Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Helping AI Agent become an awesome practical hacker!
| Date | Stars |
|---|---|
| 2026-07-31 | 1511 |
| 2026-08-06 | 1559 |
Today
+48 stars today
This week
— stars this week
This month
— stars this month
Momentum
177.0
growth rate 0.00%/day
# HACK.SKILLS - Hacker Arsenal for Agents
<p align="right">English | <a href="./README_CN.md">中文</a></p>
<p align="center">
<img src="./assets/readme-hero-banner.jpg" alt="HackSkills Hero Banner" width="100%" />
</p>
<p align="center">
<strong>Master Entry → Category Entries → Deep Topic Skills</strong><br/>
One master entry, six category entries, and <strong>101</strong> deep topic skills across <strong>14 security domains</strong>.
</p>
An Agent Skills knowledge base covering web security, API security, authentication & authorization, OS privilege escalation (Linux/Windows/macOS), Active Directory attacks, mobile security, binary exploitation (Pwn), reverse engineering, cryptography attacks, blockchain & smart contract security, AI/ML & LLM security, network protocols & pivoting, and digital forensics — built for bug bounty, penetration testing, CTF competitions, and authorized security research.
The current branch has converged to a standard directory structure: every skill lives in its own directory, uniformly using `skills/{semantic-identifier}/SKILL.md`. The design goal is not to expose every minor tip as an entry point, but to compress what the loader truly needs to see into one master entry, six category entries, and deep topic skills drilled down on demand.
The objective is straightforward: organize security knowledge that is genuinely useful in real engagements and easy to audit and maintain into a set of installable, searchable, and composable HackSkills.
## Browse Online
This repo is published in three forms — pick whichever your workflow prefers; they are kept in sync on every push to `main`.
| Channel | What you get | When to use |
|---|---|---|
| **Web UI** — <https://skills.hackbenchmark.com> | Fuzzy search, category sidebar, P0/P1/P2 tier filter, copy-paste install commands, encrypted ZIP download | Quick lookup, sharing links to a specific skill, demoing the catalog |
| **GitHub source** — this repo | Plain `SKILL.md` per skill, full markdown rendering, pull-request review | Diff review, contributing, deep reading offline |
| **Encrypted ZIP** — see [Offline ZIP](#offline-zip-encrypted) | One-shot download of all `*.md` for air-gapped use | No internet on target, AV strips plain markdown |
The website is a static, fully client-side build of `site/` — no tracking, no backend. Source: [`site/`](./site), workflow: [`.github/workflows/deploy-pages.yml`](./.github/workflows/deploy-pages.yml). Search uses a weighted fuzzy index over name / id / category / description with field qualifiers like `category:auth`, `tier:deep`, `lines:>200`.
```text
┌─────────────────────────────────────┐
│ skills.hackbenchmark.com (static) │ ── search / filter / copy install cmd
└─────────────────────────────────────┘
▲
github.com/yaklang/hack-skills ───────►┤ same repo, three views
▼
┌─────────────────────────────────────┐
│ hack-skills.zip (AES-256, public │ ── offline / behind AV
│ password: hack-skills, via CDN) │
└─────────────────────────────────────┘
```
## Knowledge Sources & Distillation Boundaries
This repository is not a mirror of external materials — it is a distillation layer aimed at Agents.
Primary reference sources (all publicly available, used strictly for educational distillation):
| Source | What It Provides | How We Use It |
|---|---|---|
| `swisskyrepo/PayloadsAllTheThings` | 64 vulnerability categories, payload families, bypass techniques, exploit chains | Distilled into scenario-based indices, method matrices, per-engine/per-database payload sections |
| `PentesterSpecialDict` | OS-specific payload dictionaries, Java middleware path fuzzing lists, file extension databases | Distilled into parameter naming patterns, endpoint Excerpt of 40,820 characters
Read on GitHub
28
2
1
Would you bet a product on this? Bounded 0–100 and slow moving.
matched fp:c99343fc92ac9486, desc:ai agent