Today's brief

morluto/rea

Reverse engineer anything with agents, from app behavior down to native binaries. English · 简体中文 · 日本語 · 한국어 · العربية REA: Reverse Engineer Anything One MCP for reverse engineering across binaries, applications, and runtime behavior. See a feature you like. Understand how it works, down to the binary level. Quick start · Current status · Investigation model · Tool catalog · Roadmap · How it works npx rea-agents setup Join the Reverse Engineering Community Discord · Q&A · Show and Tell See a feature in an app that you want in your own product? Ask your agent to investigate it with REA. It can inspect the app without its source code, explain how the feature works, show the evidence, and build a version for your project. REA connects your agent to tools for inspecting native binaries, JavaScript and Electron apps, .NET assemblies, and websites. You can also use the same tools from your terminal. Analysis runs locally, and results include the evidence and limitations behind each conclusion. Setup registers REA with your agent and installs matching workflow instructions. Native analysis can use an existing Hopper or Ghidra installation; setup can optionally install Hopper with approval. Static JavaScript analysis needs neither engine. Quick start Run setup (recommended) Set up REA with your agent: npx rea-agents setup Choose which supported agents should use REA, then review the exact paths and changes before approving. Existing REA registrations are selected by default; newly detected agents are available to select, but detection alone does not select them. Setup adds MCP access and REA's guided workflow for selected agents. Hopper is a separate optional choice with its own consent. Setup can also record an existing Ghidra installation. Setup shows its changes before applying them and backs up existing configuration. See Installation and setup for require…[truncated]

VoiceStudio 是 ElevenLabs 的全本地开源替代品，整合 16 个 TTS 与 11 个 ASR 引擎，支持 646 种语言的语音克隆、视频配音、转录及有声书生成。无需 API 密钥与订阅，所有数据留在本地，适合设计师直接用于交互原型配音与多语言内容创作。

Context Mode 是一款 MCP 服务器，通过沙盒隔离工具输出（减少 98% 上下文占用），并用 SQLite + BM25 实现会话事件的持久化与检索。当对话压缩时，它能确保 AI Agent 不丢失文件编辑、任务进度等关键状态，同时支持 17 个平台的路由。

GitHub Trending 今日出现 Node Version Manager（nvm）仓库。该项目是管理多版本 Node.js 的 bash 脚本，内容仅为常规安装与使用文档，并无新功能发布或更新公告。对专注于界面设计、AI 工具链及设计工程实践的读者而言，这条信息既无新鲜技术信号，也无可直接迁移到设计工作流的操作价值，属于通用开发工具的基础设施噪音。

K-Dense 在 GitHub 开源了 135 个 Scientific Agent Skills，覆盖癌症基因组学、分子动力学、时序预测等领域，任何支持 Open Agent Skills 标准的 AI Agent（如 Claude Code、Cursor、Codex）都可直接调用。团队还推出了免费的桌面端 AI 科研助手 K-Dense BYOK，支持 40+ 模型与 100+ 科学数据库，数据完全本地留存。

HKUDS 推出的 CLI-Anything 是一个开源 CLI 枢纽，通过统一命令行将任意软件包装为 AI Agent 可调用的技能。它提供 CLI-Hub 浏览社区贡献的接口，并原生支持 Cursor、Claude Code 等框架，意味着设计师无需等待官方 API 就能让 AI 直接操控现有工具。

iFixAi 是一款开源 AI Agent 审计工具，融合对抗测试与运营保障，验证 Agent 是否按业务 KPI 及组织目标正确执行。支持 CLI、插件和 Skill 三种接入，可在 120 秒内完成诊断并生成评分报告，帮助团队在 Agent 失控前捕获错误与盲区。

PentAGI是一款开源的自主AI渗透测试系统，可在Docker沙盒中运行并支持多厂商LLM接入。虽然该项目登上GitHub Trending，但其面向网络安全红队场景，对产品设计师与AI设计师无直接工具价值或工作流参考意义。

Rust 语言主仓库进入 GitHub Daily Trending，正文仅为标准 README 介绍，无任何新功能或版本发布。对设计从业者而言，这是一条纯粹的底层开发基础设施信息，不含可复用的设计资源或工作流参考。

xtool 是一款开源的跨平台命令行工具，可在 Linux、Windows 和 macOS 上通过 SwiftPM 构建、签名并将 iOS 应用部署到真机。它打破了 iOS 开发必须依赖 macOS 和 Xcode 的限制，为没有 Mac 的设计工程师和开发者提供了完整的移动原型构建与测试工作流。

开源工具 Tiny11 Builder 发布原生 WinUI 版本，支持从官方镜像中可视化移除捆绑应用、系统组件与服务，生成高度精简的 Windows 11 ISO。工具提供 Tiny11、Tiny11 Core 与 Custom 三种模式，并支持 Turbo 加速与断点续建，适合需要轻量系统环境的技术用户。

NationalSecurityAgency/ghidra

Ghidra is a software reverse engineering (SRE) framework https://www.nsa.gov/ghidra Ghidra Software Reverse Engineering Framework Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate. This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including Windows, macOS, and Linux. Capabilities include disassembly, assembly, decompilation, graphing, and scripting, along with hundreds of other features. Ghidra supports a wide variety of processor instruction sets and executable formats and can be run in both user-interactive and automated modes. Users may also develop their own Ghidra extension components and/or scripts using Java or Python. In support of NSA's Cybersecurity mission, Ghidra was built to solve scaling and teaming problems on complex SRE efforts, and to provide a customizable and extensible SRE research platform. NSA has applied Ghidra SRE capabilities to a variety of problems that involve analyzing malicious code and generating deep insights for SRE analysts who seek a better understanding of potential vulnerabilities in networks and systems. If you are a U.S. citizen interested in projects like this, to develop Ghidra and other cybersecurity tools for NSA to help protect our nation and its allies, consider applying for a career with us. Security Warning WARNING: There are known security vulnerabilities within certain versions of Ghidra. Before proceeding, please read through Ghidra's Security Advisories for a better understanding of how you might be impacted. Install To install an official pre-built multi-platform Ghidra release: Install JDK 21 64-bit Download a Ghidra release file NOTE: The official multi-platform release file is named ghidra_<version>_<release>_<date>.zip which can be found under the "Assets" drop-down. Downloading either of the …[truncated]