Cybersecurity Workflow Tools
AI-augmented tools for threat intelligence, product risk assessment, and incident response analysis.
ai-ir
PythonAI-powered incident response — analyzes Slack IR exports to generate summaries, activity reports, and reusable tactics
ai-ir2
PythonNext-gen IR analysis — one-stop Gemini pipeline producing Markdown, self-contained HTML, and knowledge documents
ioc-collector
PythonResearch security incidents from URLs or CVE IDs — extracts IoCs into Markdown and STIX 2.1 bundles
ir-timeline
GoIR timeline recorder — single-binary, browser-based tool for tracking events with text, images, and time deltas
ir-tracker
PythonLive IR tracker — continuous ingestion, segmented analysis, and timeline visualization via Gemini
mail-triage
PythonGCS-based email triage — classifies eml/msg files with Gemini LLM and posts results to Slack
news-collector
PythonNews collection agent — collects, tags, summarizes, translates, and delivers curated news digests
product-research
PythonResearch products and services — outputs ToS, privacy, and data security analysis as structured reports
Email Analysis
Suspicious email analysis with rule-based indicators and LLM content analysis.
mail-analyzer
GoSuspicious email analyzer — rule-based indicators + Gemini LLM content analysis for .eml/.msg files
mail-analyzer-gui
RustmacOS desktop GUI — drag & drop email analysis via Tauri
mail-analyzer-local
GoLocal LLM version — email analysis via OpenAI-compatible API (LM Studio, Ollama)
LLM Tools & Libraries
Small, local-first CLI tools for LLM interaction, retrieval, classification, and governance.
llm-cli
GoCLI client for local LLMs (LM Studio, Ollama) — streaming, batch, multi-image VLM, structured output
lite-llm Archived
GoSuperseded by llm-cli — CLI client for OpenAI-compatible LLM APIs
lite-rag
GoRAG CLI for Markdown docs using DuckDB — index and query local knowledge bases
lite-switch
GoNatural language classifier for shell pipelines — routes stdin text to a matching tag via LLM
gem-cli
GoGemini CLI client — multimodal prompts, streaming, grounding, structured output via Vertex AI
gem-rag
PythonGemini-powered RAG CLI for Markdown documents — Vertex AI embeddings and DuckDB
mcp-guardian
GoMCP governance proxy — transparent auditing, OAuth2 auto-discovery, and tool masking
cclaude
BashContainerized Claude Code — run Claude Code in an isolated container with project isolation
nlk
GoLLM utility toolkit — guard, jsonfix, strip, backoff, validate. Zero external dependencies
nlk-py
PythonPython edition of nlk — same 5 modules, same API design. Zero external dependencies
gem-search
GoAgentic web search via Vertex AI Gemini — Google Search Grounding, Markdown/JSON output, pipe-friendly
gem-image
GoImage generation and editing CLI — Vertex AI Gemini 2.5 Flash, pipe-friendly
gem-query
GoNatural language data analysis CLI — interactive SQL generation for DuckDB/SQLite via Vertex AI Gemini
data-analyzer
GoLarge-scale JSON/JSONL data analysis — sliding window + progressive summarization with local LLMs
quick-translate
SwiftmacOS menu-bar translation tool — powered by local LLM, always-on-top overlay
ChatOps & Slack
Pipe-friendly Slack tools for ChatOps automation and monitoring.
scli
GoTerminal Slack client — channels, messages, DMs, search
swrite
GoBot-oriented Slack poster — text, Block Kit, attachments, and files from shell pipelines
scat
GoGeneral-purpose content poster — send text, files, and Block Kit messages to Slack
stail
GoRead-only Slack CLI — stream channel messages in real time or export history to JSON
md-to-slack
GoMarkdown to Slack Block Kit JSON filter — pipe into scat to post formatted messages
slack-router
GoSlash Command daemon — routes commands to local shell scripts via Socket Mode
Service CLI Clients
Pipe-friendly, Unix-composable CLI clients for external services.
Data Processing Utilities
Pipe-friendly tools for data transformation, parsing, and visualization.
json-filter
GoExtract, validate, prettify, and repair JSON from arbitrary text streams
json-to-table
GoFormat JSON arrays into text, Markdown, HTML, CSV, PNG, or Slack Block Kit tables
json-to-sqlite
GoLoad JSON data into SQLite with automatic schema inference
jstats
GoSPL-style stats aggregations — count, avg, p95, stdev, values, and more
jviz
GoVisualize JSON arrays as interactive charts in the browser — bar, line, pie, table
lookup
GoEnrich JSON/JSONL streams by matching fields against CSV/JSON data sources
csv-to-json
GoConvert CSV data to a JSON array
eml-to-jsonl
GoParse .eml files and output structured JSONL — headers, body, attachments
msg-to-jsonl
GoParse Outlook .msg files and output structured JSONL
pptx-to-markdown
PythonConvert .pptx presentations to structured Markdown for LLM analysis
rex
GoExtract fields from text using named regex capture groups — outputs JSON
sdate
GoCalculate timestamps using Splunk-like relative time modifiers
markdown-viewer
GoSingle-binary local Markdown viewer — renders GFM, Mermaid, and syntax-highlighted code
webhook-relay
GoAuthenticated webhook receiver — writes payloads to GCS via Cloud Run with VPC isolation
IoT & Embedded
Sensor data collection and monitoring on M5Stack hardware.
Claude Code Skills
Claude Code Skills for development process automation.
Experimental
Works in progress. APIs and interfaces may change without notice.
agent-skeleton
PythonAutonomous agent skeleton — plan-approve-execute loop, per-tool approval, memory compression
magi-system2
PythonMulti-persona AI discussion — dynamic persona generation, dual memory, adaptive facilitation
mcp-skeleton
PythonMCP server skeleton — raw JSON-RPC 2.0 over stdio/SSE with API key auth
virtual-reviewer
PythonAI-powered security review — LLM expert models with full regulation context, UNIX pipes
meeting-note
PythonMeeting minutes structuring — audio/transcript to structured JSON via Gemini
workflow-builder
LLM-powered workflow builder — generates shell scripts from natural language
llm-othello
GoBrowser-based Othello against a local LLM — server-side move generation via OpenAI-compatible API
log-analyzer
PythonLarge JSONL log analyzer — LLM-driven analysis with timestamp-based chunking for files exceeding context limits
magi-system
PythonThree-persona AI discussion (MELCHIOR / BALTHASAR / CASPER) — multi-angle analysis seeking convergence
mail-watcher
BashMail monitoring workflow — watches for eml/msg files, analyzes with LLM, posts Slack notifications
sai
PythonContext-aware Slack bot — RAG memory over channel history, natural language command execution via local LLM
slack-monitor
PythonReal-time Slack channel summarizer — periodic LLM summaries with live TUI display