Flash

GitHub Weekly·Apps & Agents·2026-10-18 01:47

GitHub Weekly Vol.1: 8 Projects Worth Your Time

Eight projects worth your time this week: seven tested hands-on, one code-reviewed. Only verified honest takes.

GitHub Weekly Vol.1 cover: light-blue illustration with code brackets, stars and rockets
GitHub Weekly Vol.1

Vol.1: The week skills ate GitHub

The hottest thing on GitHub this week isn't a model — it's a new software form: the Agent Skill. From knowledge graphs to diagram design to photo geolocation, skills are becoming the agent era's app store, alongside hardcore local-model engineering (a 200k-line hand-written C inference engine) and AI coding productivity tools. Eight projects in this issue: seven tested hands-on, one code-reviewed. Only verified honest takes.

At a glance

★ tracked by us daily
#ProjectIn one lineHow★Week
01graphify-labs/graphify
An agent skill turning any folder (code, docs, PDFs, images, audio/video) into a queryable knowledge graph — /graphify . — for 20+ agent tools.
Tested127,596—
02justvugg/colibri
A pure-C local LLM inference engine — 'tiny engine, immense model'. One hand-written C engine per model family; runs hundred-billion-parameter MoE models on plain CPU machines by keeping only the always-active part resident in RAM and paging experts from disk.
Tested42,540—
03alibaba/open-code-review
Alibaba's internal AI code-review CLI, now open source; a Go-based ocr tool that reads git diffs and reviews them with a configurable LLM, producing line-precise comments.
Tested47,541—
04mksglu/context-mode
An MCP server fighting context-window waste for coding agents: sandboxed tools keep raw data out of context, SQLite + FTS5/BM25 provides session continuity across compactions, enforcing a 'LLM writes code to analyze, doesn't read data itself' paradigm across 17 clients.
Tested30,460—
05panniantong/agent-reach
An internet capability layer for AI agents — picks, installs, and health-checks the most reliable access route per platform (X, Reddit, YouTube, Bilibili, Xiaohongshu, GitHub, RSS, 16+ channels).
Tested98,612—
06zhuyansen/new-term-radar
A daily radar for emerging AI terms: watches 7 signals (X accounts, Hugging Face trending, GitHub repo breakouts, AI-tool-site sitemaps…) to catch new model/product/repo names before keyword tools list them. Pure Python stdlib, plus 3 Agent Skills and an MCP server.
Tested1,079—
07cathrynlavery/diagram-design
An agent skill that makes coding agents draw editorial-quality diagrams: ~45 diagram types, each emitted as one self-contained HTML+SVG file, with brand matching by reading your website. Tagline: 'No Mermaid slop.'
Tested56,841—
08Oldcircle/geo-sleuth
An open Agent Skill (SKILL.md + ~20 Python scripts) packaging photo-geolocation methodology into coding agents: hand the agent a photo and one sentence, and it runs scripted evidence-gathering to return coordinates, error radius, camera heading, and an evidence image.
Read3,203—

One by one

All issues
  1. ★ 127,596·Python·read 10-18

    An agent skill turning any folder (code, docs, PDFs, images, audio/video) into a queryable knowledge graph — /graphify . — for 20+ agent tools.

    Why look
    Solid two-pass architecture: tree-sitter parses ~40 languages fully locally (zero LLM/token cost) extracting cross-file calls/imports/inherits; the model is only used for docs and media; every edge is tagged EXTRACTED/INFERRED/AMBIGUOUS. Backed by YC S26's Graphify Labs.
    The catch
    127,608 stars, 1,520 open issues (high), Apache-2.0. The PyPI package is named graphifyy (double y) while the command is graphify — easy to misinstall; it went viral answering a Karpathy post. Semantic extraction needs an LLM API key; code mode is fully offline.
    Best for
    Developers using AI agents on medium/large codebases who burn tokens re-reading files; teams wanting persistent structural memory for agents.

    How we tested

    Python 3.12 venv, pip install graphifyy first try (~1 min). On a 3-file Python corpus, graphify update . produced 12 nodes / 21 edges / 3 communities; graphify query returned correct EXTRACTED call edges; affected/path/explain all correct. Fully offline, ~5 min. Semantic extraction (needs key) not tested.

    Open on GitHub →

  2. ★ 42,540·C·read 10-18

    A pure-C local LLM inference engine — 'tiny engine, immense model'. One hand-written C engine per model family; runs hundred-billion-parameter MoE models on plain CPU machines by keeping only the always-active part resident in RAM and paging experts from disk.

    Why look
    Genuinely hardcore engineering: 13 engines, ~202k lines of hand-written C, CUDA/Vulkan/Metal/XDNA backends, quantization kernels and unit tests. A 744B-param GLM-5.2 (int4) reportedly runs with 9.9 GB resident RAM.
    The catch
    make gliner_decide compiled clean on first try (~7s, 481KB binary); --help prints valid usage. Caveat: real inference needs 22GB+ model weights — not verified here. 130 open issues.
    Best for
    Developers wanting local large-model inference, and anyone studying MoE inference or CPU quantization.

