GitHub Trending July 2026: Superpowers Hits 250K Stars

Only about six repositories in GitHub's entire history have crossed 250,000 stars. On July 9, obra/superpowers became one of them, and the rest of this week's trending chart tells the same story from five different angles: agents aren't the experiment anymore, they're the platform. Here's what actually moved, with numbers.

Superpowers Crosses 250,000 Stars and Enters GitHub's Elite Tier

Jesse Vincent's superpowers, the agentic skills framework for Claude Code, hit 250,000 stars on July 9 and sat at roughly 254,696 stars with over 941,000 plugin installs by mid-July, according to this Medium breakdown. That puts it in a club previously reserved for freeCodeCamp and sindresorhus/awesome.

The comparison is worth sitting with. Those two repos took the better part of a decade to accumulate their stars. Superpowers did it in months, and unlike an awesome-list, it has an install metric attached: 941k installs means people aren't just bookmarking it, they're running it inside their daily workflow. Probably yours too, if you're on Claude Code.

The install-to-star ratio is the real signal here. Plenty of repos collect stars as social currency. A framework with nearly a million installs is infrastructure. Claude Code plugins now have their own de facto standard library, and superpowers is it.

Why it matters: star counts can be hype, but install counts are usage, and superpowers has both at record scale.

mattpocock/skills Adds 10,651 Stars in a Single Week

The fastest riser of the week was mattpocock/skills, which added 10,651 stars in seven days to reach roughly 175,000 total by July 16, per this trending roundup on X. By the following week it had already crossed 189,000, as rammcodes noted.

What it does is deceptively simple: it packages TDD, debugging, requirements analysis, and code-review discipline into reusable Agent Skills (modular instruction sets that Claude Code and Codex load on demand). Instead of writing "please write tests first" into every prompt, the agent gets a skill file that enforces red-green-refactor as a workflow, not a suggestion.

The pattern behind its growth is the interesting part. Developers spent 2025 complaining that coding agents produce plausible code with no engineering discipline. Matt Pocock's answer was to encode the discipline itself as a distributable artifact. The market response, 10k+ stars in a week, suggests that's what teams actually wanted all along.

This continues the trajectory covered in last week's trending report, where Agent Skills repos first took over the dev-tools category. It's no longer a category, it's the whole chart.

Why it matters: engineering best practices are becoming installable packages for AI agents, and the fastest-growing repo on GitHub proves the demand.

The Late-July Top Three: bitchat, ego-lite, and buzz

GitHub's trending top three in late July were permissionlesstech/bitchat, citrolabs/ego-lite, and block/buzz, all connected to either Jack Dorsey's Block or the agent ecosystem, as reported by KuCoin News.

bitchat is the outlier worth studying. It's a Bluetooth mesh chat app written in Swift that works with zero internet connectivity, gaining roughly 1,720 stars per day. Decentralized, offline-first communication trending alongside AI agents suggests two parallel anxieties: developers want more machine autonomy and less network dependence at the same time.

Why it matters: when one backer's projects hold two of the top three trending slots, distribution and brand now shape GitHub trending as much as code quality does.

ego-lite Hits Number One: Agents Get Your Logged-In Browser

ego-lite reached #1 on GitHub Trending on July 24. It bills itself as the fastest browser for AI agents, and its core feature is sharing your logged-in browser state with Codex or Claude Code so agents can act on your behalf without interrupting you, per RuntimeWire's report.

This solves the single most annoying gap in agent workflows. Agents can write code, run tests, and open PRs, but the moment a task touches a dashboard, an admin panel, or anything behind SSO, you get pulled back in. ego-lite removes that wall by letting the agent inherit your sessions.

The security implications deserve more scrutiny than the star count is giving them. An agent with your logged-in state has your Gmail, your AWS console, your banking session. The convenience is real, but so is the blast radius of a prompt-injection attack against an agent holding live cookies.

Why it matters: browser state was the last boundary between "agent as assistant" and "agent as you," and it just fell.

Agents Beyond Coding: Security Review and Trading

The agent wave has spread past code generation. Claude-BugHunter passed 3,000 stars with 71 security skills and 681 detection patterns, effectively packaging a pentesting playbook as agent instructions. On the finance side, HKUDS/Vibe-Trading sits above 22,000 stars.

The pattern across both is identical to mattpocock/skills: take a discipline that requires expensive human expertise, encode it as structured agent skills, and distribute it as open source. Security review and trading are just the next verticals after software engineering.

Vibe-Trading's 22k stars deserve a contrarian read, though. Trading repos historically over-index on stars relative to real usage because the promise (money, automated) is maximally clickable. Expect the gap between its star count and its production deployments to be the widest of any repo on this list.

Why it matters: the "skills as packages" model is proving portable across domains, and if you're on a security team, assume attackers are reading the same 681 detection patterns defenders are.

