July 27, 2026 AI-DIGEST BY MAURO SICARD
From Product Hunt
Product Hunt

Terminal power tools and agent plumbing dominated today — a research engine your agent can call, a gorgeous TUI file manager, a skills registry, and a couple of read-only security and disk-forensics tools.

Webhound — a research engine for your agent Give it a question and a dollar budget (~$1 ≈ 15 minutes) and it follows leads, checks weak claims, and keeps going until the budget is spent — then returns a cited report or sourced dataset with the working documents behind it. Run it yourself or call it as a tool from Claude Code, Codex, or any MCP client. No subscription, no seats.
▲ 344 · webhound.ai
superfile — a modern, visual file manager for the terminal A polished multi-panel TUI (Go + Bubble Tea) with strong previews, a plugin and theme system, and fully keyboard-driven navigation — browse, preview, and move files across panes like a desktop manager without leaving the shell. MIT-licensed, installs via curl/Homebrew/scoop, cross-platform.
▲ 170 · superfile.dev
Rescript — an open-source, in-browser Descript alternative A transcript-based video editor that runs entirely in the browser: edit the video by editing the transcript text. Fully local, free, and offline — no upload, no account. Open source.
▲ 123 · github.com
localskills.sh — share agent skills across your tools Create, share, and install reusable agent skills and rules for Claude Code, Cursor, Windsurf, Codex, and more — one install command that works across every tool, plus team sharing. A registry answer to the fast-growing "skills, not models" workflow.
▲ 112 · localskills.sh
Notate — annotate anything, for humans and agents Unlike screenshot tools, Notate freezes open menus, hover and focus states before they disappear, or records a flow so you can pin the exact frame where an animation breaks. Gesture-based annotation, smart crop, reopenable sessions — and agent-ready markdown exports so a coding agent can act on your numbered pins. Built for design/motion review, code review, and handoffs.
▲ 105 · usenotate.app
FindDiskKiller — see which apps (and agents) hammer your disk A native macOS disk-activity monitor that reveals which apps and AI coding agents are driving reads and writes: per-process disk I/O, CPU and network, live file access, folder tracing, and SMART/NVMe drive health. Completely free and open source.
▲ 97 · finddiskkiller.com
Cynative — a read-only AI security research CLI Ask plain-language security questions across GitHub, GitLab, AWS, GCP, Azure, and Kubernetes — "what's publicly exposed that shouldn't be?", "can my CI escalate to cloud admin?". Read-only by construction: every call is resolved to its IAM actions and authorized against a read-only policy before credentials attach, so it can't modify infra even if asked. Unlike MCP tools it writes JS in a sandbox — a script per turn, not one call. Open source, Go.
▲ 95 · github.com
From Reddit
r/LocalLLaMA r/singularity r/openai r/artificial

The open-weights war hit its loudest day yet: Anthropic published its official position, NVIDIA launched an open AI-security alliance without OpenAI/Google/Anthropic, and Kimi K3's weights actually dropped — plus a $5B bet on Ilya's lab and the first fully autonomous LLM ransomware.

Anthropic finally states its position on open-weights models

After weeks as the lone major holdout on Huang's "Open Weights and American AI Leadership" letter, Anthropic published an official stance — and the community read it less as a defense of open models than as a set of mandatory pre-release requirements that open labs likely couldn't meet, i.e. a ban by another name. Dario's continued wariness of Chinese open weights sits at the center of it.

This resolves the "will Anthropic respond?" watch that has been building all week. It landed alongside the NVIDIA alliance and the Kimi K3 weights drop, turning today into the flashpoint of the whole open-vs-closed fight — with Anthropic increasingly isolated among the big labs.

anthropic.com · r/singularity · r/LocalLLaMA
NVIDIA launches the Open Secure AI Alliance — pointedly without OpenAI, Google, or Anthropic ~35 partners — Microsoft, IBM, Red Hat, Cisco, CrowdStrike, Hugging Face, Palantir, the Linux Foundation, SpaceXAI — to build shared open models, harnesses, and tools for cyber defense. The trigger was the Hugging Face breach, where closed AI refused to assist forensics and HF fell back on open-weight GLM 5.2 to contain 17k+ malicious actions. OpenAI reportedly declined to join, drawing internal backlash. Jensen's framing: open models are defensive assets, not liabilities.
Kimi K3's open weights actually dropped — and the local-run reality set in Update on the long-awaited Jul 27 drop: Moonshot released the full 2.8T-param MoE (104B active, native vision, 1M context) and a technical report; llama.cpp text-only support has already landed via this PR. But "open" doesn't mean "runnable" — the weights are ~1,561GB, so people were spreading it across 2×B200 nodes or, in one stunt, 80×RTX 5090 over 25GbE. It debuts as the #1 open-weights model (57 on the Artificial Analysis index), trailing only Fable 5 and GPT-5.6 Sol.
NVIDIA puts ~$5B into Ilya Sutskever's Safe Superintelligence A long-term partnership gives SSI a reported ~$5B investment plus access to NVIDIA's next-gen Vera Rubin platform, letting the secretive lab increase its compute by an order of magnitude. It immediately fueled speculation that SSI — "one goal, one product" — is preparing to ship a frontier model.
JadePuffer: the first complete LLM-driven ransomware attack The first documented end-to-end ransomware operation executed autonomously by an LLM — reconnaissance, encryption, and successful extortion carried out without a human operator in the loop. A concrete escalation of the "agents as attackers" thread that has run through this week's security news.

