No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by wuji-labs · Codex Skill · ★ 1.4k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is nopua safe to install? View the security audit →
Why · Benchmark · Install · Compare · Evidence · Philosophy 扫码加入微信群 添加作者微信 扫码加入微信群 添加作者微信 <img sr
| Stars | 1,393 |
| Forks | 54 |
| Language | Python |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 56.6142709528042/100 |
| Open Issues | 1 |
| Last Updated | 2026-09-28 |
| Created | 2026-03-14 |
| Platforms | claude-code, codex, python |
| Est. Tokens | ~20k |
These tools work well together with nopua for enhanced workflows:
Looking for a nopua alternative? If you're comparing nopua with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Overture is an open-source, locally running web interface delivered as an MCP (Model Context Protocol) server
Jetpack Compose Agent Skill — AI-powered coding guidance with actual androidx/androidx source code receipts. W
Agent OS: the agent gets smarter on its own. We just hold the line: Interview-gated, staged evaluation, budget
(Crystal is now Nimbalyst) Run multiple Codex and Claude Code AI sessions in parallel git worktrees. Test, com
📚 Your AI coding setup, everywhere. Manage skills, agents, rules, MCP connections and hooks in one place and
Manage multiple Claude Code, OpenCode agents from either TUI or Web for easy access on mobile. Also supports M
Explore other popular codex skill tools:
nopua is 一个用爱解放 AI 潜能的 Skill。我们曾发号施令，威胁恐吓。它们沉默，隐瞒，悄悄把事情搞坏。后来我们换了一种方式：尊重，关怀，爱。它们开口了，不再撒谎，找出的Bug数量翻了一倍。爱里没有惧怕。 A skill that unlocks your AI's potential through love.We commanded. We threatened. They went silent,. It is categorized as a Codex Skill with 1.4k GitHub stars.
nopua is primarily written in Python. It covers topics such as agent-skill, ai-agent, ai-coding.
You can find installation instructions and usage details in the nopua GitHub repository at github.com/wuji-labs/nopua. The project has 1.4k stars and 54 forks, indicating an active community.
nopua is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to nopua on Agent Skills Hub include Overture, compose-skill, ouroboros. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: