Triage Python Packages

binary-refinery

High Octane Triage Analysis

modaic

Python SDK for Modaic

torikago

Torikago (鳥籠) — static triage for an unknown executable. Identifies, unpacks and reports indicators, and never runs the target.

malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

modaic-client

Python SDK for Modaic

triage-mcp

MCP server over my AI ticket triage queue: four read-only tools for the queue and human decision log

mcp-laya

Safe-by-default MCP server for Laya — fast, local, non-autoregressive typed decisions (classify / score / yes-no) for AI agents, in 100+ languages.

llm-cheap-filter

Deterministic prefilter and cheap-to-chief escalation pipeline for reducing expensive LLM calls in agentic workflows.

airflow-pytest-plugin

See your Airflow test runs at a glance — an Airflow 3 plugin that archives airflow-pytest-operator JUnit results and serves a clean, filterable dashboard with per-test tracebacks. Zero database, no cleanup tuning.

laya-decision-api

把本地 System-1 决策模型（Laya）包成 HTTP 服务：意图分类 / 工单分派 / LLM 路由 / 内容审核，离线零 token、不生成文字；Apple Silicon(MLX) 与 Linux(torch) 双后端；可导出 OpenAPI 3.0/3.1；Java/TS/Python 零依赖 SDK。

willitbite

Decide which of ruff's loop-closure and mutable-default warnings can actually reach you at runtime

triage

General Purpose Risk Modeling and Prediction Toolkit for Policy and Social Good Problems

appmemdumper

Forensics triage tool relying on Volatility and Foremost

microresolve

The pre-LLM reflex layer for AI agents. library with a live training server, microsecond latency, learns from LLM corrections — System 1 to your LLM's System 2.

nikasha

Proof, not prose. Fact-check vulnerability reports against the real code at the exact version they name: an evidence dossier and sandboxed reproduction for incoming reports.

relv

Adopt. Steal. Skip. Then look again, one layer out. Profile-grounded tool triage + adjacency mining for the agent-tool firehose. CLI, BYOK, ~5¢/triage. MIT.

collate

Aggregation SQL Query Builder

ransomtriage

Offline, privacy-preserving first-hour ransomware triage: identify the family, extract IOCs, find verified free decryptors. Nothing is uploaded.

pytest-triage

AI-powered failure triage for pytest — every failing test gets a verdict (regression · flaky · env · test bug) with a hypothesis and a fix, instead of a wall of tracebacks.

substantiate

An evidence gate for open-source contributions: check whether the claims in an issue, PR, or security report correspond to anything real.

model-catwalk

Training, testing, and evaluating machine learning classifier models

hermes-inbox-organizer

Autonomous Gmail triage as an in-process Hermes plugin

noisegate

A policy-aware AI triage assistant that evaluates bug bounty report quality, scope alignment, and impact—so researchers submit better reports and triagers focus on real vulnerabilities.

ot-pcap-triage

Offline passive OT PCAP triage helper using tshark.