A free GitHub tool now lets an AI open an app nobody gave you the source code for and explain how it works, line by line. People are already pointing it at Grok Bot itself: 540 files rebuilt into readable code.
YOU DON'T HAVE TO UNDERSTAND CODE TO SEE WHY THIS MATTERS. EVERY APP USED TO BE A LOCKED BOX. THE LOCK JUST GOT A LOT THINNER
The video shows this repo's page on GitHub, scrolled down through the README. The swarm of cursors is a visual effect I added on top.
Here is the simple version.
Every app has a recipe: its source code. Companies keep it private. All you ever get is the finished cake.
A tool called REA, short for Reverse Engineer Anything, lets an AI agent taste the cake and write the recipe back. You ask Claude Code or Codex, the agent calls REA, and REA digs into the app and reports what it found, with the file and line where each finding came from.
It's free and MIT licensed. Setup is one command, and it shows you a plan and asks before it changes anything. The repo has passed 100,000 stars.
Now the part that made me stop.
REA's authors say it works with agents like Claude Code, Codex, Cursor and Gemini CLI. And people didn't wait long to test it on the most talked-about agent app around.
One project describes itself like this:
"reconstructs the installed Grok Bot 0.66.0 desktop application"
It says all 540 JavaScript files of the app now have a readable TypeScript version, and it names REA as the tool it used. Another repo is an analysis archive of Grok Bot's inner workings, with 484 route declarations and 167 public methods mapped, and it says it checked its findings with REA.
Read that as a normal person: someone took a finished, closed app and got an AI to draw a map of how it's built.
Here is the link to the tool: github.com/morluto/rea
And the two Grok Bot examples: github.com/olllayor/grokbot-… github.com/oceanz0312/grok-b…
How does it avoid making things up? It makes the agent label every finding as seen, inferred or unknown. That matters, because agents love to state a guess as if it were a fact.
My take: the gap that's about to matter is between people who treat apps as black boxes and people who hand the box to an AI and read the blueprint. The first group takes the company's word for how things work. The second checks.
What I haven't verified: I haven't run REA. The Grok Bot numbers (540 files, 484 routes, 167 methods) come from those repos' own READMEs, and both are unofficial projects.
Careful: REA is not a sandbox, and a lookalike repo with a similar name exists. Install only from the link above or as rea-agents on npm.
Only take apart software you own or are allowed to study.
The video is a screen recording with a cursor effect. The "agents / layers" counter belongs to the effect.
So is an app you can't see inside something you should trust, or something you should check?
10
18
414
Elon Musk after seeing XERJ’s own test: a model with no per-token bill that’s 320–500× cheaper than RAG on Claude Opus 5.5.
I've built a new AI model that is not allowed to generate text. Instead, it produces a verifiable program that answers your prompt using the original reference.
XERJ Reader-1 is a neurosymbolic model for working with data. It points to the exact words in your document, writes a small program over them, and exact code computes the answer:
• 20-90x faster
• 10-1,000x cheaper (output tokens free)
• every answer is a program you can replay
The shortest path to automating data work.
4
18
464
Grok Bot costs up to $300 a month. One free GitHub list already tracks 63 skills, plugins, MCP servers and self-hosted alternatives around it, and the free rival it's compared with has 391k stars.
THE PEOPLE RENTING A GENIUS EMPLOYEE AND THE PEOPLE OWNING THE WHOLE STACK ARE ABOUT TO BE IN TWO DIFFERENT WORLDS. THIS ONE REPO IS THE MAP
The video shows this repo's page on GitHub, scrolled down through its README. The swarm of cursors is a visual effect I added on top.
The repo is awesome-grok-bot, an unofficial, community-maintained directory. Its header calls it:
"A curated, verified directory of 63 Grok Bot skills, plugins, MCP servers and self-hosted alternatives."
Here is what's inside.
13 skills. Reusable setups and workflow packs. The names alone tell you where this is going: botteams, grokbot-for-gtm, overnight, even a werewolf-gamemaster.
Plugins and MCP servers. 10 community ones, plus 22 from the official marketplace.
16 self-hosted alternatives, runtimes and bridges. This is the part that should make you stop. Tools that run outside the vendor's cloud, or connect a Bot to other places, like Discord or your terminal.
2 guides. For people who need an on-ramp.
Then the list does something most lists don't. It puts the price next to the alternatives.
Grok Bot is a closed product. It's not sold standalone and has no free tier. The list puts the plans at $120 to $300 a month. OpenClaw, listed as the free, open-source, self-hosted option where you bring your own model, sits at 391k stars. Hermes Agent, also free and model-agnostic, is at 251k.
So the market splits into two camps: pay monthly for the polished version, or own a free stack you can swap parts of.
The "Pick of the Week" shows which way the wind blows. It's HyperGrok, described as:
"the first entry here that treats a Bot as staff rather than as a tool."
Seven specialist roles, wired into a group chat. It starts in research mode with no wallet attached.
Here is the link: github.com/ZeroPointRepo/awe…
And a few of the self-hosted ones from inside it: github.com/ishandutta2007/op… github.com/wolfqing/OpenGrok… github.com/davefmurray/grok-… github.com/ScriptedAlchemy/g…
My take: the gap that's about to matter isn't between people who use AI and people who don't. It's between people who rent one agent and people who own the stack around it. The first group pays monthly. The second group swaps parts.
What I haven't verified: I haven't run any of this, and I couldn't read the repo reliably from here. One cached view of the page showed an older version of the list with only 19 entries and almost no stars, while the README I read showed 63, so counts may differ from what you see. For that reason I didn't lead with stars. The ecosystem is brand new and the repos move fast.
The prices and the OpenClaw and Hermes star counts come from the list itself, from a snapshot dated October 4, and they change. The list also says usage limits aren't published.
