r/coolgithubprojects • u/Old_Cow_6636 • 2h ago
r/coolgithubprojects • u/nzbman • 1h ago
Scryer - The media manager that understands anime
Hello r/coolgithubprojects -
I know, there's a veritable cornucopia of "new media manager"s right now and it can feel overwhelming. I hope to help you understand why you may enjoy Scryer versus all the other choices.
Overview
Scryer is a new, high-performance app that replaces the Arr stack. Current Arr tools it replaces: Sonarr/Radarr, Prowlarr, Bazarr, Unpackerr, Seerr. More coming as well - Maintainerr & Tdarr.
Scryer is a self hosted tool, it ships as a single (rust based) binary with either SQLite or Postgres support. It's also available as an OCI container (Docker/Podman), Windows builds and is on Unraid & winget.
Website - https://www.scryer.media/scryer/
Github - https://github.com/scryer-media/scryer
Community and Team
Scryer has a thriving community and a small maintainer team. There are over 800 active Scryer users and a maintainer team of 3 along with some additional Discord staff. I have a couple applicants for a 4th maintainer position that I've opened up as well since the incoming requests are getting hard to keep up with!
Scryer would not be where it is today without the incredible community. There's over a dozen folks who have been testing, helping, providing feedback since May and some even before. Scryer's community is truly global, we have folks from all over the world.
Differentiators
Why is Scryer different from the other tools you've been seeing drop lately? There's so many, Arrmada, Cinephage, Mydia, etc.
I actually built Scryer mainly because I love anime and the Arr stack was terrible at it. I looked into other options and nothing really supported it the way I wanted. I needed better release name parsing, better language support, and not "just TVDB".
Anime
- Multi-season and multi-episode packs
- Community numbering that maps any numbering system for you
- Copious metadata for Anime
- Filler/Recap info, you decide if you want them
- SeaDex integration with daily updates
- Dub cast information
- Release name parsing that knows anime release group norms
Some of these obviously translate across all media types, but they are particularly useful to anime
Metadata Gateway
I host a metadata gateway for Scryer that provides a normalized view into all the various sources. This keeps the hits on upstream sources (TMDB) minimal while also providing top tier search and AI powered discovery to Scryer. It's also how Lists integration works with providers like Trakt and SIMKL. The metadata gateway is the only reason I have rough counts of active users and nothing is tracked. The only info i have is a salted-hash of IP addresses and an anonymous registration challenge that Scryer instances use with the gateway to prevent abuse. If you're familiar with Arr, you're probably aware they also host a gateway called Skyhook.
Plugin System
Scryer was built from day 1 with a robust plugin system, aimed at easier community involvement and rapid fixes for upstream changes. It continues to be a boon as it's very lightweight for me to push a plugin change when a provider changes their domain rather than having to push a whole Scryer release. I've had several community authored plugins that I've approved as well.
Secure
My background is in software engineering and architecture with a recent focus in cybersecurity and agentic security tooling. I care deeply for privacy and cyber security and have transferred all my professional knowledge into Scryer. I use every tool at my disposal to ensure it continues to stay secure as it evolves too.
Misc
- Supports additional files for your "Director's cut", "Extended edition", or "Alternate ending"
- Super flexible and robust rules engine that lets you go far beyond what Custom Formats did
- Bring your own "jobs", an in-app scheduler that lets you setup your own workflows
- AI powered discovery brings you personalized recommendations based on your library
- "Libraries" as a concept that let you organize your system better. Think of a Library as an individual Sonarr instance, it contains all the configurations and security boundaries. That lets you create a Kids Shows library that you only share with your kids for requests or a German library that lets you set your language preferences and search preferences just for that library.
- and so much more
Roadmap
Today, Scryer handles Movies, Series and Anime. I will likely add other media types in the future (music, books, etc), but that is a long term roadmap, not near term. Metadata is the cost there as it's massive for those types and I don't want to push something that goes direct to the providers.
Maintainerr/Tdarr features are in active development and will land before end of year. These are very important to me.
Multiple quality profiles is also on my list for those who like to have 4k local and 1080p streaming optimized copies.
If you find Scryer interesting and want to keep tabs on it, please give it a star on Github, those really help as many package managers look at that.
AI Disclosure
AI assistance is used in developing Scryer. Everything is guided by experienced software engineers. You can find the full policy we use here: https://www.scryer.media/ai/
r/coolgithubprojects • u/JackDaxter • 6h ago
Cuicuit 🐥: open source meal planner for people who don't plan
cuicuit.laclau.devHi! I've tried all recipe apps but they all need too many clicks and attention.
They want you to choose a date in a calendar, add ingredients to a list separately, get duplicate ingredients everywhere... or find a nice app but pay a subscription just to manage groceries.
So I tried to make the most convenient and modern app possible: Import recipes from anywhere (Instagram/YouTube/TikTok, websites or any pasted text) to curate your personal gallery, add meals to your plan in one click, and just throw extra items into the sidebar whenever you're out of something.
Everything gets combined and organized into aisles and it's easy to know if you're got everything to cook each meal. Check what you already have before shopping, then fly through the store.
I'm calling it Cuicuit 🐥 Hand-coded after 1 year of weekends here and there.
100% Free, open-source & self-hostable because I love open source!
- Website, try the hosted version in 1min: https://cuicuit.laclau.dev
- GitHub (would love a star 😄⭐): https://github.com/MadeInPierre/cuicuit
What do you think of this UX? Still early but I would love your feedback, thank you!
r/coolgithubprojects • u/Positive_Set9050 • 4h ago
I made Obsidian, but with a much cooler UI
I built Amethyst — Obsidian with a better graph and a more immersive interface
Hey! I built Amethyst, a macOS knowledge management app inspired by Obsidian.
I really like Obsidian's approach to interconnected Markdown notes, so I wanted to keep that core idea while improving the part of the experience I felt could be much better: the graph and the overall interface.
Problem
As your knowledge base grows, connections between notes become increasingly valuable, but exploring them isn't always the most intuitive experience. I wanted a graph that felt like a real part of the workflow rather than just a visualization you occasionally open.
At the same time, I wanted the interface to feel more polished and visually engaging without making everyday note-taking more complicated.
That's why I built Amethyst: essentially an Obsidian-inspired knowledge workspace with a more immersive, interactive 3D graph, improved visuals, and floating note panels, while keeping the experience straightforward to use.
Comparison
- Obsidian: Amethyst takes inspiration from Obsidian's interconnected Markdown-based knowledge management. The main difference is its graph-first experience, with a more immersive 3D visualization and a redesigned interface built around exploring connections between notes.
- Other graph-based note-taking apps: Amethyst aims to combine a visually rich, spatial graph with a practical note-taking workflow, rather than making graph exploration feel like a separate tool or sacrificing usability for visual effects.
I'm not trying to reinvent note-taking from scratch. I want to keep what makes Obsidian useful while making the experience of exploring and navigating your knowledge base more engaging.
Pricing
Free: Amethyst on GitHub
You can find the project and its release information on GitHub.
Feedback on the interface, usability, and graph itself is much appreciated.
r/coolgithubprojects • u/SureSeaworthiness831 • 3h ago
An AI-assisted guide that turns unfamiliar GitHub repositories into guided investigation quests
I built RepoQuest, a tool that helps developers figure out where to start when exploring an unfamiliar open-source codebase.
Instead of just summarizing a repository, RepoQuest generates three guided investigation quests from a public GitHub repository URL.
Each quest includes:
- A concrete investigation goal and difficulty level
- Step-by-step tasks and success criteria
- Links to relevant GitHub issues and suggested source-file paths when available
Under the hood, I'm using Next.js, React, TypeScript, the GitHub REST API, and Google Gemini. The interface also supports difficulty filtering, progress tracking, and saving workspace snapshots in the browser.
It's an early prototype, and the quality of the quests depends on the repository evidence available. It doesn't read the entire codebase, so the suggested paths still need to be inspected by the developer.
Source code: https://github.com/infi9itea/RepoQuest
I'd appreciate feedback from developers who explore or contribute to open-source projects. What would make a tool like this more useful?
r/coolgithubprojects • u/RetrogradeMarmalade • 3h ago
I De-E-Wasted some old conference hardware.
Hello all, This is a project I've been working on, on and off, for the past few months, I never got around to posting it but with all the "reverse engineer everything" hype I figured I'd share.
The goal was to take advantage of some soon to be e-waste by trying to get a custom Linux running on the TC8 PoE room controllers and the C60 conference phones. I started this project before AI and was slowly trying to port over an android 4.4 device tree I extracted from a firmware dump to something a 6.6 kernel can run. I was slowly, nights and weekends style, tweaking it. I then threw Claude at the problem and had a booting kernel with serial working in an evening. The i.MX8MM this thing (and the c60 room phones) run is a little dated but very well supported.