    How we tested

    Linux VM, gcc. After cloning, cd c && make gliner_decide succeeded in ~7s; ran ./gliner_decide --help to verify the binary. ~15 min total including clone. Full inference needs 22GB+ weight download — skipped, engine only.

    Open on GitHub →

  3. ★ 47,541·Go·read 10-18

    Alibaba's internal AI code-review CLI, now open source; a Go-based ocr tool that reads git diffs and reviews them with a configurable LLM, producing line-precise comments.

    Why look
    Deterministic-engineering × agent hybrid: file selection, rule matching and comment positioning are hard-coded guarantees, the LLM only handles judgment calls. Ships AACR-Bench (50 repos / 200 real PRs / 10 languages / 1,505 issues annotated by 80+ senior engineers).
    The catch
    Precision numbers come from their own benchmark; one independent run hit 12% precision on 10 PRs (maintainer called it a tool-call anomaly, no independent re-validation). Recall is deliberately lower by design. ocr review/scan need your own LLM API key — only LLM-free paths verified here. 317 open issues, Apache-2.0.
    Best for
    Engineering teams wanting AI review in CI who are fed up with false positives from general-purpose agents; developers interested in deterministic-LLM architectures.

    How we tested

    Linux x86_64, node v24 (no Go toolchain, no source build). Installed per README via npm i -g @alibaba-group/open-code-review (~27s, v1.13.1). ocr --version / ocr --help OK; created a scratch git repo with one diffed file and ran ocr delegate preview — returned the review file spec in ~1.5s with no LLM configured.

    Open on GitHub →

  4. ★ 30,460·TypeScript·read 10-18

    An MCP server fighting context-window waste for coding agents: sandboxed tools keep raw data out of context, SQLite + FTS5/BM25 provides session continuity across compactions, enforcing a 'LLM writes code to analyze, doesn't read data itself' paradigm across 17 clients.

    Why look
    HN #1 (570+ points), 30,461 stars, published npm package. Real substance: a 4,742-test vitest suite, benchmark docs, hooks bundle, adapters for 17 clients — not a marketing shell.
    The catch
    4,696/4,742 tests passed (44 skipped); the 2–3 failures are container-as-root environment artifacts, not product bugs. Note: GitHub API reports license NOASSERTION while README claims ELv2 — verify before commercial use. 356 open issues.
    Best for
    Developers using coding agents (Claude Code, Cursor, Codex) who hit context-window exhaustion or compaction amnesia.

    How we tested

    Linux VM, node v24. npm install hit an npm edgesOut bug → used the repo's bun install (161 pkgs, 28s, incl. better-sqlite3 native build). Full vitest run: 4,742 tests in ~4 min. node cli.bundle.mjs --help printed the full CLI. ~25 min total.

    Open on GitHub →

  5. ★ 98,612·Python·read 10-18

    An internet capability layer for AI agents — picks, installs, and health-checks the most reliable access route per platform (X, Reddit, YouTube, Bilibili, Xiaohongshu, GitHub, RSS, 16+ channels).

    Why look
    Real engineering — channels do live probing (actually running yt-dlp --version to tell 'not installed' from 'installed but broken'), the doctor isolates per-channel failures and scrubs credentials. 98,622 stars with broad third-party coverage; Chinese-authored.
    The catch
    Marketing-heavy README (4-sponsor table, WeChat business section); the repo warns the same-named PyPI package is an impostor — don't install the wrong one. 223 open issues.
    Best for
    Developers giving shell-capable AI agents internet access for research and monitoring without hand-wiring each platform.

    How we tested

    Ubuntu VM, Python 3.12.3. Used the repo's own test.sh (isolated venv): installed deps, ran agent-reach install --dry-run, then agent-reach doctor (16 channels detected), then the full pytest suite — 607 passed in 35.76s, exit 0. ~4 min total, first try.

    Open on GitHub →

  6. ★ 1,079·Python·read 10-18

    A daily radar for emerging AI terms: watches 7 signals (X accounts, Hugging Face trending, GitHub repo breakouts, AI-tool-site sitemaps…) to catch new model/product/repo names before keyword tools list them. Pure Python stdlib, plus 3 Agent Skills and an MCP server.

    Why look
    Well-designed signal chain: a new name surfaces on X/HF → GitHub breakout → directory pages → own search impressions → Google Trends; keyword tools only read step 5, this reads steps 1–4 daily. The README documents real-run costs (~$15/month full) and limitations honestly.
    The catch
    Full power needs an AIsa API key (pay-per-call; the README link is a referral link); the X signal is only as good as your configured account list. Created 2026-10-12, 1,079 stars, 422 forks, only 2 open issues, MIT.
    Best for
    People doing SEO for AI-tool sites, newsletters, AI directories; developers wanting cheap monitoring of new GitHub/HF activity.

