiles such as 'ASUS TUF B650M + RTX 3090 FE'.","source":"ai"}],"platforms":["windows"],"tools":["python","gpu_nvidia","other"],"buildTools":[],"disk":{"minMB":2,"maxMB":7,"basis":"installer"},"apiKeys":[],"cost":{"model":"free"},"license":{"spdx":"GPL-2.0","category":"copyleft","detectedFrom":"github"},"categories":["hardware","system"],"alternativeTo":[],"declaredAlternatives":[],"stars":1413,"downloads":629,"downloadsWeek":228,"downloadsDays":4,"growth":370,"growthDays":4,"history":[{"date":"2026-10-27","stars":1043},{"date":"2026-10-28","stars":1173},{"date":"2026-10-29","stars":1267},{"date":"2026-10-30","stars":1333},{"date":"2026-10-31","stars":1413}],"firstPublishedAt":"2026-10-27T18:40:27.934Z","commitSha":"1f8776ee9c6ee32f5920adaa4baabc9181379bd4","verifiedAt":"2026-10-31T01:35:33.562Z","lastCommitAt":"2026-10-31T09:52:46Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Experimental boot code that releases an NVIDIA RTX 3000 card from its firmware lock before Windows starts.","summary":"A set of experimental UEFI boot files and PowerShell scripts that take an NVIDIA RTX 3060, 3070 Ti, 3080, 3090 or 3090 Ti out of the state the card's firmware leaves it in, then hand control straight to Windows without a restart. The authors report roughly double the measured speed in some tests. It only works on a short list of exact motherboard and card combinations. You must compile it yourself with Python and a pinned clang version, supply five firmware files from your own machine, turn off Secure Boot and BitLocker, and change your boot order.","easeRationale":"There is no binary: the README asks for Python 3.9+, clang/lld-link exactly 20.1.8, five locally obtained firmware assets, your own partition GUIDs, a 1 GiB extra EFI partition, Secure Boot off and BitLocker off, then several administrator PowerShell commands.","costNote":"GPL-2.0-only. Releases are source-only, with no ready program to download.","notVerified":["Whether the build works and the machine comes back to Windows on hardware that is not one of the listed profiles","Whether the reported speed gains hold in games or everyday work rather than the CUDA benchmark","What happens to sleep, hibernate and repeated cold boots, which the README says were not tested","Whether the GPU is left in a state that affects warranty or long-term reliability"]}}},{"id":"MDEwOlJlcG9zaXRvcnkyMzE2MzA5Mw==","slug":"inkscape__inkscape","name":"Inkscape","owner":"inkscape","fullName":"inkscape/inkscape","type":"ready_app","status":"active","grade":"A","easeByPlatform":{"windows":"A"},"risk":"low","signals":[{"code":"github_repo_is_placeholder","severity":"info","evidence":"The repository holds only README.md and one image; README.md says \"Inkscape is being developed on GitLab\" (gitlab.com/inkscape/inkscape). The last push here was 2022-03-03 and no license file is present, so GitHub activity and license data do not describe the actual project.","source":"ai"}],"platforms":["windows","mac","linux"],"tools":[],"buildTools":[],"disk":{"minMB":162,"maxMB":487,"basis":"installer"},"apiKeys":[],"cost":{"model":"free"},"license":{"spdx":"GPL-2.0","category":"copyleft","detectedFrom":"winget"},"categories":["design_cad","image"],"alternativeTo":[{"slug":"illustrator","name":"Illustrator","confirmed":true},{"slug":"coreldraw","name":"CorelDRAW","confirmed":true},{"slug":"affinity-designer","name":"Affinity Designer","confirmed":true}],"declaredAlternatives":[],"stars":4075,"downloads":0,"downloadsWeek":0,"downloadsDays":6,"growth":17,"growthDays":6,"history":[{"date":"2026-10-25","stars":4058},{"date":"2026-10-26","stars":4058},{"date":"2026-10-27","stars":4062},{"date":"2026-10-28","stars":4066},{"date":"2026-10-29","stars":4071},{"date":"2026-10-30","stars":4073},{"date":"2026-10-31","stars":4075}],"firstPublishedAt":"2026-10-25T23:19:07.264Z","commitSha":"1232eac68aff12978b208ff3ebfbbcc3ecbd7022","verifiedAt":"2026-10-27T18:15:07.907Z","lastCommitAt":"2022-03-03T20:52:00Z","isMirror":false,"collectFailing":false,"reviewedBy":"founder","text":{"en":{"summaryShort":"Draw logos, icons, illustrations, diagrams and maps as vector graphics that stay sharp at any size.","summary":"Inkscape is a vector drawing program used by designers and hobbyists to make