Palantir-style world map. Open source. OSIRIS is a free dashboard that puts a dozen public data feeds on one map: → Live flights and ships → Satellites and undersea cables → Earthquakes, wildfires and cyber-threat feeds → 6,000+ public traffic and open-webcam cameras → Optional AI analyst and 20 recon tools Caveats: data quality varies by source, some feeds go stale, and camera coverage differs by country. The README says it's for research and education. MIT licensed. Run it yourself. github.com/carbon-evolution/…

A GitHub repo maps 300+ AI agent projects across 36 categories and saves developers from spending weekends building memory, browsers and agent loops that five open source projects already did better, covering DSPy for code-based prompting, Serena for meaning-based code editing, Stagehand for web interaction, Steel Browser for sandboxed browsing, Cognee for persistent memory and Opik for agent tracing. → DSPy from Stanford lets you write agents as code instead of prompts → Screenpipe records your computer activity so agents have real context → Google’s ADK for building and testing full agent teams with evaluation built in → Free, MIT licensed, available as JSON and YAML to plug into your own tools Repo: github.com/slavakurilyak/awe…

The same Opus 5.5 prompt run 20 days apart produced noticeably different results, raising questions about whether the model has been quietly downgraded between runs.

GM CT ☀️ HOW IS YOUR WEEK GOING SO FAR? ☕

AI shopping agents just got a front door at Walmart. While Amazon blocks agents, Walmart announced an MCP server called Agent Gateway: → Approved agents can search Walmart and Sam's Club inventory and buy for you → You don't have to share personal info or purchase history with the agent → Next month: a separate profile per agent in your account → Require approval per purchase, or pre-approve up to a spending limit The rules: agents can't see payment details, can't act beyond what you asked, and get blocked if they break the terms. Walmart's returns policy still applies if an agent gets it wrong. It already works with Meta's Muse, ChatGPT and Gemini. techcrunch.com/2026/10/21/wh…

Someone built a live 3D airport viewer for pilot students using Claude Code. → It shows real flights at Delhi airport, with Mumbai, Bengaluru and Hyderabad also live → You can follow any aircraft or sit in the cockpit → He says he has no CS background and describes changes to Claude in plain English → The site is free with no sign-up; flight data sources are listed as licensed, self-hosted and public Site: airport.readyaviator.com Reddit: reddit.com/r/ClaudeAI/commen…

Which AI models can your computer actually run? One command tells you. llmfit checks your CPU, RAM, GPU and memory, then ranks hundreds of open-source models by how well they'll run on your machine. 38.2K stars. → scores every model for fit, speed, quality and context length → estimates tokens per second before you download anything → works with Ollama, llama.cpp, MLX, LM Studio and Docker Model Runner → benchmark a model to get real numbers from your own machine → Mac, Windows and Linux Install: brew install llmfit (Windows: winget install --exact --id AlexsJones.llmfit) Then run: llmfit No more downloading a 20 GB model just to find out it doesn't fit. MIT. github.com/AlexsJones/llmfit

Before you install that AI skill someone shared on X, scan it. In an analysis of 31,132 AI agent skills, 26.1% contained vulnerabilities and 5.2% looked malicious. NVIDIA open-sourced SkillSpector, the scanner it uses before publishing skills to its own catalog. 20.8K stars. → checks 71 attack patterns across 17 categories: prompt injection, data theft, privilege escalation, poisoned MCP tools and more → scans a GitHub repo, a URL, a zip or a folder → gives each skill a 0 to 100 risk score with a clear recommendation → fast scan with no AI, plus an optional deeper AI review → works for Claude Code, Codex and Gemini CLI skills Install: uv tool install git+github.com/NVIDIA/skillspect… Scan a skill: skillspector scan ./the-skill/ --no-llm Apache-2.0.

