Security tools and resources

Install a ready-made routine so your AI coding agent plans before it builds, tests its changes and reviews its own work from a fresh context.

Stroq scans your recent Claude Code and Codex sessions for keys that left your machine.

Get AI review comments pinned to specific lines of your Git changes before a colleague looks at them.

A skill you install into an AI coding agent so that "audit this codebase" runs a structured hunt for vulnerabilities rather than one opinionated read.

Find college-level computer science courses with video lectures, sorted by topic.

A command-line tool that boots a virtual iPhone on an Apple Silicon Mac using Apple’s own Virtualization framework together with the infrastructure Apple built for Private Cloud Compute research.

A free hands-on tutorial series on large language models, grown out of two courses at Shanghai Jiao Tong University on frontier language technology and AI security.

REA lets an AI assistant investigate an app, website, or program file and report what it finds with evidence.

The Mobile Verification Toolkit (MVT) is a set of command-line tools for gathering forensic evidence from Android and iOS devices that may help identify a spyware infection.

Open a compiled program for Windows, macOS or Linux and read a reconstructed version of its code to work out what it does.

OpenShell is NVIDIA’s open-source runtime for running AI agents safely: each agent gets an isolated workspace (a sandbox), and you write a policy saying what it may touch.

SkillSpector scans AI agent skills for vulnerabilities and malicious patterns, for developers who want to know whether a skill is safe before installing it.

Keep passwords, API keys and certificates in one encrypted store on your own servers, and control who can use each one.

A catalogue of skills — add-ons that teach an AI coding assistant a particular job — that the maintainers check before listing.

Test running apps for security flaws with this tool for developers and security teams, producing exploit evidence and repair guidance.

A skill router pack for AI coding assistants that encounter reverse-engineering tasks: an APK, a binary, encrypted frontend JavaScript, a CTF challenge, or a penetration-testing target.

MiMo-V2.6-Distill-Qwen-9B is a 9-billion-parameter model made by fine-tuning Qwen3.5-9B on data generated by Xiaomi's larger MiMo-V2.6 models, a technique called distillation where a smaller model is trained to imitate a bigger one's outputs rather than being trained on raw internet text from scratch.