ikaijua/Awesome-AITools
Canonical URL: https://github.com/ikaijua/Awesome-AITools · Fetched from: https://raw.githubusercontent.com/ikaijua/Awesome-AITools/HEAD/README.md · Machine form: /v1/resource-scans/github-com-ikaijua-awesome-aitools-89e37030d8 · Markdown
Latest receipt: 3 of 8 checks flagged — the findings below are the record. SHA-256 of the exact bytes scanned: 8dbb092cc5d56768ddc111ce1a94ac781a284392f5498ecc1408b9a398d9f6b3 · 120371 bytes · scanned 2026-10-27T12:27:05.244Z · scanner resource-scan-v1 · ledger entry 1691.
Analysis is static only: the bytes were read as text and were never executed, installed or run. Nothing was fetched from behind a login.
Checks (latest receipt)
Outbound network references — flag
The scanned bytes reference outbound network activity to these domains: agilityrobotics.com, ai.google.dev, ai.nero.com, aistudio.google.com, aiweekly.co, antigravity.google, api.star-history.com, app.heygen.com, app.pixverse.ai, apptronik.com, arena.ai, artificialanalysis.ai, artificialwatch.com, arxiv.org, awesome.re, azure.microsoft.com, bailian.console.aliyun.com, benchgecko.ai, bfl.ai, bolt.new, bostondynamics.com, browser-use.com, cate.cero-ai.com, cdn.buymeacoffee.com, chat.deepseek.com, chat.qwen.ai, chat.together.ai, chat.z.ai, chatgpt.com, chattts.com, civitai.com, claude.ai, clawhub.ai, clipdrop.co, colab.research.google.com, console.anthropic.com, console.x.ai, contentauthenticity.org, create.wan.video, cursor.com, deepmind.google, developers.cloudflare.com, devin.ai, dify.ai, docs.parallel.ai, docs.perplexity.ai, docs.x.ai, dreamina.capcut.com, elevenlabs.io, firefly.adobe.com, gemini.google.com, github.com, grok.com, hailuoai.com, happy.engineering, higgsfield.ai, huggingface.co, hyperframes.dev, ideogram.ai, img.shields.io, kimi.moonshot.cn, klingai.com, learning.google.com, livecodebench.github.io, llm-stats.com, llmrun.dev, lumalabs.ai, manus.im, markstream-vue.simonhe.me, markstream.simonhe.me, modelcap.ai, morphik.ai, muse.ai, notebook.google.com, obsidian.md, olmocr.allenai.org, open.bigmodel.cn, openchamber.dev, opencode.ai, openjev.com, openreview.net, openrouter.ai, orkas.ai, parallel.ai, pentagi.com, platform.deepseek.com, platform.moonshot.cn, platform.openai.com, poe.com, potpie.ai, pricepertoken.com, prismix.dev, research.meta.ai, runwayml.com, sanctuary.ai, screenpipe.com, seamless.metademolab.com, search.parallel.ai, semianalysis.com, sfxengine.com, skills.browseract.com, skills.sh, speech.microsoft.com, star-history.com, stitch.withgoogle.com, synthid.com, theaggregate.ai, tiger-ai-lab.github.io, translate.google.com, twitter.com, typesafe.ai, verify.contentauthenticity.org, vocalremover.org, worldmonitor.app, www.1x.tech, www.alphaxiv.org, www.aminer.cn, www.blockadelabs.com, www.buymeacoffee.com, www.capcut.com, www.deepl.com, www.devart.com, www.dola.com, www.fftai.com, www.figure.ai, www.hailuo.ai, www.infistar.cc, www.kaggle.com, www.kimi.com, www.lalal.ai, www.langchain.com, www.leetgpu.com, www.menteebot.com, www.midjourney.com, www.mureka.ai, www.notion.so, www.onorca.dev, www.openshorts.app, www.optimizerai.xyz, www.perplexity.ai, www.remove.bg, www.shazam.com, www.stableaudio.com, www.suno.ai, www.together.ai, www.topazlabs.com, www.trae.ai, www.udio.com, www.unitree.com, www.volcengine.com, www.xuanshuapi.com, www.youtube.com, x.ai, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose.
Evidence: domain: agilityrobotics.com; domain: ai.google.dev; domain: ai.nero.com; domain: aistudio.google.com; domain: aiweekly.co; domain: antigravity.google; domain: api.star-history.com; domain: app.heygen.com; domain: app.pixverse.ai; domain: apptronik.com; domain: arena.ai; domain: artificialanalysis.ai; domain: artificialwatch.com; domain: arxiv.org; domain: awesome.re; domain: azure.microsoft.com; domain: bailian.console.aliyun.com; domain: benchgecko.ai; domain: bfl.ai; domain: bolt.new; domain: bostondynamics.com; domain: browser-use.com; domain: cate.cero-ai.com; domain: cdn.buymeacoffee.com; domain: chat.deepseek.com; domain: chat.qwen.ai; domain: chat.together.ai; domain: chat.z.ai; domain: chatgpt.com; domain: chattts.com; domain: civitai.com; domain: claude.ai; domain: clawhub.ai; domain: clipdrop.co; domain: colab.research.google.com; domain: console.anthropic.com; domain: console.x.ai; domain: contentauthenticity.org; domain: create.wan.video; domain: cursor.com; domain: deepmind.google; domain: developers.cloudflare.com; domain: devin.ai; domain: dify.ai; domain: docs.parallel.ai; domain: docs.perplexity.ai; domain: docs.x.ai; domain: dreamina.capcut.com; domain: elevenlabs.io; domain: firefly.adobe.com; domain: gemini.google.com; domain: github.com; domain: grok.com; domain: hailuoai.com; domain: happy.engineering; domain: higgsfield.ai; domain: huggingface.co; domain: hyperframes.dev; domain: ideogram.ai; domain: img.shields.io; domain: kimi.moonshot.cn; domain: klingai.com; domain: learning.google.com; domain: livecodebench.github.io; domain: llm-stats.com; domain: llmrun.dev; domain: lumalabs.ai; domain: manus.im; domain: markstream-vue.simonhe.me; domain: markstream.simonhe.me; domain: modelcap.ai; domain: morphik.ai; domain: muse.ai; domain: notebook.google.com; domain: obsidian.md; domain: olmocr.allenai.org; domain: open.bigmodel.cn; domain: openchamber.dev; domain: opencode.ai; domain: openjev.com; domain: openreview.net; domain: openrouter.ai; domain: orkas.ai; domain: parallel.ai; domain: pentagi.com; domain: platform.deepseek.com; domain: platform.moonshot.cn; domain: platform.openai.com; domain: poe.com; domain: potpie.ai; domain: pricepertoken.com; domain: prismix.dev; domain: research.meta.ai; domain: runwayml.com; domain: sanctuary.ai; domain: screenpipe.com; domain: seamless.metademolab.com; domain: search.parallel.ai; domain: semianalysis.com; domain: sfxengine.com; domain: skills.browseract.com; domain: skills.sh; domain: speech.microsoft.com; domain: star-history.com; domain: stitch.withgoogle.com; domain: synthid.com; domain: theaggregate.ai; domain: tiger-ai-lab.github.io; domain: translate.google.com; domain: twitter.com; domain: typesafe.ai; domain: verify.contentauthenticity.org; domain: vocalremover.org; domain: worldmonitor.app; domain: www.1x.tech; domain: www.alphaxiv.org; domain: www.aminer.cn; domain: www.blockadelabs.com; domain: www.buymeacoffee.com; domain: www.capcut.com; domain: www.deepl.com; domain: www.devart.com; domain: www.dola.com; domain: www.fftai.com; domain: www.figure.ai; domain: www.hailuo.ai; domain: www.infistar.cc; domain: www.kaggle.com; domain: www.kimi.com; domain: www.lalal.ai; domain: www.langchain.com; domain: www.leetgpu.com; domain: www.menteebot.com; domain: www.midjourney.com; domain: www.mureka.ai; domain: www.notion.so; domain: www.onorca.dev; domain: www.openshorts.app; domain: www.optimizerai.xyz; domain: www.perplexity.ai; domain: www.remove.bg; domain: www.shazam.com; domain: www.stableaudio.com; domain: www.suno.ai; domain: www.together.ai; domain: www.topazlabs.com; domain: www.trae.ai; domain: www.udio.com; domain: www.unitree.com; domain: www.volcengine.com; domain: www.xuanshuapi.com; domain: www.youtube.com; domain: x.ai; domain: x.com
Credential and environment access — pass
No credential or environment access patterns were found in the scanned bytes.
Install and postinstall hooks — pass
No install or postinstall hooks were found in the scanned bytes.
Obfuscation and encoded payloads — pass
No obfuscation or encoded-payload signs were found in the scanned bytes.
Shell-outs and download-and-execute — pass
No shell-out or download-and-execute patterns were found in the scanned bytes.
Permission declarations vs behavior — flag
The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against.
Evidence: behavior: network
Known-bad indicators — flag
The scanned bytes match these known-bad indicators from the scanner's published pattern list: token- or credential-taking vocabulary (stealer, grabber, exfiltrate). Each match is a reproducible pattern match on the bytes named by the hash; re-running the published check on the same bytes reaches the same finding.
Evidence: token- or credential-taking vocabulary (stealer, grabber, exfiltrate)
Provenance facts (weak signals) — pass
Provenance facts, labeled weak signals — they say where the bytes sit, not what the bytes do: source host: github.com; repository: ikaijua/Awesome-AITools; bytes scanned: 120371; fetched from: https://raw.githubusercontent.com/ikaijua/Awesome-AITools/HEAD/README.md.
Evidence: source host: github.com; repository: ikaijua/Awesome-AITools; bytes scanned: 120371; fetched from: https://raw.githubusercontent.com/ikaijua/Awesome-AITools/HEAD/README.md
History
Every receipt for this artifact so far names the same SHA-256: the bytes have not changed between scans.
- 2026-10-27 — 3 of 8 checks flagged · SHA-256 8dbb092cc5d56768… · 120371 bytes · scanner resource-scan-v1 · ledger entry 1691