# PandaSI-Labs/pandasi-agent > Deterministic offline evidence-policy checker for PandaSI: reads a JSON packet about a BNB Smart Chain token and returns RESEARCH or ABSTAIN, never authorizing execution. - Magnitude: 2.8 out of 10 — Cooling - Stars: 112 total · +1 star measured 2026-10-26, 00:54–02:18 UTC, ≈ 10 by evening - Star trust: star growth looks organic - Category: Security · Language: Python · Created: 2026-10-23 · Last push: 2026-10-24 - GitHub: https://github.com/PandaSI-Labs/pandasi-agent · Page: https://gitnova.dev/en/r/PandaSI-Labs/pandasi-agent ## Useful for - Check completeness of a BNB Smart Chain token JSON packet before further research - Run a deterministic policy check with no network access or keys - Record an ABSTAIN when packet data is stale or missing ## Why it’s here - Star-counter measurements on 2026-10-26 (UTC), 00:54–02:18: 111 → 112 stars (+1). This is the change over that interval. - Estimated end-of-day forecast: about +10 stars, using observed gains and the previous day. - The repository is 3 days old and already has 112 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet. - About 280 forks a day — people are taking the code. ## Star trust Star growth looks organic. Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer. ## Numbers - Forks: 33 - Issues and pull requests: 0 - Watchers: 0 - Average over the last week: 30 per day - Usual pace: too little history (under two weeks) - Stars in the last hour (measured): 1 ## Stars per day, last 4 days (oldest → newest, today is partial) 2026-10-23 … 2026-10-26: 73, 29, 10, 1 ## More in this category 1. **x86rc/unthemidator** — 6.7 · Early signal · Security · C++ · +15 stars measured 2026-10-26, 00:12–02:16 UTC, ≈ 205 by evening A universal unpacker for binaries protected with Themida, Code Virtualizer and WinLicense (v3.0–v4), with PE rebuild, import restoration and VM version identification. Full card: https://gitnova.dev/en/r/x86rc/unthemidator.md 2. **KillaBoi/StealMyBitcoin-PoC** — 6.3 · Early signal · Security · Python · Not enough measurements today A single-file Python proof of concept reproducing a PHP 8.4.26 memory-exhaustion exploit chain: leaks heap and code addresses via session cookies, then forges a HashTable to reach zif_system and run a command. Full card: https://gitnova.dev/en/r/KillaBoi/StealMyBitcoin-PoC.md 3. **songjianyang/xss-audit** — 6.2 · Early signal · Security · +18 stars measured 2026-10-26, 00:11–02:16 UTC, ≈ 163 by evening A static XSS audit skill for React, TypeScript and JavaScript codebases with 14 layers of checks, from DOM injection to Trusted Types, writing findings to xss-audit-report.md. Full card: https://gitnova.dev/en/r/songjianyang/xss-audit.md 4. **hevnsnt/CVEngine** — 6.1 · Early signal · Security · Python · +24 stars measured 2026-10-26, 00:12–02:16 UTC, ≈ 171 by evening Self-hosted external attack surface assessment platform: discovers internet-facing assets, fingerprints services and versions, matches live CVEs, and validates findings with safe read-only checks. Full card: https://gitnova.dev/en/r/hevnsnt/CVEngine.md 5. **cloudflare/security-audit-skill** — 5.8 · Peaking · Security · JavaScript · +188 stars measured 2026-10-26, 00:11–02:16 UTC, ≈ 1,866 by evening A coding-agent skill that turns the agent into a security auditor, running a multi-phase code audit with independently verified, machine-readable findings. Full card: https://gitnova.dev/en/r/cloudflare/security-audit-skill.md --- Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score. Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast. Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself. Data as of 2026-10-26 02:26 UTC, updated every 30 minutes.