The 5 November window keeps morluto/rea at number one: point your coding agent at software you do not own and it reverse engineers how a feature works, from native binaries through Electron apps to websites, with evidence and limits attached to every conclusion. storytold/craft-anything stays second, studying an app or game with real inspection tools before an agent rebuilds your version in the stack you name. The strongest debut is cloudflare/security-audit-skill at three: installed as a skill, it has your coding agent map a codebase’s architecture and trust boundaries, sends isolated hunter agents after the uncovered areas, and hands every candidate to a fresh verifier that tries to disprove it before anything reaches the report.

The middle of the chart is agent tooling. NVIDIA/auto-ontology keeps analytics agents grounded in certified metric definitions, mattpocock/skills still makes your assistant ask pointed questions before it builds, and pingdotgg/t3code drives every coding agent on the machine from one control surface. zortos293/Lichii enters at ten: an experimental open-source Switch and Switch 2 emulator forked from the yuzu line that keeps your existing saves and settings through the rebrand. The DeepSeek Harness pair holds on, ccch1mneyyy/dsh-Go running the engine on Android and Ebony-Vinyl/dsh-our-free-model filling the model picker with free frontier models, while worldonlyu/Google_AI_Pro_2Year_ZeroCost_Auto arrives at seven with a local console that automates the claim flow for stacked Google AI Pro promotional months, a setup that asks for your own card, accounts and a US network route.

If you only open two today: run cloudflare/security-audit-skill against a codebase you thought you already knew, because a verify-before-report loop catches what a single pass either misses or overstates. And if you kept a Switch library and your yuzu-era saves, zortos293/Lichii is the fork that promises those saves survive the rename.