Firecrawl and The Stack v3: The Data Layer Keeps Pace

Two infrastructure milestones landed underneath the agent hype. Firecrawl crossed 150,000 stars on July 13, taking the top spot among web search and scrape repos, driven directly by agent-builder demand: every agent that needs live web data needs a crawler, and Firecrawl became the default answer.

Meanwhile, Hugging Face released The Stack v3, the largest open code dataset ever: 114 TB, 770 languages, 224 million repositories, roughly 5 trillion tokens of deduplicated source code, announced by Anton Lozhkov on X. The announcement drew 517 likes, modest engagement for a release this large, which says something about where attention sits right now.

That mismatch is the insight. A 114 TB dataset that will train the next generation of code models gets a fraction of the attention of a skills repo. Application-layer tools win the star economy, but The Stack v3 is what everything above it will be built on in twelve months.

Why it matters: while agents dominate headlines, the data and crawling layer quietly set records that will define 2027's model capabilities.

The Backlash: Star Fatigue and Open-Source Politics

Not everything this week was celebration. A viral reel telling creators to "stop telling people how amazing this GitHub repo is when you don't know what it does" pulled 2,700+ views, capturing growing fatigue with engagement-bait repo promotion. When 10k-star weeks become routine, stars stop functioning as a quality signal.

The political dimension got louder too. A r/LocalLLaMA thread on the Hugging Face CEO's warning that banning open-source AI would hand the market to China drew 3,034 upvotes and 203 comments. The top comment, at 493 upvotes, was blunt: "Sure, if it were about defending defenders. But no, it's about defending profits."

Chinese labs backed the geopolitical point with shipping velocity. Moonshot AI open-sourced three infrastructure projects in a single week: MoonEP for MoE training, FlashKDA attention kernels, and AgentENV, an agent training platform. Whatever the policy debate concludes, the release cadence isn't waiting for it.

And in the quieter corners, Palmier Pro, an open-source macOS video editor built for AI workflows, took the top Show HN slot of the window with 190 points, proof that AI-adjacent desktop tools can still break through without a star-farming campaign.

Why it matters: the community is starting to separate genuine adoption from star theater, and the open-source AI debate is now explicitly geopolitical.

Worth Watching

• ego-lite's security story: the first public prompt-injection incident against a shared-session agent browser feels inevitable. Watch for a disclosure.
• block/buzz: the least-explained repo in the top three. If Block ships details, it could dominate next week's chart.
• mattpocock/skills at 200k: at +10k/week it crosses 200,000 stars within days, which would make it the fastest repo ever to that mark.
• Models trained on The Stack v3: the first fine-tunes on the 5T-token dataset should surface within weeks.
• Moonshot AI's AgentENV: if agent training platforms follow the skills-repo growth curve, this is the one to track.

For context on how fast this concentration happened, earlier analysis found AI coding agents captured 82% of trending stars in a single week. This week's data shows that share holding.

Action Steps

Start here (your first step) Install mattpocock/skills into Claude Code or Codex and run one real code-review task through it this week. It takes minutes and shows you exactly why 10,651 people starred it in seven days.

Quick wins (immediate impact)

• Try superpowers on a single refactoring task and compare the output against your unassisted agent baseline before deciding whether 941k installs are justified.
• Create a dedicated, minimal browser profile before testing ego-lite or any session-sharing agent tool. Never point one at your primary profile.

Deep dive (for those who want more)

• Read through Claude-BugHunter's 681 detection patterns and map them against your own codebase's attack surface. It doubles as a free security checklist even if you never run the agent.
• Check whether your organization's public repositories appear in The Stack v3 and review your license and opt-out position on training-data inclusion.

Useful Resources

• Superpowers 250k milestone analysis - Full breakdown of the star and install trajectory
• Weekly AI open-source trending thread - Source data for the mattpocock/skills growth numbers
• ego-lite trending report - Details on the agent-browser model
• The Stack v3 announcement - Dataset specs and access details
• Palmier Pro on GitHub - The window's top open-source Show HN launch

What This Means For You

The pattern across every repo this week is the same: expertise is becoming a package format. TDD discipline, pentesting playbooks, trading strategies, and browser access are all shipping as installable agent skills, and the repos that package expertise best are growing faster than anything GitHub has seen before.

The practical takeaway: don't evaluate agent tools by star count alone. Superpowers earns its numbers with 941k installs; other repos on the chart may not survive contact with production. Install ratio, release cadence, and security posture are the metrics that separate infrastructure from hype.

Next week, watch whether mattpocock/skills breaks the 200k barrier and whether ego-lite's session-sharing model attracts its first serious security scrutiny. Both answers will tell you how fast this ecosystem is maturing, and how carefully.