GitHub 2026-03-06 Monthly Trending Projects

Shannon is a white‑box autonomous AI pentester that, from source‑aware analysis, constructs and executes real exploit PoCs and produces reproducible reports—enabling security and development teams to move pentesting from a yearly event to a continuous process.

RuView: edge WiFi CSI pose/vital sensing on ESP32; fits rescue and research use, but requires CSI hardware and has unclear license/community.

Claude‑skills supplies 66 specialized skills and 9 workflows for Claude‑based conversational programming, emphasizing context engineering and progressive disclosure—ideal for full‑stack teams using Claude as an expert pair programmer; however, there are no formal releases and contributor activity is low, so evaluate maintenance and compatibility risks before adoption.

OpenClaw is a local-first personal AI assistant that runs on your devices, offering multi-channel access, voice wake and a live Canvas — suited for privacy-focused users and developers seeking deep integrations.

Pi is a developer-focused monorepo toolkit offering a unified multi-provider LLM API, agent runtime, coding agent CLI, terminal and web UI components, and tools to manage vLLM GPU pods—suited for teams with TypeScript/Node skills building and deploying custom AI agents.

Hugging Face Skills delivers reusable skill bundles standardized via SKILL.md, compatible with multiple coding agents and shipped with manifests and examples—useful for delegating Hub operations and training/evaluation workflows to agents—while license clarity and community activity require verification.

Heretic pairs directional ablation with TPE-based automatic tuning to offer a one‑click, low‑damage decensorship tool for GPU-equipped researchers and engineers—useful for probing model semantics and generative boundaries, but requiring careful legal and misuse risk assessment.

OpenViking abstracts agent context as a manageable 'filesystem', offering tiered loading, directory-recursive retrieval and visualization to reduce retrieval cost and improve observability—suitable for AI agent systems requiring long-term memory and complex context management.

Extensible super-agent runtime with skills, sandbox execution and memory.

Provides a discoverable, installable catalog of agent skills for Codex to help teams package and reuse task capabilities; the repository currently lacks license information and active maintenance, so it is best evaluated and customized within controlled environments.

Superpowers provides a composable skills library and TDD-enforced agent workflow for Claude Code, enabling end-to-end automation from design and planning to subagent execution, with plugin integration and extensibility.

AIRI is a hybrid Web/local self-hosted virtual character platform focused on real-time voice, game interaction, and multi-platform deployment—suited for developers and creators seeking controllable, customizable virtual streamers and digital companions.

A general-purpose sandbox platform for AI applications offering multi-language SDKs, unified APIs and Docker/Kubernetes runtimes to run agents, code execution and training workloads in isolated environments for debugging and evaluation.

gogcli is a script- and terminal-focused CLI for Google services (Gmail/Calendar/Drive etc.), offering JSON-first output and multi-account management for automation use cases; however, missing license and maintenance data warrant cautious evaluation before production use.

QMD is a privacy-oriented on-device document retrieval tool that combines BM25 full-text, vector semantic search and LLM reranking — suited for individuals or teams needing offline, controllable search with structured outputs for agent workflows.

SpacetimeDB lets you deploy application logic as Rust modules inside an in-memory-first relational database, targeting real-time multiplayer games and collaboration to achieve ultra-low latency and simplified single-binary operations.