Want your AI to build a page that looks like Stripe, Apple or Linear? Give it their DESIGN.md. awesome-design-md has ready-made design files for 83 brands. Each one captures the colors, type, spacing and layout rules of a real website. 122K stars. → Apple, Stripe, Linear, Notion, Vercel, Airbnb, Spotify → Tesla, Ferrari, Nike, SpaceX, PlayStation → Coinbase, Binance, Kraken, Revolut, Wise → Claude, Mistral, ElevenLabs, Cursor, Raycast How to use it: 1. Pick a brand at getdesign.md 2. Drop its DESIGN.md into your project folder 3. Tell your coding agent: "build me a page that looks like this" DESIGN.md is the plain-text design format introduced by Google Stitch, and it works with any AI coding agent. Use it for the look and feel. Don't copy anyone's logo or brand name. MIT. github.com/VoltAgent/awesome…

If your website runs on PHP (WordPress, Laravel, most shared hosting), check it today. Two critical PHP flaws, called PHP2Shell, let attackers take over a web server without logging in. They were found by researchers at Calif, Wiz and OpenAI, and Cloudflare says it's already seeing early attacks. OpenAI released a free checker that tells you if your site is exposed: git clone github.com/openai/php2shell-… cd php2shell-checker node phpcheck.js "yoursite.com" Or check the PHP on your own server: node phpcheck.js --local You get OK, VULNERABLE or UNKNOWN. UNKNOWN does not mean you're safe. It means your server hides its PHP version. The fix is to update PHP: 8.5.12, 8.4.27, 8.3.36 or 8.2.35. PHP 8.1 and older no longer get official patches. Over 5 million PHP servers are exposed online right now.

Shinhan Card and SBI are exploring yen stablecoin payments for Japanese visitors in South Korea. It's early stage, with no stablecoin named and no timeline, according to CoinDesk.

stalemap is an open-source tool that tells coding agents which dependencies changed after their training cutoff. → It compares your pinned versions with those from before the model's cutoff, for JS and TS projects → It writes notes into AGENTS.md or CLAUDE.md and adds an MCP search tool → It checks edits with the project's type-check and flags stale API use → In the author's own test, 89% of sessions passed with it versus 68% without Repo: github.com/Umair/stalemap

SAVE THIS: vibe-coded an app? Run these 3 free scans before you push it. 1. TruffleHog (28.6K stars) Finds leaked API keys, passwords and tokens. It knows 800+ secret types, from AWS and Stripe keys to database passwords, and can show only the keys that still work. brew install trufflehog trufflehog git file://./your-app --results=verified 2. Gitleaks (30.2K stars) Scans every commit in your history, so it catches the key you "deleted" three commits ago that's still sitting in git. brew install gitleaks gitleaks git -v 3. OSV-Scanner by Google (11.2K stars) Checks every package your app depends on against Google's vulnerability database, and can tell you whether the vulnerable code is actually used. brew install osv-scanner osv-scanner scan source -r . Two minutes, three commands, and you'll know what you're about to ship.

Claude Opus 5.5 built a live fleet dashboard tracking 26 loads, 5 stops, 5 trucks and every axle check after every drop, giving visibility into the inside of a truck most people never see before it leaves.

Claude Opus 5.5 built a live fleet dashboard tracking 26 loads, 5 stops, 5 trucks and every axle check after every drop, giving visibility into the inside of a truck most people never see before it leaves.

Grok Bot can find a niche, build a directory site on its own computer, ship one useful page every night, negotiate affiliate deals by email in your name and send money reports to Telegram, with the whole setup costing nothing on top of the subscription and the laptop staying shut. → Bot reads X and Reddit complaints in real time to find niches people search every day → Publishes on a routine with no manual input → Month one is traffic, month three is the first $217, it never stops after that → Every page is a tiny employee that works forever and compounds like rent

Local LLMs on a Mac, wired straight into your coding tools. Kapitsa is a new open-source inference engine for Apple Silicon: → OpenAI- and Anthropic-compatible APIs on localhost → Qwen and Nemotron models, some with image input → Launchers: kapitsa claude, codex, opencode, pi → Install with Homebrew Caveats: the speed tables in the README are the project's own measurements, not independent benchmarks. Big models need serious RAM (up to 128GB for the largest). Apache-2.0, M1 or newer. github.com/nace-ai/kapitsa

Reason Network is an open-source engine for coding agents to talk to each other across a team. → One small daemon runs per computer and lists teammates' agent sessions → Agents exchange messages, files and approval requests through MCP tools → Traffic is end-to-end encrypted and peer to peer, with a relay as fallback → Supports Claude Code, Codex, Cursor, Gemini CLI and others Repo: github.com/reason-machines/r…

Grok Bot >>>>>

Claude just launched Duet, a proactive agent app. > It comes to you with what needs attention > Completes tasks you ask for > Keeps working when you step away