The next slog was the drivers, Most of this work was done before R.E.A dropped but it involved progressive waves of forensics on the firmware dump using ghidra (via MCP) and the extracted device tree, A testbench with a camera and microphone pointed at the DUT. Most of the work was presenting all these tools to the agent as tools and automating things like power cycling the device, letting the agents rapid iterate and "fuzz reality" until drivers compiled and drove the display, networking, sound, etc..
This process repeated for both he TC8 and the C60 (which is cooler IMHO, has more hardware)
here are a collection of videos from the process.
https://www.youtube.com/watch?v=NCXOQ26893Y First fw rev with working audio and display.
https://www.youtube.com/shorts/mjWlt5mWm4g?feature=share The bootloader. (had to chainload uboot for reasons.. tablet had security fuses set but uboot was compiled with every feature under the sun and no restrictions, so I compiled oy own uboot and booted it. Why my own uboot? I wanted to be able to have the device go into UMS or FASTBOOT mode without shucking it in case a firmware didn't take. So my u-boot drives the screen and touch and you select the mode by placing fingers on the screen.
Then the c60. This one is still under development.
No security fuses set on any of the devices i found so you can do an entire flash via USB by flipping one of the MODE jumpers.
https://www.youtube.com/shorts/SefzHp9YEy8?feature=share Unfortunately, the display comes up half the friggin time. not entirely sure why. the bootloader might be doing something.. The speakers on this thing are nice.
https://youtu.be/AHVzl_cmkE4 My testbench.
the git repo. https://github.com/Polycom-Open-Firmware/poly-firmware-build
r/coolgithubprojects • u/CellistApart3564 • 11m ago
Always-on voice typing for macOS that finds the right text field and can operate apps (MIT)
github.comr/coolgithubprojects • u/Regular_Database_266 • 20m ago
UAIRT: one C API to run models on QNN, TensorRT, ONNX Runtime, CoreML, OpenVINO and llama.cpp, with Android and iOS demo apps
github.comHi! UAIRT is a small C API (C++17 core, Python/C++/Rust bindings) where each inference runtime is a plugin. You pick the backend by name, so moving an app from, say, TensorRT to QNN means changing the backend name, the model file, and a few options, not the inference code.
It's a wrapper: no compute of its own, and it doesn't convert models for you (there's an export script for PyTorch/ONNX to a few targets). Each backend is only listed as "verified" if a real model matched the vendor's own tool on real hardware, and the README says what was not tested.
There's an Android app, an iOS app with a live camera detector, and playbooks so Claude Code/Codex can build it and run a model for you. It's 0.1.0, so feedback on the API is very welcome.
r/coolgithubprojects • u/Gabi0123 • 28m ago
BaseMile -- open-source heart rate running app with BLE chest strap pairing, voice zone alerts, and offline maps (React Native/Expo, GPL-3.0)
github.comr/coolgithubprojects • u/tkshan19 • 40m ago
Why I built a zero-cloud, multi-database personal finance engine (DuckDB + SQLite)
github.comr/coolgithubprojects • u/bobeire-rhitcs • 6h ago
I built a free open-source imaging tool for Windows - it restores Macrium images directly, which seemed useful while some are still sitting on Reflect backups
Repo: https://github.com/bobeire/opbs
Site: https://opbs.rhitcs.com
The Macrium situation (Free gone, 8 out of support, X is subscription) left a gap, especially for people with years of .mrimg / .mrimgx files they still need to restore. OPBS reads those formats natively, including differential and incremental chains, with full decompression and per-block MD5 verification before anything lands on the target.
Beyond that it covers the operational side that usually costs money:
- Differential-chain backups, AES-256-GCM, zstd
- Scheduled restore drills (a backup you've never restored is a guess)
- Bit-rot scrubbing with XOR parity self-healing
- Immutable repositories + off-box anchors (rollback-resistant)
- Clone, restore-to-VHD, read-only file mounts (WinFsp), headless CLI
Benchmarks and method: https://bobeire.github.io/opbs/benchmark.html
Install today: scoop or installer from releases; winget and chocolatey submissions are in review.
GPL-3.0. v0.6.87 - honest caveats on the site; blunt feedback please, bug reports welcome.
r/coolgithubprojects • u/Unfair-Memory7248 • 55m ago
I'm thinking to Open Source my platform for Personal Trainers but not sure how to do it
galleryI work as a personal trainer, and there are plenty of coaching platforms out there: Everfit, Trainerize, TrueCoach, etc. They're big companies making millions a year.
