Today's brief

Cloudflare 开源的 coding-agent skill 将安全审计拆为六阶段（侦察、狩猎、验证、结构化输出、独立复核、中立报告），核心在于用隔离 agent 互相交叉验证。这套多 agent 编排与验证机制对设计工程师构建设计审查或代码审计类 AI 工作流具有直接参考价值。

Claude Code 官方仓库登上 GitHub Trending。这款终端 AI 编程工具支持通过自然语言理解代码库、执行 Git 工作流与解释复杂代码，现已内置多款插件扩展功能。官方已弃用 npm 安装，推荐通过 curl 或系统包管理器直接部署。

阿里巴巴将内部服役两年的AI代码审查助手开源，采用确定性流水线与LLM Agent混合架构，支持行级精确评论与全文件扫描，兼容OpenAI和Anthropic模型，号称相比Claude Code精度更高且Token消耗仅为1/9。

这个开源项目为 Claude Code、Cursor、Codex 等主流 AI 编程工具提供了一套完整的性能优化系统，涵盖 skills、记忆优化、安全扫描和 MCP 配置。作为 Anthropic 黑客松获奖项目，它已在生产环境经过 10 个月验证，刚发布 v2.0.0-rc.1 版本并新增 Hermes 操作员工作流。

BrowserSkill 是腾讯开源的浏览器自动化工具，通过 CLI 和扩展让 Cursor、Claude Code 等 AI 代理直接调用用户已登录的真实浏览器，无需单独账号。任务在独立 Agent Window 运行，支持 human-in-loop 和全页截图，既保留登录态又不打断用户正常工作流。

Addy Osmani 发布了一套面向 AI 编码 Agent 的生产级工程技能包，通过 7 个 slash 命令覆盖从需求定义到上线的完整开发周期。它将资深工程师的工作流、质量门禁和最佳实践编码为 Agent 可自动执行的技能，并支持 Claude Code 即装即用。

Octop 是腾讯云开源的自托管 AI 助手，支持多用户与多智能体协作，集成飞书、钉钉、QQ 等 IM 与 MCP 连接器。对设计团队而言，它提供了可私有化部署的 AI 协作环境，能在保障数据隐私的同时串联 IDE 与日常通讯工具。

OpenSpec 是一套面向 AI 编程助手的 Spec-Driven Development 框架。它通过 /opsx:propose、/opsx:apply 等命令，将需求先拆解为 proposal、specs、design、tasks 等结构化文档，再让 AI 按规范执行，把即兴生成变成可迭代、可归档的工程化流程，尤其适合在已有代码库中迭代功能。

老牌间隔重复记忆软件 Anki 的源码仓库登上 GitHub 日榜，但正文仅有项目简介、贡献指南与构建说明，未涉及任何 AI 功能、设计工具集成或面向创作者的新特性，对设计师日常工作毫无实操价值。

Anthropic 在 GitHub 开源 11 个面向知识工作者的插件，兼容 Claude Cowork 与 Claude Code，覆盖生产力、销售、客服等场景。每个插件捆绑 skills、connectors 与 slash commands，企业可按自身工具与流程深度定制，让 Claude 变成具备专业工作流的岗位专家。

Supermemory 在 GitHub Trending 登顶，其开源 AI 记忆引擎在 LongMemEval、LoCoMo、ConvoMem 三大基准测试中排名第一。它不只是记忆层，更是完整上下文引擎：自动提取事实、维护用户画像、处理矛盾与遗忘，并原生支持多模态文件、RAG 和第三方连接器，让 AI 不再「金鱼脑」。

该开源工具通过 MCP 协议让 Claude Code 连接本地 TradingView 桌面端，借助 Chrome DevTools 协议实现 AI 辅助图表分析与 Pine Script 开发。虽是 MCP 生态的垂直延伸，但对设计师与设计工程师而言，这属于金融交易专用工具，无可直接用于创意或工程工作流的价值。