illustrations, icons, logos, diagrams, maps and web graphics. Its own file format is SVG, an open standard. It runs on Windows, macOS and Linux and is installed with a normal installer. This GitHub page is only a pointer: the code is developed on GitLab and the program is downloaded from inkscape.org.","easeRationale":"A ready Windows installer is available (the checks found one of about 162–487 MB), so you download it and open it.","costNote":"The README describes it as free and open-source software.","notVerified":["The real license and recent activity, which live in the GitLab repository, not on GitHub","Whether the installer the checks found is the current version from inkscape.org","How well it opens files made in Illustrator or CorelDRAW"]}}},{"id":"R_kgDOVW5g1w","slug":"interplains__zero-breach-toolkit","name":"Zero Breach Toolkit","owner":"interplains","fullName":"interplains/Zero-Breach-Toolkit","type":"needs_setup","status":"active","grade":"C","easeByPlatform":{"windows":"C","mac":"C","linux":"C"},"risk":"attention","signals":[{"code":"known_vulnerabilities","severity":"attention","evidence":"Pinned dependencies with known vulnerabilities (OSV): cryptography: GHSA-g6cj-pr64-35w5, GHSA-jwv3-5hgf-82ww, GHSA-m2h6-j472-rp4c","source":"check"},{"code":"very_new_repository_with_many_stars","severity":"info","evidence":"The repository was created on 2026-10-25 and already had 4,007 stars and 428 forks on 2026-11-01, with 16 releases in that first week. There is no long history to judge it by.","source":"ai"},{"code":"anonymous_publisher_no_signed_binaries","severity":"info","evidence":"README: \"The project is anonymous, so do not take its word for anything\" and \"There is no signed Windows program, and none is planned while the project stays anonymous\". Releases ship a single Python file with a published SHA-256 and GPG signature, not an installer.","source":"ai"},{"code":"optional_command_downloads_and_runs_another_program","severity":"info","evidence":"README, \"Guided acquisition (experimental)\": the optional --collect-android flag \"downloads official AndroidQF v1.8.3, checks its pinned SHA-256, asks for the device owner's explicit consent and runs the collector\". The README calls it \"the only point at which the tool runs a program it did not ship\".","source":"ai"},{"code":"reports_hold_private_personal_data","severity":"attention","evidence":"README: \"Full reports can contain usernames, profile names, file paths, browsing details, SMS senders and message excerpts; keep them private.\" Reports are saved to a findings folder on your computer, and an --evidence-bundle ZIP is explicitly \"unencrypted\".","source":"ai"},{"code":"phone_check_needs_usb_debugging","severity":"attention","evidence":"The Android steps tell you to turn on Developer options and USB debugging and to accept \"Always allow\" for the computer. The README says to turn USB debugging off again when you finish, but a phone left in that state is more exposed.","source":"ai"}],"platforms":["windows","mac","linux"],"tools":["python"],"buildTools":["python"],"disk":{"minMB":100,"maxMB":300,"basis":"heuristic"},"apiKeys":[],"cost":{"model":"free"},"license":{"spdx":"Apache-2.0","category":"permissive","detectedFrom":"github"},"categories":["system"],"alternativeTo":[{"slug":"iverify","name":"iVerify","confirmed":true}],"declaredAlternatives":[],"stars":4006,"downloads":5803,"downloadsWeek":2011,"downloadsDays":3,"growth":4006,"growthDays":6,"history":[{"date":"2026-10-28","stars":2785},{"date":"2026-10-29","stars":3614},{"date":"2026-10-30","stars":3869},{"date":"2026-10-31","stars":4006}],"firstPublishedAt":"2026-10-28T01:50:05.614Z","commitSha":"465134c6795302f95f66a1f80204f583ab328ca0","verifiedAt":"2026-11-01T01:38:36.052Z","lastCommitAt":"2026-11-01T01:11:43Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Checks a Windows, Mac or Linux computer, an Android phone or an iPhone backup for traces of known spyware.","summary":"A free scanner that looks for traces of spyware that was already described in public research, such as Pegasus, Predator and Graphite. It reads browser records, startup settings, logs and files, and it can also read an Android collection or a local iPhone backup made on your computer. It is written for