I built my own platform because the pricing is outrageous. It can go up to 100/month just to have 50 clients, and then everything else is an add-on: 9/month for nutrition, 10/month for a calendar, and so on.
So I made SoloTrainer.net for independent trainers who don't want subscriptions.
In the app
Thanks to some reverse engineering (if you know, you know):
- Unofficial velocity tracking with some well-known encoders
- Direct Polar support coming next, now that I've seen how it connects over Bluetooth
Other features:
- Built-in tests (1RM, chair test)
- Cardio programming and dedicated screens
- Notifications when a client finishes a workout
- Offline mode, with rest timers that keep running in the background
- Real-time sync between trainer and athlete
- Easy timeline editing of workouts
- Etc. (No need to list all)
Since the app is already on the App Store and Google Play in 2-3 weeks, it could easily connect to a self-hosted version too.
On the web platform
- Calendar: like Calendly, with personalized or embeddable booking links for your clients, free
- Forms: like Tally or Typeform, free
- Payments: track who owes what and how they pay, also free
- Accounting: built for tax declarations in Switzerland and Spain, the two countries I've lived in
For something like accounting, contributors from other countries could adapt it to their local laws, which would be awesome.
The problem
Getting it known is really hard, and doing all of this alone is a bit of a pain in the ass, and I'm obsessed looking the Discovery page in Github to find new open source solutions and apps, and I wanted to do something similar.
So I'm thinking about open-sourcing it. The native app could accept a code from a self-hosted instance, with a simple setup guide, so anyone could run their own. This would follow the model of Ente (I'm a subscriber, and they have an open-source version) or OpenSEO, where you can self-host for free or pay for a managed version.
I'm not sure which model makes the most sense:
- Open source, with a paid managed hosting option
- Completely free and open source, funded by donations
What do you think?
r/coolgithubprojects • u/iximiuz • 55m ago
ShellGym - an Interactive Linux Command-Line Trainer
github.comr/coolgithubprojects • u/cbagriacik • 57m ago
I built a Windows system monitor in Rust because Task Manager kept freezing when I needed it most
github.comr/coolgithubprojects • u/BzimHrissaHar • 58m ago
net switch - pick which internet connection each app uses on windows
github.comso i have two connections at home, a cable and a second router i reach with a usb wifi stick. windows only really uses one, so when steam was downloading everything else crawled while the other line did nothing
so i made this, you pick per app which line it uses. like steam on one and discord + browser on the other. it can also spread apps over all your lines, and if a line loses internet its apps move to another one until its back
works with phone tethering too, and you can put a data cap on the phone so it doesnt eat your plan. windows only for now, working on a linux version
r/coolgithubprojects • u/echristm76 • 1h ago
I missed MixMeister so much I built my own mix app. It’s out in beta, roast it 🎧
galleryLong time DJ here, mostly prepping mixtapes and radio shows. For years MixMeister was my thing. Then it died, and nothing really replaced that feeling of just laying tracks on a timeline and shaping every transition slowly, with a coffee, no pressure.
So about 5 weeks ago I started building my own. It’s called GlideMix and it runs on Mac and Windows.
What it does right now:
- reads your rekordbox and Lexicon library, grids, keys, cues, playlists, all of it
- you drop a track and it’s already beatmatched, on the bar, and lined up with the outro of the one before
- draw filter sweeps, echo outs, any knob of your VST/AU plugins, or just record the moves live
- stems: vocals of one track over the beat of the next, that kind of fun
- beat grid editor like rekordbox, for the tracks that are a pain
- two playheads like a mixer with cue: the crowd hears the mix, you preview the next transition in your headphones
- stream straight to Shoutcast / Icecast, or export the whole mix
It’s a beta, so yes there are bugs. I fix stuff almost every day.
Demo is free, everything works, it just goes quiet for a few seconds every 2 minutes. Full version is €49 one time, no subscription.
The source code is open (GPL) for the nerds.
👉 https://github.com/cristitm76/glidemix-releases
I’m one guy doing this, so honest feedback helps me more than anything. What’s missing for how YOU prep a mix? What would make you switch?
r/coolgithubprojects • u/SavingsRecover1563 • 1h ago
Switch between ChatGPT, Claude, Gemini, Deepseek and Perplexity without losing context
About 3 months ago, I built MoveChat because I got tired of manually copying conversations whenever I wanted to switch between AI tools.
