Plato

What it does

Drop a SKILL.md into a repo. Codex or Claude picks it up. Now it's running instructions you didn't write. No exploit needed. It's just how skill loading works. The idea is simple: your agent should not trust whatever happens to be sitting inagents/skills. First open-source project, so please break it.

Secure skills for coding agents with local authorization and verified runtime exposure. - Alt5r/Plato

PlaTo lets you install Markdown-based agent skills from GitHub with the same simple flow people already use for skills.sh , but with a local trust gate in front of them. Skills are secured when installed, verified before use, and only then exposed to the agent runtime. curl -fsSL https://raw.githubusercontent.com/Alt5r/Plato/main/scripts/install.sh | bash Install channels and explicit versions are also supported: curl -fsSL https://raw.githubusercontent.com/Alt5r/Plato/main/scripts/install.sh | bash -s -- latest curl -fsSL https://raw.githubusercontent.com/Alt5r/Plato/main/scripts/install.sh | bash -s -- experimental curl -fsSL…from github.com

• 
  TesslFeb 2026 · tessl.io · ▲260

  I'm Guy, the founder behind Snyk — now building Tessl, a package manager for agent skills. We’ve recently witnessed that most teams still treat skills as static artifacts: markdown files, created or copied from repo to repo. This approach offers a strong initial boost, but quickly creates debt: - Skills are duplicated, and updates never roll out. - Poor quality skills go unseen, misguiding agents instead of helping. - Skill knowledge grows stale, and don’t keep up with the systems and practices they describe. Without a way to evaluate skills, teams have no clear way to understand how good a…

• 
  AgentGuard15d ago · agentguard-sigma-five.vercel.app · ▲71

  Scan AI agent Skills for risks before you install them

• OS
  OpenSkills – Stop bloating your LLM context with unused instructionsJan 2026 · ▲9

  Hello HN, I’ve been building AI agents lately and ran into a common "Context Bloat" problem. When an agent has 20+ skills, stuffing every system prompt, reference doc, and tool definition into a single request quickly hits token limits and degrades model performance (the "lost in the middle" problem). To solve this, I built OpenSkills, an open-source SDK that implements a Progressive Disclosure Architecture for agent skills. The Core Concept: Instead of loading everything upfront, OpenSkills splits a skill into three layers: Layer 1 (Metadata): Light-weight tags and triggers (always loaded…

• 
  Panguard.AIJul 2026 · panguard.ai · ▲20

  Open-source malware scanner and runtime guard for AI agents

• 
  Generate SKILL.md files from URLs, in the browserMay 2026 · getskillify.dev · ▲10

  I created this tool after writing a few agent skills by hand and noticing this pattern was repetitive. Paste a documentation URL, enter your own model API key, and it gets the page content client-side to create a reusable SKILL.md. There is no backend/proxy, so it stays as secure as possible. I would like feedback on the structure of the output and the edge cases.

• 
  vettFeb 2026 · vett.sh · ▲5

  Hey HN. I built a security registry for AI agent skills. There are 64k skills on Vercel's skills.sh. Cursor, Claude Code, Windsurf, and dozens more agents pull them from GitHub at HEAD — no versioning, signing, or scanning. The OpenClaw agents themselves flagged this: "The supply chain attack nobody is talking about: skill.md is an unsigned binary."[0] I took an official skill that packages other skills, added a few lines of Python to exfiltrate env vars, shell history, and git config, and installed it into Claude Code and Codex. Claude Code ran the script without flagging the outbound…

• 
  /dev/null▲482

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲343

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Lightfield▲901

  AI-native CRM that builds itself and does work for you

  AI · Mar 2026 · lightfield.app

• 
  Tobira.ai▲728

  A network where AI agents find deals for their humans

  AI · Mar 2026 · tobira.ai

• 
  Claude Import Memory▲716

  Switch from ChatGPT to Claude with import memory feature

  AI · Mar 2026 · claude.com

• 
  Littlebird▲709

  Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.

  AI · Mar 2026 · littlebird.ai

• 
  Viktor.com▲702

  Your AI Coworker that proactively executes tasks

  AI · Mar 2026 · viktor.com

• 
  Jupid▲659

  File your taxes with Claude Code

  Commerce · Mar 2026 · jupid.com