    How we tested

    Python 3.12.3 venv, pytest + markdown installed (radar itself is stdlib-only). pytest -q tests → 94 passed, 1 skipped in 2.83s. Real dry run: python -m radar sources read HF trending; python -m radar daily pulled 200 new repos via GitHub Search API and produced a Chinese breakout report in ~16s, $0.000 AIsa spend.

    Open on GitHub →

  7. ★ 56,841·HTML·read 10-18

    An agent skill that makes coding agents draw editorial-quality diagrams: ~45 diagram types, each emitted as one self-contained HTML+SVG file, with brand matching by reading your website. Tagline: 'No Mermaid slop.'

    Why look
    Solves a real pain. Beyond prompts, it ships 'geometric contract' checkers (verify-*.py) that catch arithmetically wrong charts that still render fine — rare hardcore engineering for a skill repo. 56,851 stars, half of Mermaid's count in six months.
    The catch
    First sequential run of all 41 test scripts failed 35; after re-cloning, all 6 spot-checked scripts passed individually — likely test cross-contamination or the ephemeral /tmp env; CI badge is green. Output is static HTML with no editable source — not for diagrams living in git (the author concedes Mermaid wins there). 43 open issues, MIT.
    Best for
    Anyone needing good-looking architecture diagrams for docs/blogs/decks; anyone studying how to write a high-quality agent skill.

    How we tested

    Python 3.12.3. Ran test scripts directly after shallow clone — test-self-check (8 cases pass, ~2s), test-verify-waterfall (3 shipped examples pass + all 21 mutations caught + 9 decimal controls, ~16s), plus test-verify-geometry, test-plugin-package, test-lint-a11y, test-maintainer-policy — all pass individually. ~10 min total.

    Open on GitHub →

  8. ★ 3,203·Python·read 10-18

    An open Agent Skill (SKILL.md + ~20 Python scripts) packaging photo-geolocation methodology into coding agents: hand the agent a photo and one sentence, and it runs scripted evidence-gathering to return coordinates, error radius, camera heading, and an evidence image.

    Why look
    Genuinely hardcore: 'scripts rank, the model judges' — pier spacing as a distance ruler, shadows as bearings, ridge lines fingerprinted against elevation data. Three fully documented blind-test cases with per-step candidate counts and reproduction checkpoints; cited by OSINT guides.
    The catch
    End-to-end run needs photos + a browser + ~2.4 GB model downloads — not verifiable in 10 minutes; offline checks passed (driving-side lookup, solar position). Accuracy figures are small-sample self-tests; no public blind-test set yet. Dual-use privacy concern acknowledged by the author — don't run it on other people's photos. Created 2026-09-18, 3,200 stars, 424 forks, 13 open issues, MIT.
    Best for
    OSINT researchers, imagery verifiers, agent-skill builders, and anyone interested in geo-reasoning methodology.

    Read

    Read only: not installed or run — we read the code and docs

    Open on GitHub →

Why it matters

agent skills are becoming the agent era's app store — this issue only includes verified honest takes.
Useful Tap if this story helped you

From HIMIAO Horizon · himiao.ai

Comments

  1. Loading comments…

Related

  1. Oct 15iFixAi Hits GitHub Trending: "Is This AI Agent Doing Its Job?" Answered in 120 Seconds
  2. Oct 15HKUST(GZ)'s Open-Source Supervisor-Skills Tops GitHub Daily Trending: Distilling a Decade of PhD Supervision into AI Skills
  3. Oct 13VoiceStudio Tops GitHub Trending: A Fully Local Open-Source Voice Studio
  4. Oct 13Vercel's Open-Source Skills Tops GitHub Trending: One Command to Equip AI Coding Assistants
  5. Oct 13REA Review: Letting Agents Reverse-Engineer Anything, 100K Stars in a Week

Today

Oct 18 Sunday

Latest news

All →
  1. Oct 18Commerce Ministry Notice No. 48: 23 AI Technologies Proposed for Export Control List, Registration Required Before Export
  2. Oct 18Anthropic: Claude Mythos 5 Autonomously Designs Quantum Circuits, One Design's Gate Count Cut to 1/17
  3. Oct 18GitHub Copilot to Remove Three Flagship Models on November 16: Claude Opus 4.8/5 and GPT-5.6 Terra Retired
  4. Oct 18DeepSeek V4.1-Flash-1017 Released: Weights Reportedly Open Under MIT License, In-House Search API Launches
  5. Oct 17Microsoft's MAI-Base-2 Completes Pre-Training: 2T-Parameter All-MoE Architecture, Trained 38 Days on 16,000 GB200s
  6. Oct 17Meta Updates Commercial Terms: From October 30 It May Scrape Business Customers' Websites to Train AI, With No Opt-Out
Ask the cat