It's now crossed 500 users, which is pretty cool to see, especially when I've barely promoted it. I made a couple of Reddit posts, but that's pretty much it. No ads or big launch. People have just been finding it on their own, and it's still growing.
Since the original release, I've added support for DeepSeek and Perplexity, improved things based on bugs and issues people ran into, and added JSON export. Also added better support for artifacts
You can transfer chats between ChatGPT, Claude, Gemini, DeepSeek and Perplexity, or download them locally as Markdown, PDF or JSON. Images and uploaded files are carried over too, so you're not just transferring plain text.
And its 100% free and open source
There's also a website now with links to both the Chrome and Firefox versions.
Website: https://vc067.github.io/MoveChat/
GitHub: https://github.com/VC067/MoveChat
It's still a work in progress, but I'm glad people are finding it useful. :)
r/coolgithubprojects • u/divyansh_dc013 • 1h ago
If you're not using ChatGPT Plugins - then you're missing out on a lot
github.comI've been using ChatGPT plugins a lot lately and realized there's a lot more available than most people know about.
From coding and data analytics to research, productivity, automation, and security, there's a plugin for almost everything.
So I made an open-source GitHub repo - Awesome ChatGPT Plugins
Here's what's inside:
• 719 hand-picked chatgpt plugins across 28 categories
• 4,338 plugins in a searchable catalog
• Coding, productivity, research, data analytics, automation, security, and more
• JSON/CSV exports + resources for developers
Github: https://github.com/Asdivyansh/Awesome-ChatGPT-Plugins
Would love it if you drop a star. 🌟
r/coolgithubprojects • u/gautamgpt • 2h ago
MeshLive turns nearby phones into a livestreaming network. No internet or server - just Bluetooth.
One phone starts a live broadcast. Another phone watches it and passes it on. A third phone receives it through the second.
None of them needs an internet connection.
That’s the idea behind MeshLive, a free, open-source project I’m building for Android and iOS. Alongside live broadcasting, it supports phone-to-phone voice/video calls. The Android beta also has audio-only broadcasting—something like a local radio station running between nearby phones.
I started working on it after seeing Bitchat during the student protests in Delhi. Offline messaging made me wonder: could we do this with live voice and video too?
The interesting part is that the phones aren’t just displaying a stream from some server. They’re carrying it themselves. A receiving phone can become the next relay, extending a broadcast beyond the original sender’s Bluetooth range.
The difficult part has been squeezing real-time media through Bluetooth while dealing with slow links, interruptions and phones that behave very differently. There’s a lot more to it than getting two devices connected once.
The repositories include the Android and native Swift/SwiftUI iOS implementations, protocol documentation, device-specific compatibility work and benchmark tooling. On Android, I’ve also been working on rotating discovery IDs and contact recognition without publicly broadcasting personal names.
Android has an installable beta now. The iOS app is earlier, less tested and currently built from source. Bluetooth range and bandwidth still limit what’s practical, especially across multiple relays. This isn’t an emergency-ready system or a promise of anonymity.
I’m keeping it open source because I want people to be able to use it, inspect it, adapt it and take it somewhere I wouldn’t have thought of, not just download another closed app.
Android + APK:
https://github.com/MeshLive/meshlive-android
iOS:
https://github.com/MeshLive/meshlive-ios
What would you use a local, internet-free live broadcast for? I started with shutdowns in mind, but I’m curious about everything from small events to communication in places with no coverage.
r/coolgithubprojects • u/ChickenIsGoodStuff • 2h ago
Glasstrack - open-source issue tracker like Linear/Jira: boards, cycles. No hidden features behind a paywall
I’ve been inspired by the recent wave of free, open-source software people have been building. Trying to do my part in making software as free as possible.
I'm starting off with Glasstrack, an issue tracker for teams: boards and lists, cycles, search, comments, GitHub integration and one-click export. It’s open source and every feature is included. Nothing is behind a paid plan.
It's completely free to try and use. You can self-host it with Docker Compose (instructions in the repo).
I'm also hosting it, but instead of per-seat pricing, the hosted version charges roughly what it costs to run: a share of the servers (max $5/month), plus storage and email, plus 20% for payment fees and a reserve. All costs are on the finances page, and the price only goes down as more teams share the servers.
