by cactus-compute · LLM Plugin · ★ 14.4k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
pip install cactus-needle
pip install "cactus-needle[train]"Taken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 14,444 |
| Forks | 1,010 |
| Language | Python |
| Category | LLM Plugin |
| License | Apache-2.0 |
| Quality Score | 66/100 |
| Open Issues | 5 |
| Last Updated | 2026-11-02 |
| Created | 2026-02-24 |
| Platforms | python |
| Est. Tokens | ~15k |
A foundation model for mobiles, wearables, robots, smart home, automotive and microcontrollers. The whole model is a single 8-29 MB binary built on our Simple Attention Network, and we trade general chat capacity to beat models 10x its size on mobile tool calls and match 2-3x bigger models on extraction.
These tools work well together with needle for enhanced workflows:
Looking for a needle alternative? If you're comparing needle with other llm plugin tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to
All-in-one LLM CLI tool featuring Shell Assistant, Chat-REPL, RAG, AI Tools & Agents, with access to OpenAI, C
Klavis AI: MCP integration platforms that let AI agents use tools reliably at any scale
ACI.dev is the open source tool-calling platform that hooks up 600+ tools into any agentic IDE or custom AI ag
Demystify AI agents by building them yourself. Local LLMs, no black boxes, real understanding of function call
The Ruby-native AI framework. Chats, agents, tools, images, audio, and video through one consistent API, in pl
Explore other popular llm plugin tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: