GitHub Weekly Vol.1: 8 Projects Worth Your Time
Eight projects worth your time this week: seven tested hands-on, one code-reviewed. Only verified honest takes.

Vol.1: The week skills ate GitHub
The hottest thing on GitHub this week isn't a model — it's a new software form: the Agent Skill. From knowledge graphs to diagram design to photo geolocation, skills are becoming the agent era's app store, alongside hardcore local-model engineering (a 200k-line hand-written C inference engine) and AI coding productivity tools. Eight projects in this issue: seven tested hands-on, one code-reviewed. Only verified honest takes.
At a glance
★ tracked by us daily| # | Project | In one line | How | ★ | Week |
|---|---|---|---|---|---|
| 01 | graphify-labs/graphify | An agent skill turning any folder (code, docs, PDFs, images, audio/video) into a queryable knowledge graph — /graphify . — for 20+ agent tools. | Tested | 127,596 | — |
| 02 | justvugg/colibri | A pure-C local LLM inference engine — 'tiny engine, immense model'. One hand-written C engine per model family; runs hundred-billion-parameter MoE models on plain CPU machines by keeping only the always-active part resident in RAM and paging experts from disk. | Tested | 42,540 | — |
| 03 | alibaba/open-code-review | Alibaba's internal AI code-review CLI, now open source; a Go-based ocr tool that reads git diffs and reviews them with a configurable LLM, producing line-precise comments. | Tested | 47,541 | — |
| 04 | mksglu/context-mode | An MCP server fighting context-window waste for coding agents: sandboxed tools keep raw data out of context, SQLite + FTS5/BM25 provides session continuity across compactions, enforcing a 'LLM writes code to analyze, doesn't read data itself' paradigm across 17 clients. | Tested | 30,460 | — |
| 05 | panniantong/agent-reach | An internet capability layer for AI agents — picks, installs, and health-checks the most reliable access route per platform (X, Reddit, YouTube, Bilibili, Xiaohongshu, GitHub, RSS, 16+ channels). | Tested | 98,612 | — |
| 06 | zhuyansen/new-term-radar | A daily radar for emerging AI terms: watches 7 signals (X accounts, Hugging Face trending, GitHub repo breakouts, AI-tool-site sitemaps…) to catch new model/product/repo names before keyword tools list them. Pure Python stdlib, plus 3 Agent Skills and an MCP server. | Tested | 1,079 | — |
| 07 | cathrynlavery/diagram-design | An agent skill that makes coding agents draw editorial-quality diagrams: ~45 diagram types, each emitted as one self-contained HTML+SVG file, with brand matching by reading your website. Tagline: 'No Mermaid slop.' | Tested | 56,841 | — |
| 08 | Oldcircle/geo-sleuth | An open Agent Skill (SKILL.md + ~20 Python scripts) packaging photo-geolocation methodology into coding agents: hand the agent a photo and one sentence, and it runs scripted evidence-gathering to return coordinates, error radius, camera heading, and an evidence image. | Read | 3,203 | — |
One by one
All issues-
An agent skill turning any folder (code, docs, PDFs, images, audio/video) into a queryable knowledge graph —
/graphify .— for 20+ agent tools.- Why look
- Solid two-pass architecture: tree-sitter parses ~40 languages fully locally (zero LLM/token cost) extracting cross-file calls/imports/inherits; the model is only used for docs and media; every edge is tagged EXTRACTED/INFERRED/AMBIGUOUS. Backed by YC S26's Graphify Labs.
- The catch
- 127,608 stars, 1,520 open issues (high), Apache-2.0. The PyPI package is named
graphifyy(double y) while the command isgraphify— easy to misinstall; it went viral answering a Karpathy post. Semantic extraction needs an LLM API key; code mode is fully offline. - Best for
- Developers using AI agents on medium/large codebases who burn tokens re-reading files; teams wanting persistent structural memory for agents.
How we tested
Python 3.12 venv,
pip install graphifyyfirst try (~1 min). On a 3-file Python corpus,graphify update .produced 12 nodes / 21 edges / 3 communities;graphify queryreturned correct EXTRACTED call edges; affected/path/explain all correct. Fully offline, ~5 min. Semantic extraction (needs key) not tested. -
A pure-C local LLM inference engine — 'tiny engine, immense model'. One hand-written C engine per model family; runs hundred-billion-parameter MoE models on plain CPU machines by keeping only the always-active part resident in RAM and paging experts from disk.
- Why look
- Genuinely hardcore engineering: 13 engines, ~202k lines of hand-written C, CUDA/Vulkan/Metal/XDNA backends, quantization kernels and unit tests. A 744B-param GLM-5.2 (int4) reportedly runs with 9.9 GB resident RAM.
- The catch
make gliner_decidecompiled clean on first try (~7s, 481KB binary);--helpprints valid usage. Caveat: real inference needs 22GB+ model weights — not verified here. 130 open issues.- Best for
- Developers wanting local large-model inference, and anyone studying MoE inference or CPU quantization.
How we tested
Linux VM, gcc. After cloning,
cd c && make gliner_decidesucceeded in ~7s; ran./gliner_decide --helpto verify the binary. ~15 min total including clone. Full inference needs 22GB+ weight download — skipped, engine only. -
Alibaba's internal AI code-review CLI, now open source; a Go-based
ocrtool that reads git diffs and reviews them with a configurable LLM, producing line-precise comments.- Why look
- Deterministic-engineering × agent hybrid: file selection, rule matching and comment positioning are hard-coded guarantees, the LLM only handles judgment calls. Ships AACR-Bench (50 repos / 200 real PRs / 10 languages / 1,505 issues annotated by 80+ senior engineers).
- The catch
- Precision numbers come from their own benchmark; one independent run hit 12% precision on 10 PRs (maintainer called it a tool-call anomaly, no independent re-validation). Recall is deliberately lower by design.
ocr review/scanneed your own LLM API key — only LLM-free paths verified here. 317 open issues, Apache-2.0. - Best for
- Engineering teams wanting AI review in CI who are fed up with false positives from general-purpose agents; developers interested in deterministic-LLM architectures.
How we tested
Linux x86_64, node v24 (no Go toolchain, no source build). Installed per README via
npm i -g @alibaba-group/open-code-review(~27s, v1.13.1).ocr --version/ocr --helpOK; created a scratch git repo with one diffed file and ranocr delegate preview— returned the review file spec in ~1.5s with no LLM configured. -
An MCP server fighting context-window waste for coding agents: sandboxed tools keep raw data out of context, SQLite + FTS5/BM25 provides session continuity across compactions, enforcing a 'LLM writes code to analyze, doesn't read data itself' paradigm across 17 clients.
- Why look
- HN #1 (570+ points), 30,461 stars, published npm package. Real substance: a 4,742-test vitest suite, benchmark docs, hooks bundle, adapters for 17 clients — not a marketing shell.
- The catch
- 4,696/4,742 tests passed (44 skipped); the 2–3 failures are container-as-root environment artifacts, not product bugs. Note: GitHub API reports license NOASSERTION while README claims ELv2 — verify before commercial use. 356 open issues.
- Best for
- Developers using coding agents (Claude Code, Cursor, Codex) who hit context-window exhaustion or compaction amnesia.
How we tested
Linux VM, node v24.
npm installhit an npm edgesOut bug → used the repo'sbun install(161 pkgs, 28s, incl. better-sqlite3 native build). Full vitest run: 4,742 tests in ~4 min.node cli.bundle.mjs --helpprinted the full CLI. ~25 min total. -
An internet capability layer for AI agents — picks, installs, and health-checks the most reliable access route per platform (X, Reddit, YouTube, Bilibili, Xiaohongshu, GitHub, RSS, 16+ channels).
- Why look
- Real engineering — channels do live probing (actually running
yt-dlp --versionto tell 'not installed' from 'installed but broken'), the doctor isolates per-channel failures and scrubs credentials. 98,622 stars with broad third-party coverage; Chinese-authored. - The catch
- Marketing-heavy README (4-sponsor table, WeChat business section); the repo warns the same-named PyPI package is an impostor — don't install the wrong one. 223 open issues.
- Best for
- Developers giving shell-capable AI agents internet access for research and monitoring without hand-wiring each platform.
How we tested
Ubuntu VM, Python 3.12.3. Used the repo's own
test.sh(isolated venv): installed deps, ranagent-reach install --dry-run, thenagent-reach doctor(16 channels detected), then the full pytest suite — 607 passed in 35.76s, exit 0. ~4 min total, first try. -
A daily radar for emerging AI terms: watches 7 signals (X accounts, Hugging Face trending, GitHub repo breakouts, AI-tool-site sitemaps…) to catch new model/product/repo names before keyword tools list them. Pure Python stdlib, plus 3 Agent Skills and an MCP server.
- Why look
- Well-designed signal chain: a new name surfaces on X/HF → GitHub breakout → directory pages → own search impressions → Google Trends; keyword tools only read step 5, this reads steps 1–4 daily. The README documents real-run costs (~$15/month full) and limitations honestly.
- The catch
- Full power needs an AIsa API key (pay-per-call; the README link is a referral link); the X signal is only as good as your configured account list. Created 2026-10-12, 1,079 stars, 422 forks, only 2 open issues, MIT.
- Best for
- People doing SEO for AI-tool sites, newsletters, AI directories; developers wanting cheap monitoring of new GitHub/HF activity.
How we tested
Python 3.12.3 venv, pytest + markdown installed (radar itself is stdlib-only).
pytest -q tests→ 94 passed, 1 skipped in 2.83s. Real dry run:python -m radar sourcesread HF trending;python -m radar dailypulled 200 new repos via GitHub Search API and produced a Chinese breakout report in ~16s, $0.000 AIsa spend. -
An agent skill that makes coding agents draw editorial-quality diagrams: ~45 diagram types, each emitted as one self-contained HTML+SVG file, with brand matching by reading your website. Tagline: 'No Mermaid slop.'
- Why look
- Solves a real pain. Beyond prompts, it ships 'geometric contract' checkers (verify-*.py) that catch arithmetically wrong charts that still render fine — rare hardcore engineering for a skill repo. 56,851 stars, half of Mermaid's count in six months.
- The catch
- First sequential run of all 41 test scripts failed 35; after re-cloning, all 6 spot-checked scripts passed individually — likely test cross-contamination or the ephemeral /tmp env; CI badge is green. Output is static HTML with no editable source — not for diagrams living in git (the author concedes Mermaid wins there). 43 open issues, MIT.
- Best for
- Anyone needing good-looking architecture diagrams for docs/blogs/decks; anyone studying how to write a high-quality agent skill.
How we tested
Python 3.12.3. Ran test scripts directly after shallow clone — test-self-check (8 cases pass, ~2s), test-verify-waterfall (3 shipped examples pass + all 21 mutations caught + 9 decimal controls, ~16s), plus test-verify-geometry, test-plugin-package, test-lint-a11y, test-maintainer-policy — all pass individually. ~10 min total.
-
An open Agent Skill (SKILL.md + ~20 Python scripts) packaging photo-geolocation methodology into coding agents: hand the agent a photo and one sentence, and it runs scripted evidence-gathering to return coordinates, error radius, camera heading, and an evidence image.
- Why look
- Genuinely hardcore: 'scripts rank, the model judges' — pier spacing as a distance ruler, shadows as bearings, ridge lines fingerprinted against elevation data. Three fully documented blind-test cases with per-step candidate counts and reproduction checkpoints; cited by OSINT guides.
- The catch
- End-to-end run needs photos + a browser + ~2.4 GB model downloads — not verifiable in 10 minutes; offline checks passed (driving-side lookup, solar position). Accuracy figures are small-sample self-tests; no public blind-test set yet. Dual-use privacy concern acknowledged by the author — don't run it on other people's photos. Created 2026-09-18, 3,200 stars, 424 forks, 13 open issues, MIT.
- Best for
- OSINT researchers, imagery verifiers, agent-skill builders, and anyone interested in geo-reasoning methodology.
Read
Read only: not installed or run — we read the code and docs
Why it matters
agent skills are becoming the agent era's app store — this issue only includes verified honest takes.
Comments
Related
- Oct 15iFixAi Hits GitHub Trending: "Is This AI Agent Doing Its Job?" Answered in 120 Seconds
- Oct 15HKUST(GZ)'s Open-Source Supervisor-Skills Tops GitHub Daily Trending: Distilling a Decade of PhD Supervision into AI Skills
- Oct 13VoiceStudio Tops GitHub Trending: A Fully Local Open-Source Voice Studio
- Oct 13Vercel's Open-Source Skills Tops GitHub Trending: One Command to Equip AI Coding Assistants
- Oct 13REA Review: Letting Agents Reverse-Engineer Anything, 100K Stars in a Week
Today
Oct 18 Sunday- Brief
- GitHubGitHub Weekly Vol.1: 8 Projects Worth Your Time
Tested or read — weeklyAll →
- Quiz
- Call
Latest news
All →- Oct 18Commerce Ministry Notice No. 48: 23 AI Technologies Proposed for Export Control List, Registration Required Before Export
- Oct 18Anthropic: Claude Mythos 5 Autonomously Designs Quantum Circuits, One Design's Gate Count Cut to 1/17
- Oct 18GitHub Copilot to Remove Three Flagship Models on November 16: Claude Opus 4.8/5 and GPT-5.6 Terra Retired
- Oct 18DeepSeek V4.1-Flash-1017 Released: Weights Reportedly Open Under MIT License, In-House Search API Launches
- Oct 17Microsoft's MAI-Base-2 Completes Pre-Training: 2T-Parameter All-MoE Architecture, Trained 38 Days on 16,000 GB200s
- Oct 17Meta Updates Commercial Terms: From October 30 It May Scrape Business Customers' Websites to Train AI, With No Opt-Out
™