rustfs/rustfs

RustFS is an open-source, S3-compatible high-performance object storage system supporting migration and coexistence with other S3-compatible platforms such as MinIO and Ceph. https://rustfs.com/download/ RustFS is a high-performance, distributed object storage system built in Rust. Getting Started · Docs · Bug reports · Discussions English | 简体中文 | Deutsch | Español | français | 日本語 | 한국어 | Portuguese | Русский RustFS is a high-performance, distributed object storage system built in Rust—one of the most loved programming languages worldwide. RustFS combines the simplicity of MinIO with the memory safety and raw performance of Rust. It offers broad S3 API compatibility for supported features, is completely open-source, and is optimized for data lakes, AI, and big data workloads. Unlike other storage systems, RustFS is released under the permissible Apache 2.0 license, avoiding the restrictions of AGPL. With Rust as its foundation, RustFS delivers superior speed and secure distributed features for next-generation object storage. Feature & Status High Performance: Built with Rust to ensure maximum speed and resource efficiency. Distributed Architecture: Scalable and fault-tolerant design suitable for large-scale deployments. S3 Compatibility: Seamless integration with common S3-compatible applications and tools; current coverage is tracked in the S3 compatibility matrix. OpenStack Swift API: Native support for Swift protocol with Keystone authentication. OpenStack Keystone Integration: Native support for OpenStack Keystone authentication with X-Auth-Token headers. Data Lake Support: Optimized for high-throughput big data and AI workloads. Open Source: Licensed under Apache 2.0, encouraging unrestricted community contributions and commercial usage. User-Friendly: Designed with simplicity in mind for easy deployment and management. Status legend: ✅ Available — shipped and covered by CI gates; 🧪 Previe…[truncated]

Supabase 作为开源 Postgres 开发平台进入 GitHub 每日热门仓库榜，集成了数据库、认证、自动 API、边缘函数及 AI 向量工具包等能力。但本条内容仅是仓库常规简介的残片，既无具体版本发布，也未涉及设计师可直接采纳的工具更新或工程实践。

Coder 是一个登上 GitHub Trending 的开源平台，支持用 Terraform 定义云开发环境，并通过 Wireguard 隧道安全连接。其新推出的 Coder Agents 在控制平面运行 AI 编码代理，无需在工作区存放 API 密钥，支持 Anthropic、OpenAI 等多种模型接入，适合需要在私有基础设施上统一管理 AI 开发环境的团队。

ahmedkhaleel2004/gitdiagram

Free, simple, fast interactive diagrams for any GitHub repository https://gitdiagram.com GitDiagram Turn any public or private GitHub repository into an interactive architecture diagram in seconds. You can also replace hub with diagram in a GitHub URL to open its diagram. Sponsor slot: Reach developers while they are actively exploring codebases. Sponsor GitDiagram. Features Architecture-first diagrams: converts a repository tree, README, and bounded source excerpts into a system-level graph instead of merely drawing folders. Interactive source links: click a component to open its real file or directory on GitHub. Streaming generation: see the explanation arrive while the graph is planned. Private repositories: provide a GitHub token locally in the browser; private artifacts use a separate protected storage namespace. Export: copy Mermaid source or download the rendered diagram as PNG. Provider choice: OpenAI by default, with OpenRouter available for self-hosted deployments. Stack Application: Next.js 16 App Router, React 19, TypeScript, Tailwind CSS, and Radix UI Generation API: same-origin Next.js Route Handlers running on Vercel's Bun runtime Storage: Cloudflare R2 for diagram artifacts Coordination: Upstash Redis for quota accounting, cancellation, locks, and short-lived failure state AI: OpenAI or OpenRouter through AI_PROVIDER Analytics: PostHog Deployment: Vercel is the only live runtime; an offline Railway/Docker recipe is retained for disaster recovery There is no separate FastAPI implementation, Postgres database, or Neon runtime. Production architecture Vercel serves both the UI and the generation endpoints: /api/generate/cost estimates a run after bounded GitHub ingestion, same-origin and rate limited. /api/generate/stream streams Server-Sent Events for explanation and graph progress. /api/generate/cancel records authenticated, same-origin cancellation…[truncated]

Hister 是一款开源的私有搜索引擎，能在本地全文索引网页和文件，并通过 MCP 协议与 AI 助手联动。对于需要管理大量设计参考、文档和本地素材的创作者，它提供了可立即部署的隐私优先方案，无需依赖云端服务即可实现语义检索和 AI 问答。