Evgeny Balyakin

I build local-first security and developer tools for AI coding agents, CLIs, and SQLite-heavy workflows. Go, Rust, TypeScript, Python. Open to work.

68 repos
0 followers
0 following

Go 40%
Python 30%
TypeScript 21%
Rust 4%
JavaScript 2%

63 contributions in the last year

1-day current streak·7-day longest streak

Jul 2025

13141516171819202122232425262728293031

Aug 2025

12345678910111213141516171819202122232425262728293031

Sep 2025

123456789101112131415161718192021222324252627282930

Oct 2025

12345678910111213141516171819202122232425262728293031

Nov 2025

123456789101112131415161718192021222324252627282930

Dec 2025

12345678910111213141516171819202122232425262728293031

Jan 2026

12345678910111213141516171819202122232425262728293031

Feb 2026

12345678910111213141516171819202122232425262728

Mar 2026

12345678910111213141516171819202122232425262728293031

Apr 2026

123456789101112131415161718192021222324252627282930

May 2026

12345678910111213141516171819202122232425262728293031

Jun 2026

123456789101112131415161718192021222324252627282930

Jul 2026

1234567891011121314151617

Evgeny Balyakin Developer. I build small tools, usually because I got annoyed by something. Most of what's here is Go, Rust, or TypeScript. A lot of CLIs. SQLite wherever I…

Evgeny Balyakin

Developer. I build small tools, usually because I got annoyed by something.

Most of what's here is Go, Rust, or TypeScript. A lot of CLIs. SQLite wherever I can avoid running a server.

![GitHub followers](https://github.com/balyakin)

---

Things I've built

aishield — Safety layer for AI coding agents: blocks dangerous shell commands, strips secrets before they reach the agent context, keeps a JSONL audit log. Started this after an agent deleted a directory I hadn't committed yet. Go.

AgentFence — Seatbelt for the moment when "just point Codex at the repo" feels too trusting. Runs the agent in a shadow workspace, keeps .env, Git history, and $HOME out of reach, scans the result, and waits for you to apply the patch. Go.

SSH App Hub — Local control panel for web apps already running on SSH hosts. Finds JupyterLab, TensorBoard, MLflow, Streamlit, Grafana, and code-server on a remote box, then opens them through ordinary OpenSSH tunnels so I can stop memorizing ports. Python.

incident-ci — CI check for incident PRs, because "please fill out the incident notes" should not live in someone's memory. Keeps the Incident Card as Markdown in the repo, validates the YAML, and points GitHub annotations at the file reviewers are already approving. Python.

PgRelay — Transactional outbox and background jobs for Python services already sitting on PostgreSQL. Enqueue work in the same SQLAlchemy transaction as the thing that caused it, then let a small asyncio worker handle retries, leases, dead-letter jobs, and replay. For when a webhook in the request is too flimsy, but adding a separate queue feels like punishment. Python.

refraction — Offline scanner for hostile repository and package text that can derail AI-assisted review: prompt injection, refusal bait, obfuscated payloads, Trojan Source, and manifest tricks. Go.

dataminim — Offline scanner for the awkward database question: what PII and secrets are already in there? Reads PostgreSQL or SQLite metadata, samples bounded values, follows JSON paths, and writes console/JSON/HTML reports without exposing raw data. Go.

pr-audit — Local-first CLI for reviewing large diffs. Finds risky changes hiding in noisy PRs: weakened tests, unsafe code, type suppressions, and secret-like values. TypeScript.

archlint — Architecture drift starts as one harmless import. Define the layers in archlint.yaml; it checks Python, TypeScript, and JavaScript imports for boundary leaks, layer cycles, banned packages, and files that depend on too much. Deterministic CLI, no LLM. TypeScript.

tessera — