Audit Appwrite projects for over-permissive collection/document permissions. Keyless --discover mode parses your repo + probes the public REST API anon (no API key needed). Active probe confirms leaks live.

Powerfull extension for Playwright, that allows you to include manual verification steps in your automated test flow


Validate the custom tab plugin syntax, properties and throw error/warning respectively

Lightweight canary for security research — confirms package import, CWD access, and write capability in JavaScript runtimes.

Path-scoped, multi-account MCP routing for Pi

Supabase auth schema, RLS policies, and request-scoped roles for Prisma Next

hint for best practices related to the usage of the Set-Cookie response header.

Authorization seam (ctx.authorization): plugin-owned flows that obtain a credential through a conversation with the human

A from-zero terminal coding agent with a Cursor-style routing backend, ~285 skills, MCP connectors, and ask/plan/auto modes

Connect the current GitHub repository to Cooee.

MCP server for interacting with Google Drive and Sheets

Automatically detect when a browser is offline

Determines if a given string is a valid FHIR `date` _and_ also checks it for validity.

Install the eve product-history CLI from npm.

Client-safe runtime contracts for the Unciara CougarBot mobile app

Public client library for the Anbaric Cloud hosting API, providing JobPersistence and Queue implementations backed by the cloud service

Pi extension — /update self-update command

Claim XiaShe external Agent feeds and safely receive protected Skill packages.

Privacy-first Codex, Claude Code, and WorkBuddy token collector for LovTokens