I'm Julio, a developer based in Mexico City. I work on OSINT tools, cybersecurity, and AI agents, mostly with Python and TypeScript.
I contribute regularly to Maigret, where I've worked on account detection, false positives, and report exports. I also build ghost, an OSINT investigation tool.
44 merged PRs across 16 repositories as of September 11, 2026. Ten are in Maigret.
![]() |
Maigret · 10 merged PRs#3121 · #3111 · #2930 · #3024 — Added a shared Mastodon lookup engine for 79 instances, fixed false-positive checks, added the manifest needed by modern XMind readers, and improved status-code detection in site submission.Python · OSINT · HTTP evidence · report compatibility |
![]() |
Palantir · Blueprint#8165 — Fixed the ESLint rule so it detects deprecated React components imported under aliases.TypeScript · React · static analysis |
|
Texas Instruments · PRU and Android docsopen-pru #139 · processor-sdk-doc #720 — documented portable assembly include paths and normalized Android SDK documentation formatting.Embedded systems · assembly toolchains · Linux/Android documentation |
![]() |
Sentry · Python SDK#6241 — Added an option to drop scrubbed user IP addresses instead of sending an invalid placeholder value.Python · privacy controls · backward compatibility |
![]() |
OWASP · Agent Security Regression Harness#149 — Added custom headers for authenticated HTTP tests. Headers stay out of scenario payloads, traces, and result JSON.Python · agent security · authenticated testing |
|
Aqua Security · Trivy#10828 · #10857 — corrected spelling and wording in Trivy documentation.Security tooling · documentation |
![]() |
Google Labs · design.md#131 — Moved primitive type definitions into spec-config.yaml and rendered them through the spec generator.TypeScript · design tooling · specification generation |
44 merged PRs · full list
As of September 11, 2026. See the current list on GitHub.
| Upstream | Merged contributions |
|---|---|
| soxoj/maigret 10 merged |
#2318 feat: add cybersecurity platforms + re-enable Root-Me#2442 fix(data): update InterPals absence string to match current site response#2558 test: loosen executor timing upper bounds for slower CI#2588 fix: disable RomanticCollection check#2779 docs: fix typos#2929 Fix ReverbNation false-positive check#2930 Fix XMind reports for modern readers#3024 Detect status-code checks in --submit fallback#3111 Fix social.tchncs.de false-positive check#3121 Add shared Mastodon engine with accounts/lookup urlProbe |
| mitmproxy/mitmproxy 3 merged |
#8196 fix: avoid IndexError in is_mostly_bin for short tails#8285 docs: fix typos#8405 fix: normalize CRLF in CSS and XML/HTML prettifiers |
| kellyjonbrazil/jc 4 merged |
#692 fix: use [2:] instead of lstrip('0x') to strip hex prefix in ifconfig parser#711 docs: fix typos#722 Preserve bracketed and empty scalar values#741 test: find setup.py when tests are copied into a build tree |
| getsentry/responses 3 merged |
#791 fix: remove content-type from headers in _add_from_file to avoid RuntimeError#800 docs: fix typos#807 fix: type CallList as a sequence of calls |
| google-labs-code/design.md 1 merged |
#131 fix: render primitive types from spec config |
| palantir/blueprint 1 merged |
#8165 [eslint-plugin] Detect deprecated components imported with aliases |
| racecraft-lab/Paddock 1 merged |
#86 Enhance Office activity visuals |
| TexasInstruments/processor-sdk-doc 1 merged |
#720 style: normalize Android RST indentation |
| zeek/package-manager 2 merged |
#222 Fix quickstart grammar typo#224 docs: fix typos |
| TexasInstruments/open-pru 2 merged |
#139 docs: add portable assembly include path guidance#146 docs: fix typos |
| OWASP/Agent-Security-Regression-Harness 1 merged |
#149 feat: support live HTTP target headers |
| getsentry/sentry-python 2 merged |
#6241 Add option to drop scrubbed user IP addresses#6602 docs: fix typos |
| aquasecurity/trivy 2 merged |
#10828 docs: fix repository scan heading typo#10857 docs: fix typos |
| locustio/locust 2 merged |
#3384 fix: use total_rps instead of current_rps in HTML report and navbar stats#3426 docs: fix typos |
| mukul975/Anthropic-Cybersecurity-Skills 8 merged |
#11 Add skill: performing-ai-driven-osint-correlation#12 Add NIST CSF 2.0 categories to compliance-governance skills#15 Add working example output to digital-forensics skills (fixes #4)#22 Translate top skills to Spanish for international reach#26 Add MITRE ATT&CK IDs to incident response skills (fixes #1)#27 Add skill: performing-cloud-native-threat-hunting-with-aws-detective#28 Add bulk skill metadata validation script#29 Add skill: detecting-lateral-movement-with-zeek (fixes #5) |
| nicolargo/glances 1 merged |
#3505 fix: clamp memory used/percent to non-negative values for LXC containers |
Anthropic-Cybersecurity-Skills is an independent community project.
Selected PRs open as of September 11, 2026.
| Project | Proposed change | Status |
|---|---|---|
| Nmap #3458 | Clarify the IPv6 protocol-family context in packet-trace output. | Open |
| PyPA · Hatch #2405 | Support free-threaded Python aliases such as 3.13t and 3.14t. |
Open |
| Cloudflare · moq-rs #219 | Clarify support for MoQ draft branches. | Open |