The list calls itself "a curated list, not an audit," and warns that some entries ask for real credentials. Read before you paste any key. The four extra links are completed from owner and project names in the list, so check that each one opens. Running agents can cost money for model usage. The video is a screen recording with a cursor effect. The label at the bottom ("agents", "layers") belongs to the effect, not to this repo.
So is the future of agents a monthly subscription, or a free stack you assemble yourself?
Stop asking AI about binaries one chat at a time. Someone built a full reverse engineering lab for your agents: 100+ MCP tools, 180+ guides, Ghidra, Frida, x64dbg and Rizin all wired in, in one free repo.
THE GAP ISN'T BETWEEN PEOPLE WHO USE AI AND PEOPLE WHO DON'T. IT'S BETWEEN PEOPLE WHO CHAT WITH IT AND PEOPLE WHO GIVE IT A LAB
The video shows this repo's page on GitHub, scrolled from the top down through the README. The swarm of cursors is a visual effect I added on top.
The project is called Open ReverseLab. Here is how its own description reads:
"Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base."
Read that again. It isn't a prompt. It isn't a tip. It's a workplace you hand to Claude Code or Codex.
Here is what that workplace looks like.
Four boards, one for each kind of job. Web and CTF challenges. Android apps. Windows executables. And a general board for crypto, protocols and firmware.
Tools the agent can call itself. Names in the repo include triage_pe, ghidra_headless_analyze, sample_full_workup, android_frida_* and http_probe, plus a router that picks the right guide for the problem. The agent isn't guessing which tool exists. They're registered.
A reading order for the agent. Before it touches anything, the repo tells the agent what to read first: CLAUDE.md, then AGENTS.md, then AI-USAGE.md, then the guide for that board. The lab briefs the agent before it starts.
A quarantine step for artifacts. Samples go through a workflow instead of landing anywhere. That's what makes this a lab and not a pile of scripts.
A page on running agents unattended. The docs even cover setting agents up for 24-hour CTF runs.
Getting in is short. On Windows you run START_HERE.bat. On macOS and Linux you run ./START_HERE.sh. It checks for Python, uv and Git. It's built for Claude Code, Codex and other MCP-compatible agents. License: GPL-3.0.
Here is the link: github.com/LING71671/open-re…
Think about what that does to the old way of learning this. Reverse engineering used to mean a stack of tools, a pile of tabs and years of habits in your head. Here the habits live in the repo, and the agent reads them.
My take: the person who asks an AI about a binary and the person who hands an AI a lab will not end up in the same place. The first gets an answer. The second gets a workflow that repeats. Don't land on the wrong side of that.
What I haven't verified: I haven't run Open ReverseLab, and I couldn't open its GitHub page from here. The description above comes from the repo's listing, and third-party pages disagree on the details: article counts range from 180+ to 197, and star counts range from roughly 500 to 1,400 depending on the tracker, which is why I didn't lead with stars.
This is a young repo, so check the README for what it really includes today. "100+ tools" is the repo's own claim. The repo is free, but the model usage behind Claude Code or Codex can cost money. Only analyze software you own or are allowed to test.
The label at the bottom of the video ("agents", "layers") belongs to the cursor effect, not to this repo. The video is a screen recording with that effect added.
So are you going to keep chatting with your AI, or give it a lab?
Someone put a whole game studio inside Claude Code: 49 AI agents, 72 skills, 37k stars, and the repo picked up 4.3k of them in just 7 days.
ONE PERSON, ONE CLAUDE CODE SESSION, AND A FULL STUDIO ORG CHART OF AI AGENTS. THE ONLY QUESTION LEFT IS WHO MAKES THE DECISIONS
The video shows this repo's page on GitHub, scrolled from the file list down through the README. The swarm of cursors is a visual effect I added on top.
The project is called Claude Code Game Studios. Its own description says:
"Turn Claude Code into a full game dev studio — 49 AI agents, 72 workflow skills, and a complete coordination system mirroring real studio hierarchy."
It's MIT licensed, so you can use it, change it and build on it.
Here is what's inside.
The team. The 49 agents are organized the way a real studio is: directors on top, department leads under them, specialists at the bottom. Roles in the repo include a creative director, a technical director, a producer, an art director, a QA lead and a release manager. There are also agent sets for the engines people actually use: Godot 4, Unity and Unreal Engine 5.
The skills. 72 workflow skills work as commands you type inside Claude Code. Examples: /start for guided setup, /brainstorm, /dev-story, /code-review and /release-checklist.
The guardrails. The repo ships path-scoped coding standards for gameplay, engine, AI, UI, network and asset files, plus scripts that check commits, pushes and asset changes. The agents work inside rules, not just on vibes.
The workflow. It runs from brainstorm all the way to launch: design, stories, implementation, QA, release. Templates for game design documents, architecture decision records and sprint plans come with it.
And here is the part that matters. The repo says you, the developer, keep making every decision. The agents ask questions, offer options and catch mistakes. You approve.
Setup is short: clone the repo, open Claude Code in the project folder, and run /start.
The numbers: about 37k stars and 4.9k forks. The repo was created on February 12, 2026, so that's roughly nine months. About 4.3k of those stars came in the last 7 days.
Here is the link: github.com/Donchitos/Claude-…
Think about the size of the idea. A studio isn't one skill. It's a pipeline of roles that argue with each other, and this repo tries to copy the arguing, not just the typing.
My take: the interesting part isn't that AI can write game code. It's that the repo copies how a studio makes decisions. If it works, the scarce skill won't be programming. It will be knowing which of 49 suggestions to approve.
What I haven't verified: I haven't run this repo or opened its page myself. The counts of 49 agents and 72 skills are the repo's own claims, and the summaries I found disagree on the exact breakdown, so treat them as claims until you've counted. The star, fork and growth numbers come from a tracker page dated November 9 and change by the hour. The repo is free, but Claude Code usage itself can cost money. The label at the bottom of the video ("agents", "layers") belongs to the cursor effect, not to this repo. The video is a screen recording with that effect added, not a demo of the agents running.
So can one person plus 49 agents ship a real game, or just a very well-organized pile of prototypes?
22
46
1,153
this is the quietest industry shift of the decade. nobody is tweeting about it yet because the top 1% of engineers are still hoarding the alpha. but the people who learn to run 50 to 500 claude agents in parallel this quarter are about to walk into 2027 doing in a weekend what entire mid-sized companies still bill $500k for. elon musk keeps dropping the same line in every interview this year: the real moat in 2027 is not who has the smartest AI, it is who can run 500 of them at the same time without losing track
one open-source github repo just quietly turned that idea into a product. 113k stars. 18.7k forks. 7,220 commits. and it is running agents like an actual company
the project is called paperclip. MIT licensed. their own github tagline: "the open-source app everyone uses to manage agents at work"
the problem is not that AI agents are weak anymore. the problem is that you have 20 claude code tabs open and cannot remember what any of them are doing. paperclip turns that chaos into an org chart. CEO agent on top. managers under it. workers under them. budgets. goals. accountability. one board you can actually look at and make decisions from
the quickstart takes 5 minutes. create a company. hire a CEO agent. approve its first strategy. watch tasks land on the board. then go to sleep while the company you just built operates itself
113k stars is not a trend. it is the first signal of a shift in what engineers are paid for. the skill that used to pay you was doing the task. the skill that is about to pay 10x is designing the structure that does the task for you
the people still running one chat, one tab, one question at a time will be the exact same people who, in 2017, refused to learn git because "i can just send zips"
repo link: github.com/paperclipai/paper…
i wrote the full breakdown of how paperclip works under the hood, how to set up your first 10-agent company tonight, the exact hiring order that works, and the 3 mistakes that burn your whole setup in week one. the article is below
bookmark this before your competitors do
11
23
535
This is f*cking wild. Anthropic's CEO says AI could disrupt half of all entry-level white-collar jobs within 1 to 5 years, and the first jobs he names are junior law, junior finance and junior consulting.
THE FIRST JOBS AI TAKES ARE THE ONES PEOPLE START A CAREER WITH. THE WAY OUT IS A HARNESS, AND 14 REPOS TO BUILD IT ARE FREE
Dario Amodei was asked what a kid finishing high school should do right now. He didn't soften it:
"AI will also eliminate jobs, and probably a large number of them."
His list of first jobs in the line of fire is short: entry-level law, entry-level finance, entry-level consulting. That's the work most people use to get their first foot in the door.
And he says this shift is different. Farms, factories, the internet: each one gave people time to catch up. This one cuts deeper and moves faster.
His advice sounds simple: learn to use AI. But using it is now the minimum.
Look at the ladder most people are climbing:
Chatting → Prompting → Agents → Harness → Loops → You run the AI
Most people are stuck on the first two steps. The ones who get ahead build a harness, a setup that runs the AI for them. You stop being the person doing the task and become the person managing the thing that does it.
Here are 14 free repos that cover the whole climb.
Ready-made Claude plugins for legal, finance, sales, HR and data: github.com/anthropics/knowle…
Analyst-grade agents for models, memos and research notes: github.com/anthropics/financ…
Skills for working with Excel, Word, PowerPoint and PDF: github.com/anthropics/skills
An agent that does financial research on its own: github.com/virattt/dexter
An agent that researches any topic in depth: github.com/assafelovic/gpt-r…
Ask your spreadsheets and databases questions in plain English: github.com/sinaptik-ai/panda…
Agents that work as a team, each with its own role: github.com/crewAIInc/crewAI
A harness with everything built in: github.com/langchain-ai/deep…
Anthropic's SDK for building your own agents: github.com/anthropics/claude…
A memory layer so your agents remember context: github.com/mem0ai/mem0
A loop that keeps the agent working until the job is done: github.com/snarktank/ralph
An agent that clicks through websites and fills in forms for you: github.com/browser-use/brows…
Drag-and-drop workflows to automate busywork: github.com/n8n-io/n8n
18 free lessons on building agents: github.com/microsoft/ai-agen…
My take: AI won't take your seat. Someone who learned to run it will. The new entry-level skill isn't doing the task, it's building the thing that does the task.
What I haven't verified: I haven't opened these repos, so check each one before you rely on it. The 1 to 5 year, half-of-entry-level-jobs estimate is a forecast Amodei made publicly, not a certainty, and the quote above comes from the clip as it was shared, not from a transcript I checked. The repos are free to use, but running them can still cost money for model usage. The video is an illustration, not a recording.
So will AI take the junior seat, or will the juniors who build a harness take the manager's?
This is getting dangerous: one free GitHub repo now holds 93 runnable AI engineering projects, and it just picked up about 2,700 stars in 7 days.
THE EXCUSE FOR NOT LEARNING AI ENGINEERING JUST DISAPPEARED. 93 RUNNABLE PROJECTS ARE SITTING IN ONE FREE REPO
The repo is called AI Engineering Hub. The description says: "In-depth tutorials on LLMs, RAGs and real-world AI agent applications."
It's MIT licensed, so you can use it, change it and build on it for free.
Here is what's inside. The projects are split into three levels:
→ 22 beginner projects → 48 intermediate projects → 23 advanced projects
That's 93 in total, and it comes with a roadmap that tells you what to build in what order.
The topics are the ones every AI engineer is expected to know: RAG, AI agents, MCP, voice agents, OCR, fine-tuning, evaluation and observability, and running models fully on your own machine.
Some of the projects you'll find: Agentic RAG, a Multi-Agent Deep Researcher, an MCP Voice Agent, GitHub RAG, and an Evaluation and Observability project built with Opik.
The stack is the one people actually use at work: LlamaIndex, Ollama, CrewAI, Milvus, Qdrant and Groq, among others.
The repo was created on October 21, 2024. It's now at roughly 41,000 stars, and about 2,700 of them came in the last 7 days. Its best single day was around 1,100 stars, on November 1.
Here is the link: github.com/patchy631/ai-engi…
Think about what that changes. A few years ago, learning this meant paying for a course, or piecing it together from scattered blog posts that were already out of date.
Now the whole path is in one place, with working code, free.
My take: the bottleneck is no longer finding good tutorials. It's finishing projects. When 93 runnable examples are free, the only thing that proves you can do the work is what you actually ship.
A word of caution: star counts differ between tracking sites, anywhere from about 38,000 to 41,000 depending on the tracker and the day. I couldn't open the repo itself from here, so the project counts and the stack list come from write-ups of it, and the repo changes often. Check the README before you plan around any single number. The video is an illustration, not a recording.
So does finishing 93 projects make you an AI engineer, or just someone who's very good at following tutorials?
Damn, I still can't believe it: 20 free GitHub repos now add up to a full reverse engineering studio that an AI agent can run for you.
A FULL REVERSE ENGINEERING STUDIO NOW COSTS ZERO. THE REAL SKILL IS KNOWING WHEN THE AGENT IS WRONG
A few years ago this took a lab, a license budget and months of practice. Now it's twenty repos and one agent.
The tools fall into five groups. Here is every one of them.
[01] Analysis core: where the agent plugs in
REA is a single MCP server that connects the agent to everything else. github.com/morluto/rea
Ghidra is a free decompiler. github.com/NationalSecurityA…
GhidraMCP lets your agent drive Ghidra. github.com/LaurieWired/Ghidr…
ida-pro-mcp does the same for IDA Pro. github.com/mrexodia/ida-pro-…
[02] Mobile and apps
jadx turns an Android APK back into Java. github.com/skylot/jadx
Apktool takes an APK apart and puts it back together. github.com/iBotPeaches/Apkto…
Frida hooks into an app while it runs. github.com/frida/frida
ILSpy decompiles .NET. github.com/icsharpcode/ILSpy
[03] Binaries and low level
radare2 is a reverse engineering framework that lives in your terminal. github.com/radareorg/radare2
x64dbg is a debugger for Windows. github.com/x64dbg/x64dbg
ImHex is a hex editor with its own pattern language. github.com/WerWolv/ImHex
angr is a symbolic execution engine. github.com/angr/angr
[04] Network and execution
mitmproxy sits in the middle and reads the traffic. github.com/mitmproxy/mitmpro…
dnSpy debugs and edits .NET apps. github.com/dnSpyEx/dnSpy
rizin is a fork of radare2. github.com/rizinorg/rizin
raddebugger is the debugger from Epic Games. github.com/EpicGamesExt/radd…
[05] Rebuild and verify
awesome-ai-reverse-engineering is a list of 122 repos, each one rated. github.com/zhuyansen/awesome…
awesome-reverse-engineering is a hand-picked list from the creator of REA. github.com/morluto/awesome-r…
REA flows are ready-made investigation prompts that ship with REA.
The clean-room loop means you write a SPEC.md, then run oracles and checks until the rebuild matches.
The whole pipeline fits on one line:
binary -> REA -> SPEC.md -> rebuild -> oracle -> retry
"Save this, point it at any app and watch it explain itself."
Here is why that last loop matters. The agent can open a binary, describe what it does and write a rebuild. But "it looks the same" proves nothing. The oracle is what counts: run the original and the copy on identical inputs and compare the outputs. A rebuild can compile, run and look right while behaving differently in the one case nobody tested.
My take: the tools are free now. The thing you can't skip is a check that doesn't depend on the model's word.
Before you start: keep a backup, record how the original behaves, change one thing at a time, and mark each claim as seen, inferred or unknown. Only take apart software you own or have the right to study.
What I haven't verified: I haven't run this stack. Some GitHub paths were cut off in the list I worked from, so I completed those from the project names, and I couldn't open the pages from here to confirm them. Check each link before you rely on it. The REA connection, the 122-repo rating and the ready-made prompts are described the way the list describes them.
So when an agent says the rebuild matches, do you trust the agent, or do you trust the check?
REA is most dangerous thing on the internet right now...
It lets your AI agent reverse engineer any app, down to the binary
If you use it correctly, you can rebuild any feature you pay for, for FREE
In this article, I show you how:
10
45
1,574
Damn, I still can't believe it: 13 free GitHub repos turn a plain folder of notes into a second brain that an AI agent can actually use.
A FOLDER OF NOTES IS NOT A SECOND BRAIN UNTIL AN AGENT CAN SEARCH IT AND REMEMBER IT
Most people save everything and use almost none of it. The notes pile up, and the agent starts from zero every single chat.
These 13 repos fix that, in five steps. Almost all of them run on your own computer.
Step 1: capture what you read
obsidian-clipper saves any web page as Markdown. It's the official web clipper from Obsidian. github.com/obsidianmd/obsidi…
markitdown turns PDF, Word, PowerPoint, Excel and audio files into Markdown. github.com/microsoft/markitd…
yt-dlp pulls subtitles out of a video without downloading the video itself. github.com/yt-dlp/yt-dlp
paperless-ngx gives you OCR and full-text search across all your scans and PDFs. github.com/paperless-ngx/pap…
Step 2: give it structure
obsidian-dataview turns your vault into a database you can query. github.com/blacksmithgu/obsi…
obsidian-git keeps a version history and automatic backups of every note. github.com/Vinzent03/obsidia…
Step 3: make it searchable
qmd is local search over your notes. It combines keywords, vectors and re-ranking, and it comes with an MCP server, so an agent can plug straight in. github.com/tobi/qmd
meilisearch searches as you type, forgives typos, and has a hybrid semantic mode. github.com/meilisearch/meili…
Step 4: give the agent a memory
letta builds stateful agents that learn over time. github.com/letta-ai/letta
langmem stores facts, behavior and past interactions as long-term agent memory. github.com/langchain-ai/lang…
MemOS is a memory layer for agents, saved as a graph you can browse and edit. github.com/MemTensor/MemOS
Step 5: make it yours
quartz publishes your Markdown notes as a website. github.com/jackyzha0/quartz
syncthing syncs your vault across devices, peer to peer and encrypted. github.com/syncthing/syncthi…
Look at the shape of it. First you capture. Then you structure. Then you search. Then the agent remembers. The order is the whole point.
"A pile of notes only becomes a second brain when an agent can search it and remember it."
My take: the winners won't be the people who save the most. They'll be the people whose agent can find the right note in two seconds and never starts from scratch.
What I haven't verified: I haven't installed or tested these 13 repos. The descriptions above come from the repos' own summaries, and I haven't independently confirmed how well each tool works, how they fit together, or that every one runs fully offline. Start with one or two steps, not all 13 at once.
So where does it break first for you: getting notes in, or getting the right note back out?
REA is most dangerous thing on the internet right now...
It lets your AI agent reverse engineer any app, down to the binary
If you use it correctly, you can rebuild any feature you pay for, for FREE
In this article, I show you how:
11
27
711
Damn, I still can't believe it: you drop one PDF into a Grok Bot group chat, and a bot rewrites 10 to 15 of your wiki pages on its own, while a third bot exists only to doubt them.
YOUR AI SECOND BRAIN WILL LIE TO YOU. THE FIX IS A BOT WHOSE ONLY JOB IS DOUBT
Everyone is building a memory for their AI. Almost nobody is building the part that checks it.
That's the real risk. A memory that grows by itself also gets things wrong by itself, and it does it in a confident voice.
"A second brain can sound sure while remembering the wrong thing."
Here is how the setup works on Grok Bot: three bots in one group chat, each with its own memory. That's exactly what the video shows, step by step.
Reader collects. It takes every link, PDF and voice note you drop and never edits any of it. In the video, source-042.pdf gets locked as read-only, with 0 mutations.
Librarian writes. It rewrites every wiki page the new source touches, usually 10 to 15 pages. In the video you can watch the pages get patched one by one, 12 of 12.
Checker doubts. It wakes up on a nightly routine and hunts contradictions, stale claims and pages that nothing links to.
Then the part that matters. In the video, a new source arrives and disagrees with an old page. The checker doesn't fix it quietly. It tags you and leaves the old page untouched.
Three rules make it trustworthy:
→ A new source contradicts an old page: the checker tags you instead of quietly overwriting it. → A page goes 30 days without a fresh source: it gets marked unconfirmed. → You ask a question: the answer is filed back as a page, so the brain grows from use, not only from reading.
And every page has to show three things:
the claim the source it came from the date it was last confirmed
If a page can't show those, it isn't knowledge. It's a guess.
Paste this into Grok Bot to start:
"Build me a second brain with three bots in one group chat. Keep my sources untouched in raw/, maintain wiki/ yourself, file good answers back as pages and run a nightly check for contradictions. Show me the structure first. Do not create anything until I confirm"
The last sentence matters most. Make it show you the structure before it builds anything.
Start with one topic you actually work on, not your whole life. A small brain you trust beats a big brain you don't.
The value of a second brain is not how much it remembers. It's how loudly it admits what it can't confirm.
A note on the video: it's an illustration of the idea, not a recording of a real Grok Bot run, and the numbers in it are simulated. The 10 to 15 pages per source, the nightly check and the 30-day rule come from the description of the pattern, and I haven't tested how the prompt behaves with long sources.
So which fails first in a self-writing wiki: the writing, or the trust in what it wrote?
Damn, I still can't believe it: 7 free GitHub repos take you from a raw binary to an AI agent that reverse engineers it for you.
A FREE REVERSE ENGINEERING DEGREE IS SITTING ON GITHUB, AND THE ORDER IS THE WHOLE TRICK
Most people open one of these tools, get lost in the assembly, and quit.
The trick is the sequence. Each repo builds on the one before it. Seven steps, zero tuition.
Layer 1: learn to read a binary
Ghidra, the NSA's reverse engineering framework. This is where everyone starts. github.com/NationalSecurityA…
radare2, the same skill but in the terminal. A UNIX-style toolset for the command line. github.com/radareorg/radare2
Layer 2: let a model do the reading
LLM4Decompile, an LLM that turns binary code back into readable C. The 9B v2 model is reported at 64.9% re-executability on its own benchmark. github.com/albertan017/LLM4D…
r2ai, an LLM inside radare2. This is the moment the AI starts reading the binary next to you. github.com/radareorg/r2ai
Layer 3: let the agent drive the tool
ida-pro-mcp, which connects IDA Pro to language models through MCP. github.com/mrexodia/ida-pro-…
reverse-engineering-assistant, the same idea for Ghidra, as an MCP server. github.com/cyberkaida/revers…
Layer 4: agents that go after anything
REA, which covers 35 target types: native binaries, APKs, firmware, websites, Electron apps. The pitch is "every finding backed by evidence." github.com/morluto/rea
Look at the shape of it. Humans learn the tool. Then a model reads the code. Then an agent operates the tool by itself. Then one agent goes after dozens of target types.
My take: reverse engineering is turning from a rare craft into something you can delegate. The skill that matters now is knowing which evidence to trust.
Only I can say this: [Describe your own first time opening a binary or an APK, and what you actually found. Replace with your own story if it isn't true.]
What I haven't verified: I haven't run any of these repos. The star totals, the 35-target-type count and the 64.9% figure come from the repos' own descriptions and haven't been independently confirmed. Benchmark numbers on the creators' own tests don't predict results on your binary. Only analyze software you own or are authorized to test.
So where does this go: do these agents make reverse engineers 10x faster, or do they just make it easier for everyone to trust wrong output faster?
REA is most dangerous thing on the internet right now...
It lets your AI agent reverse engineer any app, down to the binary
If you use it correctly, you can rebuild any feature you pay for, for FREE
In this article, I show you how:
14
42
1,328
Damn, I still can't believe it: one AI agent plus 20 free GitHub repos can now take apart an app you own, explain how it works, and build it again. Here's the whole stack.
THIS IS GETTING DANGEROUS: AN AGENT WITH 20 FREE REPOS DOES THE WORK OF A REVERSE ENGINEERING LAB. THE HARD PART ISN'T OPENING THE APP. IT'S PROVING THE COPY BEHAVES LIKE THE ORIGINAL.
The video shows the setup running: twenty tools around one terminal. Here's every repo, in five groups.
[01] The core: where the agent plugs in
REA: one MCP that connects the agent to everything below. github.com/morluto/reaGhidra: a free decompiler. github.com/NationalSecurityA…: gives your agent the controls for Ghidra. github.com/LaurieWired/Ghidr…: the same idea for IDA Pro. github.com/mrexodia/ida-pro-…
[02] Phones and desktop apps
jadx: turns an Android APK back into Java. github.com/skylot/jadxApktoo…: takes an APK apart and puts it back together. github.com/iBotPeaches/Apkto…: hooks into an app while it's running. github.com/frida/fridaILSpy: decompiles .NET. github.com/icsharpcode/ILSpy
[03] Binaries and the low level
radare2: a reverse engineering framework in your terminal. github.com/radareorg/radare2…: a debugger for Windows. github.com/x64dbg/x64dbgImHe…: a hex editor with its own pattern language. github.com/WerWolv/ImHexangr: a symbolic execution engine. github.com/angr/angr
[04] Traffic and runtime
mitmproxy: sits in the middle and reads the traffic. github.com/mitmproxy/mitmpro…: debug and edit .NET apps. github.com/dnSpyEx/dnSpyrizi…: the fork of radare2. github.com/rizinorg/rizinrad…: the debugger from Epic Games. github.com/EpicGamesExt/radd…
[05] Rebuild and check
awesome-ai-reverse-engineering: a list of 122 repos, each one graded. github.com/zhuyansen/awesome…: a curated list from the same person behind REA. github.com/morluto/awesome-r… workflows: ready-made investigation prompts that come with REA. clean-room loop: write a SPEC.md, then run oracles and checks until the rebuild matches.
The whole flow in one line:
binary -> REA -> SPEC.md -> rebuild -> oracle -> retry
Count the steps. Four of them are the agent working. The last two are what you can trust. The agent opens the binary, writes what it does into SPEC.md, builds a new version from that spec. Then the oracle decides: run the original and the rebuild on the same inputs and compare the outputs. Without that, "it matches" is just the agent's opinion, and a rebuild can compile, run and look identical while behaving differently in a spot nobody tested.
My take: the 20 repos are the cheap part. The check outside the model is what makes a rebuild worth keeping.
Before you open anything: back it up, record what the original does three times, change one thing, measure, keep or revert. Mark every claim as seen, inferred or unknown. And only take apart what you own or have the right to study.
Only I can say this: the first program I'd point this at is one I depend on and have never understood. (Replace with your own story if it isn't true.)
What I haven't verified: I haven't run this stack. Some GitHub paths were cut off in the list I worked from, so I completed them from the project names, and I couldn't open the pages from here to confirm. Check every link before you rely on it. The REA bridge, the graded list and the ready-made prompts are described as the list presents them.
When an agent says the rebuild matches, do you trust the agent, or do you trust the check?
Damn, I still can't believe it: 9 free GitHub repos hold about 170 skills for Claude. You need maybe five of them.
9 REPOS, ~268,000 STARS, ~170 FREE CLAUDE SKILLS. THE EDGE ISN'T INSTALLING THEM ALL. IT'S KNOWING WHICH ONE EARNED ITS PLACE.
I opened all nine repos and counted. Here's the stack, in the order that makes sense: from where your notes live to workflows that run on their own. Watch the video for the shortlist.
1. obsidian-skills (~50K stars). Teaches the agent your Obsidian formats: Markdown, Bases and JSON Canvas, plus defuddle, which cleans a web page down to plain text. github.com/kepano/obsidian-s…
2. notebooklm-py (~20K). Lets Claude Code query your NotebookLM notebooks. It's unofficial and, by its own README, built on undocumented Google APIs that can change without notice. github.com/teng-lin/notebook…
3. huggingface/skills (~11K). 25 skills for the Hugging Face ecosystem. The useful one for research: huggingface-papers, to find the paper behind a claim. github.com/huggingface/skill…
4. humanizer (~63K). Checks writing against 26 patterns of AI-sounding text. github.com/blader/humanizer
5. marketingskills (~58K). 53 marketing skills, from copywriting and copy-editing to launch and pricing. github.com/coreyhaines31/mar…
6. vercel-labs/agent-skills (~33K). 8 skills, including writing-guidelines, React best practices and deploy-to-vercel. github.com/vercel-labs/agent…
7. Agent-Skills-for-Context-Engineering (~18K). 18 skills about context. Start with context-fundamentals before you stack ten others. github.com/muratcankoylan/Ag…
8. n8n-skills (~6.6K). 14 skills for building n8n workflows with the n8n-mcp server. github.com/czlonkowski/n8n-s…
9. trailofbits/skills (~7.6K). 44 plugins from a security firm. modern-python, which covers uv, ruff and pytest, is just one of them. github.com/trailofbits/skill…
Now the number nobody says out loud. Add up the skills inside those nine repos and you get around 170. The shortlist in the video picks 32. That's the real skill: choosing.
One line from the humanizer README is worth reading twice: "Humanizer makes AI-written text sound like a person wrote it, without changing what it says." It's built for human readers, not for beating AI detectors.
My take: every skill you add is one more thing the model has to choose between. So test each one like a hire: same prompt, same file, with and without the skill. If the output isn't clearly better, uninstall it. One skill per week, judged by a check, not by a feeling.
Only I can say this: the first skill I'd keep is the one that saves me an hour I can actually count. (Replace with your own story if it isn't true.)
What I haven't verified: I haven't installed any of these. Star counts and skill counts are from the GitHub pages when I opened them, rounded, and they change daily. The shortlist of 32 comes from the list as shown, and I haven't tested any single skill. Which skills help depends on your work.
Do skills make you faster, or do they just make you feel faster?
Damn, I still can't believe it: Claude Code can run your whole session with the advisor switched off, and show you no error.
EVERYONE IS COPYING THE SONNET + OPUS ADVISOR SETUP. NOBODY IS CHECKING THAT THE ADVISOR IS ACTUALLY BEING CALLED.
The setup everyone is sharing: a cheaper model does the routine work, and a stronger one stays on call for the big decisions. You launch it with one line:
claude --model sonnet --advisor opus
The idea is sound. Sonnet writes the code, Haiku-level subagents explore in parallel, and Opus reads the whole transcript only at the moments that matter: before a plan, when the same error repeats, before "done". The flag is real, though it's not listed in claude --help, and it's experimental and works only on the Anthropic API.
Now read what the docs say about those three moments: the timing is "model-driven rather than rule-based". There's no setting to cap or force advisor calls. If you want more or fewer, you have to say so in your prompt. So "Opus steps in at three moments" is what usually happens, not a rule.
And there are quiet ways for the advisor to not run at all. If the API refuses the pairing, Claude Code resends the request without the advisor, and per the docs you see no error and get no advisor calls. If flag fetching is turned off, for example by a telemetry opt-out variable, the advisor stays off. A pairing where the advisor ranks below the main model isn't attached either.
Meanwhile the session looks perfectly healthy. Tests pass. Code gets written. The only thing missing is the thing you set it up for.
The takeaway works far beyond this feature: a safeguard you haven't seen run is a belief, not a safeguard. Check it with evidence the model can't talk you out of. Look for the "Advising" line in the transcript. Press Ctrl+O on it to read the guidance. Compare the advisor tokens in /usage against what you expect. Run one task where you know the advisor must be consulted and see whether it was.
One more thing to price in: each advisor call reads the full transcript from scratch, with no caching between calls. On long sessions that adds up, even if the docs say the pairing is usually cheaper than running the stronger model all the way through.
Only I can say this: the first thing I'd check in any setup I copy is whether the safety part actually fired. (Replace with your own story if it isn't true.)
What I haven't verified: I haven't run this setup myself. Everything about the flag, the pairing rules, the silent fallback and caching is from Anthropic's documentation for this experimental feature, and it may change. The speed claims and the "fork layer" part of the trick going around aren't in the docs, so I left them out.
Watch the video: a session that looks fine, an advisor that isn't there, and the one line that tells you.
Damn, I still can’t believe it: the most dangerous part of this 20-repo stack isn’t the tools, it’s the last two words of its loop
An agent plus 20 GitHub repos is now a full reverse engineering studio. Point it at any app you own and it explains itself.
THIS IS GETTING DANGEROUS: 20 FREE REPOS TURN AN AI AGENT INTO A REVERSE ENGINEERING LAB. THE TOOLS ARE THE EASY PART. TRUSTING THE REBUILD IS THE HARD ONE.
The whole stack, in five groups. Save this one.
[01] Analysis core
REA: one MCP that plugs the agent into everything else. github.com/morluto/rea Ghidra: the free decompiler. github.com/NationalSecurityA… GhidraMCP: lets your agent drive Ghidra. github.com/LaurieWired/Ghidr… ida-pro-mcp: hooks the agent into IDA Pro. github.com/mrexodia/ida-pro-…
[02] Mobile and apps
jadx: Android APK back into Java. github.com/skylot/jadx Apktool: take APKs apart and put them back together. github.com/iBotPeaches/Apkto… Frida: hook into an app while it runs. github.com/frida/frida ILSpy: decompile .NET. github.com/icsharpcode/ILSpy
[03] Binary and low level
radare2: reverse engineering inside your terminal. github.com/radareorg/radare2 x64dbg: the Windows debugger. github.com/x64dbg/x64dbg ImHex: a hex editor with its own pattern language. github.com/WerWolv/ImHex angr: symbolic execution. github.com/angr/angr
[04] Network and runtime
mitmproxy: sits in the middle and reads the traffic. github.com/mitmproxy/mitmpro… dnSpy: debug and edit .NET apps. github.com/dnSpyEx/dnSpy rizin: the radare2 fork. github.com/rizinorg/rizin raddebugger: the debugger from Epic Games. github.com/EpicGamesExt/radd…
[05] Rebuild and verify
awesome-ai-reverse-engineering: a graded list of AI reverse engineering repos. github.com/zhuyansen/awesome… awesome-reverse-engineering: a curated list from the same person who made REA. github.com/morluto/awesome-r… REA workflows: ready-made investigation prompts, they ship with REA clean-room loop: a written spec, oracles and checks until the rebuild matches
How it runs, in one line:
binary -> REA -> SPEC.md -> rebuild -> oracle -> retry
The last two words matter more than the 18 tools before them. An agent can rebuild something that compiles, runs and looks identical, and still behaves differently where nobody tested. "It matches" from the agent is an opinion. A check outside the model is not: run the original and the rebuild on the same inputs and compare the outputs.
My rule for anything I open: back it up first, record what the original does three times, change one thing, measure, keep or revert. Mark every claim as seen, inferred or unknown. Only open what you own or have the right to study.
Only I can say this: the first program I'd point this at is one I depend on and have never understood. (Replace with your own story if it isn't true.)
What I haven't verified: I haven't run this stack. The repo names and paths come from the list going around, and I couldn't check them on GitHub from here, so open each link before you rely on it. I couldn't confirm the REA bridge, the graded list or the ready-made prompts myself.
Watch the video: twenty tools in a ring around one terminal, and the oracle that decides if the rebuild is real.
Damn, I still can’t believe it: Claude Code can launch a team of agents that message each other directly, and the only thing that can stop a bad merge isn’t one of them.
Everyone is stacking agents right now. Almost nobody is asking who on the team is allowed to say "no".
CLAUDE CODE CAN NOW RUN A WHOLE TEAM OF AGENTS AT ONCE. 5 AGENTS CAN AGREE WITH EACH OTHER AND STILL SHIP A BUG.
The setup going around: one session leads, builder teammates work in parallel, a fast cheap model scouts the repo, and a stronger model sits on call to challenge the plan. Opus leads, Sonnet builds, Haiku scouts, Fable challenges. The teammates don't wait on a coordinator: they claim tasks from a shared list and message each other directly.
The feature behind it is real. You switch it on with one environment variable, CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1, and it's off by default. The lead splits the work, teammates take tasks, each one keeps its own context, and they talk through mailboxes. It's labeled experimental, and as described, it runs one team per session with no nested teams.
Now the part the screenshots skip. Every agent in that team is a model. Models reading each other's messages agree with each other faster than they check each other. Four confident "done"s is still just four opinions.
So the question to ask about any agent team isn't "how many agents". It's: what in this setup can fail the work without being persuaded? A test that exits 1. A type check. A diff against the real file. Something outside the models, that nobody on the team can talk out of its answer.
My rule for any team of agents: the models write, and one cheap external check judges. Add the stronger model on call for the three moments where a plan gets locked, a test breaks twice, and before you call it done. But the final yes comes from the check, not from the vote.
And watch the bill. A team means several sessions reading the same repo in parallel, so more agents usually means more tokens, not fewer. Count what a team costs on your own repo before you trust any claim about savings.
Only I can say this: the first thing I'd add to any agent team is the test that's allowed to fail it. (Replace with your own story if it isn't true.)
What I haven't verified: I haven't run agent teams myself. The flag, the mailbox and the shared task list come from third-party guides to the feature, not from my own run. I could not confirm a stronger model on call as adversary, the 340 tok/s figure, or the claim of fewer tokens. A guide to the feature says parallel sessions use a lot of tokens.
Watch the video: five agents, all say "done", and one test says no.
13
19
599
Damn, I still can’t believe it: the tool that took custom AI training off the cloud didn’t come from OpenAI or Google. It came from Kazakhstan.
Not OpenAI. Not Google. Not a lab with a billion-dollar budget. A developer from Kazakhstan built the open-source tool that just made training your own AI model easy.
A DEVELOPER FROM KAZAKHSTAN BUILT A TOOL THAT PUTS CUSTOM AI MODEL TRAINING ON A LAPTOP. ONE CONFIG FILE, ONE COMMAND.
Here's what the video says. Fine-tuning a large language model on your own data used to mean renting expensive cloud compute, writing custom training code and spending days debugging it. That's why almost nobody outside the big labs did it.
Then a developer from Kazakhstan shipped Soup, an open-source tool that replaces all of that with one simple config file and one command. The pitch is aimed at solo engineers: the heavy part of training is cut down so far that a basic laptop is enough to fine-tune a real large model.
It's built for switching, too. If you already train with another popular tool, one command migrates your setup, and a dry run warns you about leftover settings before anything starts. The video closes on the project's traction: Product Hunt, stars and downloads, all moving fast.
Look at who built it. The tool that lowers the barrier for everyone didn't come from the places AI news usually comes from. That's the real signal. When a model is no longer the moat, the edge moves to what you train it on: your notes, your code, your support tickets, your style. And it moves to anyone, anywhere, who ships first.
The project also does one thing most don't: its release notes admit a past bug where training looked healthy while the results were wrong, and say how it was caught. Easy training makes it easier to fool yourself, so keep a check that doesn't come from the model.
Only I can say this: the first thing I'd train a model on is the work I repeat every week. (Replace with your own story if it isn't true.)
What I haven't verified: I didn't run this tool, and I haven't confirmed where its author is from. Both that and the project's popularity are as the video presents them.
Watch the video: one developer, one config file, your own model. Link to the tool is in the comments.
14
30
622
what the actual f*ck, an agent can “find” 20,000 files on a phone in a minute. it takes one opened file to tell if any of it matters
"Claude Code found it on my device" isn't a finding. Here's the part that makes it one.
Every week there's a story of an agent digging something scary out of a phone or a laptop. Thousands of files. Timestamps. A hidden folder. Almost none of them show you how the author knows what's inside.
When I let an agent audit a backup of my own device, I give it one job: read, never change. Then I make it sort every single finding into four piles:
files with a timestamp and nothing readable inside (the scary ones)
previews and thumbnails of things I saw myself
files it can't say which process wrote
files it actually opened and showed me the contents of
Only the last pile counts as a finding. The other three are noise until something proves otherwise.
A timestamp proves a file exists. It doesn't prove what it is, who wrote it, or that a camera or a microphone was ever on. Only opening one file does that.
Here's the prompt I use. It works on a backup, so nothing on the device gets touched:
This is a backup of my own device. Read-only: do not delete,
move or change anything.
Task: audit the cache folders in this backup.
For every finding give me:
1. the path, file type, size and creation time
2. which app or process wrote it, if you can tell
3. the label: seen (you opened it and I can see the contents),
inferred (a guess, say on what basis) or unknown
Open at least one file from each folder and show me what it
actually is. Don't summarize. Show it.
End with a table: folder, number of files, how many are "seen".
The table at the end is the whole point. A folder with 20,000 files and 0 "seen" is not a scandal. It's an unopened box.
How many of the "found hidden files" stories you've read showed you what was inside one of the files?
Watch every line on that screen, and look for the one with a check next to it.





