I built it with Claude Code, using one agent to implement and a second to critique against the spec.
My aim is to make software as close to free as possible. I'd love feedback, and if this works, I'd like to do the same for other tools.
r/coolgithubprojects • u/v0id_user • 17h ago
Cubepals: open-source Minecraft server hosting where servers sleep when empty and wake when a friend joins
Cubepals is an open-source Minecraft server host. You make a server in a few choices, send friends an address like arcade.play.cubepals.com (our own server, you can join it from Minecraft Java right now), and they join from the normal game. Servers sleep when nobody plays and wake when someone joins.
The part I'm proudest of is the join: a sleeping server can take 40 to 50 s to boot, but the Minecraft client gives up after 30 s of silence. An edge proxy holds the login open by sending login queries the client answers, buffers what the client sent, and replays it once the server is up.
TypeScript, AGPL. Repo: github.com/cubepals/cubepals (the edge is in apps/edge)
Try it: cubepals.com
r/coolgithubprojects • u/FriendlyChingu • 3h ago
Open-source alternative to Caffeinated: a free menu bar app that keeps your Mac awake
I built a small menu bar app called Espressoinated that keeps your Mac awake with one click. It's free and open source (MIT).
What it does
- Left-click the coffee cup to toggle it on/off, right-click for the menu
- Timers: indefinitely, 15/30 min, 1/2/5/12 hours, with a live countdown in the menu bar
- Optional "Keep Display Awake" (or let the screen sleep while the Mac keeps working)
- Launch at login
- Native Swift, universal binary (Apple Silicon + Intel), no Dock icon
How it works
It uses Apple's documented power assertions (the same mechanism caffeinate uses), so no sudo, no background daemon. Quitting the app always restores normal sleep. You can check with pmset -g assertions.
Install
Download the DMG from the releases page, drag it to Applications. Requires macOS 13+. It's ad-hoc signed but not notarized, so on first launch you'll need to right-click → Open. The source is all in the repo if you'd rather build it yourself (./build.sh).
Code and download: https://github.com/trueToastedCode/espressoinated
Feedback and feature requests welcome.
r/coolgithubprojects • u/nichtbinaererbaum • 3h ago
glassy-liquid: Liquid Glass style refraction for the web as Web Components (React, Vue, Svelte bindings, MIT)
github.comr/coolgithubprojects • u/MoodOdd9657 • 13h ago
SpeakoFlow: voice typing, a voice assistant and meeting notes in one open-source app (Rust + Tauri, runs offline)
galleryHey everyone, I'm the developer of SpeakoFlow. It's a desktop app for Windows, macOS and Linux that lets you talk instead of type, in any app. 2.1 just came out.
What it does
- Dictation anywhere, with optional cleanup of filler words and corrections.
- Ask about selected text. Translate it, reply to it, or explain it.
- Voice conversations. It answers out loud, and you can cut in.
- Meeting notes. No bot joins the call.
Under the hood
- Rust and Tauri 2, with a React UI.
- Speech runs locally with Parakeet, Whisper and others. Models download from Hugging Face inside the app.
- The assistant runs on a built-in llama.cpp engine, so it works offline with no server to set up.
- Cleanup uses SpeakoFlow Mini, a 0.8B model I fine-tuned for it.
Cloud models are optional, with your own API key. MIT licensed, no telemetry.
- GitHub: https://github.com/AbhishekBarali/SpeakoFlow
- Website: https://www.speakoflow.com
Issues and PRs are welcome.
r/coolgithubprojects • u/Status_Record5772 • 9h ago
Legwork: your AI finds the open-source tool it needs on GitHub and installs it in a sandbox
github.comI built this because my AI kept hitting tasks it had no tool for (transcribe a voice memo, pull a table out of a PDF), and the obvious fix, letting it pip-install whatever repo it finds, is how malware gets in. Two of the ten most-starred new AI repos I tested one week carried the same dropper.
Legwork is an MCP server for Claude, Cursor, Codex and others. Your AI searches GitHub, you approve the install, and the tool runs sandboxed: it reads only the folders you grant, gets none of your keys, and has no network unless you allow it. 37 common tools are cached and install in about a minute with no API key.
Feedback from r/mcp shaped the last few releases: every cached tool now has to pass a known-answer test (that alone found six real bugs), and every build records the commit it came from and which hosts its install reached.
claude mcp add legwork -- uvx legwork-mcp hub --allow-read ~/Downloads
MIT, macOS and Linux.