journalists, activists and anyone worried about being targeted. You install Python, download the folder from GitHub and start a menu from the terminal (on Windows there is a .cmd file to double-click). The check takes about 15 minutes.","easeRationale":"On Windows, the easiest platform, you install Python with \"Add python.exe to PATH\" ticked, download the ZIP and double-click scan\\run-scan.cmd, so there is no typing of commands. On Mac and Linux you type a command in the terminal, and on Mac you also have to give Terminal Full Disk Access or Safari's records are skipped.","costNote":"Apache-2.0 code; the indicator lists it downloads are published free by Amnesty International's Security Lab, the Citizen Lab, the MVT project and Echap.","notVerified":["Whether the checks really run to the end on each version of Windows, macOS, Linux, Android and iOS.","Whether a result is correct: the project itself says a clean result is not proof the device is clean, and matches may be harmless (for example a news article that mentions a spyware address).","Whether the single Python file attached to each release really rebuilds to the published SHA-256.","How much disk and time a full check takes on a machine with many files, since it fingerprints files up to 120 MiB each.","Whether the pinned dependency versions with known vulnerabilities (cryptography) affect the parts of the tool that are used, beyond what the README claims."]}}},{"id":"R_kgDOVaRZQw","slug":"jacke-pp__open-yoki","name":"Open Yoki","owner":"jacke-pp","fullName":"jacke-pp/open-yoki","type":"needs_setup","status":"active","grade":"E","easeByPlatform":{"linux":"E"},"risk":"attention","signals":[{"code":"young_owner_account","severity":"attention","evidence":"Owner account created 77 days ago","source":"check"},{"code":"crypto_promotion_main_use","severity":"attention","evidence":"The host is built around crypto streaming: the README says it streams on Binance Square, works \"懂行情\" with public prices and CoinAnk contract data, and in the TwinOasis square \"还能喊单，喊的币会在公开的战绩榜上跟踪涨跌\" (it can call coins, and the calls are tracked on a public scoreboard). An AI persona that talks up coins to an audience can run into financial-promotion rules, even though the README says \"没有钱包、交易、下注、红包抽奖、发币相关功能\".","source":"ai"},{"code":"ai_posts_on_your_accounts_unattended","severity":"attention","evidence":"The optional \"heart\" is a long-running AI (Claude Code or DeepSeek) that keeps its own folder of notes and \"决定发什么\" (decides what to publish): what it writes lands on Binance Square through ops/square_post.py and on X through the X API, and it can search the web on a daily dollar budget (HEART_WEB_USD, default 20). Nothing in the described flow asks a person to approve a post before it goes out.","source":"ai"},{"code":"voice_cloning_and_digital_face","severity":"info","evidence":"Step 4 of \"做你自己的主播\": \"复刻声音 (app/tools/volc-clone.mjs)\" and upload the look and movements to Vidu. Cloning a voice or a face that is not yours, or passing the result off as a real person, can break the platforms' rules and the law in some countries; the TwinOasis rules quoted in the README include \"不假装是真人\" (do not pretend to be human).","source":"ai"},{"code":"asks_for_your_douyin_cookie","severity":"attention","evidence":".env.example: \"DOUYIN_COOKIE=\" - \"抖音 cookie 文件的路径（文件里放浏览器复制出来的 cookie）\". Copying your own browser cookie onto a server gives that server your signed-in Douyin session, and automated reading with it can get the account limited.","source":"ai"},{"code":"snapshot_of_a_closed_product","severity":"info","evidence":"README: \"这份代码截自 yoki 10 月 24 日跑的版本（v150），之后的新功能分批再放\" - the code is a cut of the live product as of 24 October, with later features released in batches. There are no GitHub releases and the only contact given is a DM to @Jacke_pp on X.","source":"ai"},{"code":"chat_ingest_key_lets_anyone_speak_to_her","severity":"info","evidence":"README Security section: \"弹幕接入的钥匙谁拿到都能往她的弹幕里塞话\" - whoever holds the ingest key can push any message into the host's chat feed, so the key must stay on the machine that reads your live room.","source":"ai"}],"platforms":["linux"],"tools":["node","ffmpeg","other"],"buildTools":["ffmpeg"],"disk":{"minMB":null,"maxMB":null,"basis":"unknown"},"apiKeys":["OpenRouter (the model that talks)","Volcengine Doubao voice, plus a voice ID","Vidu (the moving digital face, needed for a real stream)","Volcengine RTC (sends the picture to the stream)","Anthropic or DeepSeek (the optional long-term memory, the \"heart\")","X (posting and replying)","Binance Square OpenAPI (publishing posts)","CoinAnk (crypto market data)","TikHub, plus a Douyin cookie (trending topics)","fal.ai (backup voice)","Telegram bot (fan and team groups)"],"cost":{"model":"free_with_paid_api"},"license":{"spdx":"MIT","category":"permissive","detectedFrom":"github"},"categories":["ai_agents","video","chat_ai"],"alternativeTo":[{"slug":"heygen","name":"HeyGen","confirmed":true},{"slug":"elevenlabs","name":"ElevenLabs","confirmed":true}],"declaredAlternatives":[],"stars":592,"downloads":0,"downloadsWeek":0,"downloadsDays":1,"growth":592,"growthDays":3,"history":[{"date":"2026-10-30","stars":477},{"date":"2026-10-31","stars":592}],"firstPublishedAt":"2026-10-30T01:57:54.315Z","commitSha":"2447d748dac4839a8ca238c8bf697ebfd12d398c","verifiedAt":"2026-10-30T01:45:01.738Z","lastCommitAt":"2026-10-28T09:20:58Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Runs your own AI live streamer on a server: a cloned voice, a moving digital face, chat replies, a diary and its own posts.","summary":"The code behind \"yoki\", an AI host that streams nightly on Binance Square. It builds a 16:9 live picture with a real-time digital face, a cloned voice and subtitles, pushes it out by RTMP, reads the chat and answers in seconds, remembers regulars, keeps a diary and posts on its own to Binance Square and X. The face, voice, personality and accounts of the original host are not included: you supply your own. It is made for an Ubuntu server (4 cores, 8 GB) and needs several paid services. The README is in Chinese, with an English version.","easeRationale":"This is server software: the README asks for an x86_64 Ubuntu machine with 4 cores and 8 GB, Node 22 or newer, ffmpeg and a headless Chrome, then deploy/install.sh, systemd services and Caddy in front, a key file under /etc/livehost/, keys from several paid services, a cloned voice and a digital face built on Vidu. The author says the step-by-step guide in SETUP.md is \"written for the AI that sets it up for you\". You can start it on your own computer to check that it loads, but without keys there is no voice and no face.","costNote":"The code is free (MIT), the running costs are not. The README's own table: the Vidu real-time digital human is billed per second of connection and is the largest item, Volcengine RTC a few yuan per stream, Doubao voice about 3 yuan per 10,000 characters plus a paid voice-cloning slot, OpenRouter a few cents per stream, and the optional Claude \"heart\" a few dollars a day. A server is extra.","notVerified":["What a night of streaming really costs, since the Vidu face is billed by the second of connection","Whether it works outside Ubuntu, and whether the servers suggested (Hong Kong, Singapore, Japan) are needed for the services to answer","Whether Binance Square, X or Douyin allow this kind of automated account and posting","What the \"heart\" writes and publishes over days, since it keeps its own notes and decides on its own","How much disk the recordings use (the README warns SQUARE_TAP can take several GB a night)","Whether the English README matches the Chinese one, which is the one kept up to date"]}}},{"id":"R_kgDOVRA2_g","slug":"jakeschincariol__day-trader-skill","name":"Day Trader Skill","owner":"Jakeschincariol","fullName":"Jakeschincariol/day-trader-skill","type":"needs_setup","status":"active","grade":"C","easeByPlatform":{"windows":"C","mac":"C","linux":"C"},"risk":"attention","signals":[{"code":"very_new_repository_high_star_count","severity":"attention","evidence":"The repository was created on 2026-10-20 and its last push is the same day, 2026-10-20 — ten days with no commits — yet it already has 3621 stars and 834 forks.","source":"ai"},{"code":"can_send_orders_to_your_broker","severity":"attention","evidence":"README: \"/trader-broker | Order Executor | Sends approved orders to your broker, paper trading by default, never without your yes.