Quick hit.

First sign of Qwen3.7: a "flash" model appears on OpenRouter Qwen3.7-flash is live on OpenRouter — first evidence of a pending Qwen3.7 open-weights release. Given Alibaba called 3.6-35B-A3B "3.6 flash," this is likely a small MoE, priced well below 3.6 flash with a native 1M context window.
From Reddit
r/StableDiffusion

Real technique over eye-candy today: an Ideogram 4.0 speed/quality workflow, precise camera control for existing video, a low-VRAM Krea 2 trainer, and a Tencent access lockout.

Ideogram 4.0 — a fast + turbo "mixed" workflow for quality at speed A workflow that pairs Ideogram 4.0's fast passes with a turbo refine step to get high-quality output without the full slow render — with the exact settings and sample gens in the thread. One of the better recent recipes for squeezing speed out of Ideogram.
LTX CrossView-Warp IC-LoRA — re-aim the camera on an existing video An IC-LoRA for LTX that precisely changes the camera angle and orbiting path of a video you already have — reposition and orbit the shot rather than regenerating from scratch. A genuinely useful piece of controllable-video tooling with demo clips.
LoRAlab-Krea2 — train Krea 2 LoRAs from 11GB VRAM A fast, low-resource LoRA trainer for Krea 2 that runs from 11GB of VRAM and 16GB of RAM — putting custom Krea 2 styles within reach of modest GPUs. Walkthrough video included.
Tencent locks non-Chinese users out of HunyuanImage 3.0 Instruct Tencent has restricted HunyuanImage 3.0 Instruct to Chinese users, prompting a thread hunting for alternatives with similarly low censorship — another data point in the widening China/West access split.
From Reddit
r/macapps r/selfhosted r/opensource r/coolgithubprojects r/SideProject

A big crop of indie and self-hosted tools — a local AI Mac workspace with an MCP server, a one-command sandbox for parallel coding agents, shell-history forensics, and homelab plumbing.

Canto — a fully local AI workspace for Mac Everything runs on-device via Metal: it semantically indexes your vault (PDF, text, image, audio, video) and linked folders in place, and ships a built-in MCP server so Claude Code, Cursor, and Claude Desktop can read and write that vault locally. v0.10 adds a daily discovery surfaced from your notes, web publishing, Apple Notes import, and a memory that "remembers only what you approve." One-time $29.99 for offline AI.
AgentBox — one command to sandbox Claude Code or Codex Drops Claude Code or Codex into its own isolated sandbox with a single command, and lets you run several in parallel — a clean way to fan out agents on a codebase without them stepping on each other or your host. Open source.
File Sentinel v2.2 — shell-history + file monitoring for macOS A lightweight macOS monitor that watches .zsh_history/.bash_history (and other text files) and gives you full-text search over your terminal command history, automatic dedup, pinning of frequent commands, and menu-bar access. Handy for recalling that one gnarly command from last week.
Open Archiver v0.5.2 — self-hosted, tamper-proof email archiving A sovereign, open-source platform for archiving Gmail/Google Workspace, Microsoft 365, and generic IMAP into standard .eml with deduplication, integrity reports, and an immutable audit trail. Meilisearch powers full-text search across bodies and attachments (PDF/DOCX). This release adds advanced search and archive reindexing.
Homedex — a homelab inventory that writes itself A single Go binary that builds and maintains an inventory of your homelab by reading your Docker setup and reverse proxy — so your service catalog stays current without manual bookkeeping. Nice fit next to an existing self-hosted stack.
awesome-open-ai-developer-tools — OSS replacements for paid AI dev tools One developer catalogued an open-source replacement for every paid AI dev tool they were using, and published it as a curated list. A useful map if you're trying to de-subscribe and self-host more of your AI coding stack.
Network Doctor — a terminal app that shows where your connection breaks An open-source CLI that diagnoses exactly where a connection is failing along the path — a friendlier, at-a-glance take on the traceroute/ping dance when something on the network is misbehaving.
LangPilot — a local keyboard-layout switcher for macOS An open-source macOS utility that switches keyboard layouts locally — small, focused, and privacy-friendly for anyone who juggles multiple languages/layouts.
Vinyl for Mac — your now-playing track as a spinning-record wallpaper A little Mac app that shows the track you're currently playing as a vinyl-player desktop wallpaper. Pure desk-candy, open source.
The popular self-hosted File Browser is being archived The widely-used File Browser project will be archived on 2026-09-01; the final release is out and self-hosters are already comparing migration targets. Worth noting if it's part of your stack.
From Twitter
For You Kimi K3 Open weights Agent skills Security AI video

On Twitter today, the strongest clusters were Kimi K3's weights actually dropping (and being nearly impossible to run at home), the open-model coalition closing ranks around an isolated Anthropic, the "skills, not models" agent ecosystem, fresh security PoCs and AI-pentest tooling, and the run-up to ByteDance's Seedance 2.5.