OpenOpen
AI tools and automation

@thevarunmayya

Three GitHub repos (150k stars combined) that extend coding agents: Hallmark (anti-AI-slop design skill), Cloudflare's security-audit skill, and AI Job Search (CV/cover letter agent).

420k plays · 30 Oct 2026

What they said

  1. Hallmark (~40,000 stars; frames show 40.5k): anti-AI-slop design skill for Claude Code, Cursor, Codex (and OpenCode). Picks 3 themes from a catalog of 50 and builds your page, then opens it in a real browser and fixes anything that looks AI-made before ship; can redesign an existing site; one-line install. Frames: npx skills add nutlope/hallmark -g (needs Node 18+, puppeteer for browser checks), hallmark lint localhost:4321, hallmark redesign ./src/app. Made by Together AI (repo by Nutlope).
  2. Cloudflare security-audit-skill (~51,000 stars; frames show 51.5k): turns the coding agent into a security auditor; maps the app and every attack entry point, sends separate hunter agents; each finding goes to a fresh verifier agent that tries to disprove it (finder never the checker); report of confirmed issues, needs-checking, and ruled-out false alarms. Cloudflare used it as the starting point for its own "vulnerability harness" (blog June 2026 by Dan Jones et al.). Install in one line, then type "security audit this codebase".
  3. AI Job Search (~67,000 stars; frames show 67.1k): turns Claude Code into a job application assistant. Fill profile once; searches portals, ranks by fit; tailored CV + cover letter each; a second agent researches the company and critiques the draft; checks CV like ATS; never invents skills. Creator (Mads Lorentzen, PhD, geophysicist) lost job late 2025, sent 69 applications, 20 interviews, now AI engineer.
  • Promise: more interesting repos weekly; asks "which would you actually use" in comments.

Try this

  • Developers and designers: Test a design skill that aims to reduce the "AI look" on a throwaway page first. The reel says it picks three themes from a catalogue of 50 and checks the result in a real browser. Do not apply it to a live site without a copy.
  • Developers: Run the security-audit skill read-only on your own code. In the reel it uses hunter agents and a separate verifier agent that tries to disprove each finding. Treat findings as proposals, not automatic fixes.
  • Everyone who installs agent skills: Read the source first, because the skill runs inside your coding agent.
  • Job seekers: The third repo builds a tailored CV and cover letter per role and says it never invents skills.
  • Creators: A weekly "3 repos" series is an easy format.

Links

  • Hallmark: https://github.com/Nutlope/hallmark (usehallmark.com)
  • security-audit-skill: https://github.com/cloudflare/security-audit-skill
  • AI Job Search: https://github.com/ai-job-search-dev/ai-job-search
  • Similar repo (comment): career-ops https://github.com/career-ops-hq/career-ops
  • Claude Code, Cursor, Codex, OpenCode.

Watch the original

Watch the full reel on Instagram by @thevarunmayya. Follow them for more.

00:00

/

00:00

More AI tools and automation

Liked this one? Get the next

When I find a reel worth acting on, you get the short version: what it says and what to do. Free, rare, one click to leave.

Rather have it done for you? Work with Tanish