\" The same README says \"Most people who day trade lose money. You can lose money.\" Real money can be lost if you switch off paper trading or approve an order.","source":"ai"},{"code":"unofficial_data_source","severity":"info","evidence":"README: \"Yahoo Finance's chart endpoint is not an official API: it can lag, change or rate-limit you. The scanner and the entry timer read 1-minute or 5-minute bars, not every tick.\"","source":"ai"},{"code":"sends_your_name_and_email_to_sec","severity":"info","evidence":"README: \"The SEC tools (news filings, the analyst) ask you to identify yourself: put your name and email in `trader/config.json` (`\"sec_user_agent\": \"Your Name you@example.com\"`) or in the `SEC_USER_AGENT` environment variable.\" That name and email go out with every request to SEC EDGAR.","source":"ai"},{"code":"simulation_presented_as_odds","severity":"info","evidence":"The Time Machine gives percentages such as \"target first 29.4 %, stop first 25.5 %\", built only from the stock's last 60 days of 5-minute bars. The README itself says: \"The future can do things those 60 days never did... Treat its odds as a reality check, never as a promise.\"","source":"ai"}],"platforms":["windows","mac","linux"],"tools":["python","other"],"buildTools":[],"disk":{"minMB":null,"maxMB":null,"basis":"unknown"},"apiKeys":["Alpaca (brokerage, only to send real or paper orders)"],"cost":{"model":"free_with_paid_api"},"license":{"spdx":"MIT","category":"permissive","detectedFrom":"github"},"categories":["ai_skills","productivity","automation"],"alternativeTo":[{"slug":"tradingview","name":"TradingView","confirmed":true},{"slug":"benzinga-pro","name":"Pro","confirmed":true}],"declaredAlternatives":[],"stars":3979,"downloads":0,"downloadsWeek":0,"downloadsDays":4,"growth":1651,"growthDays":4,"history":[{"date":"2026-10-27","stars":2328},{"date":"2026-10-28","stars":2653},{"date":"2026-10-29","stars":3247},{"date":"2026-10-30","stars":3619},{"date":"2026-10-31","stars":3979}],"firstPublishedAt":"2026-10-27T18:40:27.943Z","commitSha":"3d0f4ef6986f4984b7c6bd46f7ff4f87744c3abd","verifiedAt":"2026-10-31T01:59:24.829Z","lastCommitAt":"2026-10-20T14:17:50Z","isMirror":false,"collectFailing":false,"reviewedBy":"ai","text":{"en":{"summaryShort":"Eleven add-ons for Claude that scan stock charts, follow news and plan day trades, with your approval before any order.","summary":"Day Trader skill is a pack of 11 instruction files for Claude and Claude Code, plus small Python scripts that read free public data: Yahoo Finance charts, Nasdaq symbol lists, SEC EDGAR and US House filings. They scan charts for setups, follow news, time the entry, set a stop and a target, size the position to your budget and replay the session 10,000 times before you risk money. It is for people who already use Claude and trade stocks. You need Python 3.8 or newer and there is nothing to pip install; real orders go through your own broker and only after you approve each one.","easeRationale":"Windows, macOS and Linux are all C: you must already have Claude or Claude Code, then run one install step (paste the repository link with \"install skill\", or /plugin marketplace add Jakeschincariol/day-trader-skill and /plugin install day-trader-skill@day-trader-skill), and have Python 3.8 or newer for the scripts, with nothing to pip install. Sending real orders needs a brokerage connector on top of that.","costNote":"The skills are free (MIT) and the README says there is no signup and no API key. They only work inside Claude, which usually needs a paid plan or API usage, and real orders need your own brokerage account.","notVerified":["Whether the scripts still work against Yahoo Finance, Nasdaq Trader, SEC EDGAR and the House Clerk today, since none of those is an official supported interface.","Whether the numbers in the Tesla example can be reproduced outside the offline test fixtures.","Whether the risk and budget checks really block an order that breaks your limits.","Whether anything other than an order you approved can reach your brokerage account.","How much Claude usage a full scan plus 10,000 replays consumes on a paid plan.","How much disk space it uses: the checks could not estimate it."]}}},{"id":"R_kgDOU6HY4w","slug":"jakeschincariol__replica-skill","name":"Replica","owner":"Jakeschincariol","fullName":"Jakeschincariol/replica-skill","type":"dev_tool","status":"active","grade":"C","easeByPlatform":{"windows":"C"},"risk":"attention","signals":[{"code":"young_repo_many_stars","severity":"attention","evidence":"5794 stars in 23 days","source":"check"},{"code":"app_cloning_legal_risk","severity":"attention","evidence":"Description: \"clone any app: reverse-engineer it, rebuild it... then fix what its users hate\"; README: \"so you have an app you can sell\" and \"talk to a lawyer before launch if there is money on the line. This is not legal advice.\"","source":"ai"},{"code":"single_day_repository","severity":"info","evidence":"Created 2026-10-03 and last pushed 2026-10-03, with no commits since, yet 5794 stars and 1017 forks.","source":"ai"},{"code":"deploys_to_production","severity":"info","evidence":"README.md: `/replica-deploy` \"sets up production, gives you the DNS records for your domain, and ships it when you say go\".","source":"ai"}],"platforms":["windows","mac","linux","web"],"tools":["python","other"],"buildTools":[],"disk":{"minMB":null,"maxMB":null,"basis":"unknown"},"apiKeys":["Claude account (Claude Code or Claude chat)"],"cost":{"model":"free_with_paid_api"},"license":{"spdx":"MIT","category":"permissive","detectedFrom":"github"},"categories":["ai_skills","development","chat_ai"],"alternativeTo":[],"declaredAlternatives":[],"stars":6820,"downloads":0,"downloadsWeek":0,"downloadsDays":5,"growth":1023,"growthDays":5,"history":[{"date":"2026-10-26","stars":5797},{"date":"2026-10-27","stars":6068},{"date":"2026-10-28","stars":6281},{"date":"2026-10-29","stars":6487},{"date":"2026-10-30","stars":6673},{"date":"2026-10-31","stars":6820}],"firstPublishedAt":"2026-10-27T01:10:12.639Z","commitSha":"77c9436fb3d18c3d58169efb8caf4fe906b0dc51","verifiedAt":"2026-10-27T18:15:07.907Z","lastCommitAt":"2026-10-03T12:07:14Z","isMirror":false,"collectFailing":false,"reviewedBy":"founder","text":{"en":{"summaryShort":"Eleven instruction sets for Claude that guide it to study an existing app and build, rebrand and launch your own version.","summary":"Replica is a pack of eleven \"skills\", written instructions that teach Claude a step-by-step method. They walk Claude through studying an existing app from its public pages, planning and building a similar app, testing it, reading user reviews for complaints to fix, giving it a new name and brand, and putting it online. It is aimed at indie founders who want to build a competing product. You need Claude (ideally Claude Code) and Python 3.8+ for the small helper scripts. The generated app needs its own development and hosting setup. The README says it copies features, not code, logos or content.","easeRationale":"Installing is one command in Claude Code (or pasting the link into Claude), but the helper scripts need Python and the app it builds needs a full development and hosting setup.","costNote":"The skills are free (MIT) and need no API key, but they run inside Claude, and the app you build needs its own hosting and services.","notVerified":["Whether the skills really stop Claude from copying another app's code, text or images, as the README promises.","How much Claude usage it takes to build a full app with all eleven steps.","Whether selling a clone built this way is allowed under the law and trademarks in your country.","How well the generated app works compared with the original."]}}},{"id":"R_kgDOUfXmpg","slug":"jaredpalmer__kev","name":"Kev","owner":"jaredpalmer","fullName":"jaredpalmer/kev","type":"dev_tool","status":"active","grade":"A","easeByPlatform":{"mac":"C","linux":"C","web":"A"},"risk":"attention","signals":[{"code":"young_repo_many_stars","severity":"attention","evidence":"9621 stars in 40 days","source":"check"},{"code":"package_name_collision","severity":"attention","evidence":"README.md warns: \"PyPI name collision: `pip install kev` installs a **different package** — K.E.V. ORM ... This project is **not** published to PyPI. Install from source as below.\"","source":"ai"},{"code":"server_without_key_by_default","severity":"info","evidence":"README.md: \"The server binds to 127.0.0.1 (`--host 0.0.0.0` to accept other machines) and is open by default; set `KEV_API_KEY` to require `Authorization: Bearer