by shenmintao · LLM Plugin · ★ 247
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 247 |
| Forks | 31 |
| Language | Python |
| Category | LLM Plugin |
| License | AGPL-3.0 |
| Quality Score | 67/100 |
| Last Updated | 2026-09-30 |
| Created | 2026-05-23 |
| Platforms | docker, python |
| Est. Tokens | ~17k |
Marginalia Chinese README: README.zh-CN.md Detailed design: DESIGN.md Turn your PDFs, notes, spreadsheets, logs, and archives into a private AI library that answers from original sources. Marginalia is a local-first research agent for people with messy private knowledge bases.
These tools work well together with marginalia for enhanced workflows:
Looking for a marginalia alternative? If you're comparing marginalia with other llm plugin tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Local AI-powered document search and editing with first-in-class hybrid retrieval, LLM answers, WebUI, REST AP
Open-source semantic document search (RAG) engine with FastAPI and instant self-hosted deployment
Self-hosted RAG platform for AI document search across GitHub, Notion, Google Drive, local files, and web sour
Open-source knowledge base for people and AI agents. Rich-text editing, hybrid search, GraphRAG, and MCP. Self
Local-first AI memory archive. Import ChatGPT, Claude, and Grok exports, generate semantic embeddings, and sea
Local-first AI PKM for coding conversations: import Claude Code/Cursor/Codex, distill notes, semantic search,
Explore other popular llm plugin tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: