Tools library
Ready-to-run tools built with yeet. Each one runs with a single command.
Networking
What is this box dialing, and why? A live egress monitor that catches every outbound TCP connection and groups it by the process that dialed it, flagging connections that leave the private network.
Containers grouped by Docker network — bridge networks get their own box, host-mode containers sit at the top level, and isolated containers appear separately. Compose labels and exposed ports shown inline.
Watch the protobuf messages flowing between services, decoded to readable fields. No proxy, no code changes — hooks the TC layer on the container's veth and reassembles TCP.
Every plaintext HTTP request crossing the box — decoded off the wire and ranked live by traffic, rate, and latency. No proxy, no sidecar, no app changes.
CPU & performance
Every row is a live process; columns show PID, %CPU, resident memory, and the full command line. Pipe-safe with --once, or sort by memory instead of CPU.
Six columns, four colors, the number that actually predicts a throttle. Reads every hwmon sensor and shows each one's temperature, throttle limit, and headroom in a color-coded table.
Security & audit
Every command a session runs, every file it opens, every TCP port it reaches or binds — decoded and streamed live to your terminal. Scoped to that session's process subtree.
Watch every create, modify, delete, and rename of an LLM agent's markdown brain in real time, tagged AGENT or EXTERNAL by process subtree. No polling, no inotify — intercepts in-kernel.
Catches every process launch system-wide and flags code running from scratch directories, binaries with no name on disk, and setuid privilege jumps — all caught in-kernel before the process runs.
Hardware
A live 802.11 Wi-Fi RF dashboard: frequency spectrum of nearby APs, per-station signal traces, a frame-type activity feed, and an RSSI histogram. No monitor mode, no raw sockets.
A real-time, colorized feed of USB traffic system-wide. No usbmon, no hardware sniffer. Control transfers decode their 8-byte SETUP packet; bulk transfers decode SCSI commands.
Fun
Your CPU called from the Garden floor. User time vs system as a live scoreboard, top processes as the starting five, and the game clock counting down from host uptime.
Skyscrapers, neon billboards, and your top CPU-spending processes walking the boulevard as citizens — running ones sprint, sleeping ones sway, zombies get a red ✕. A footer keeps the actual numbers honest.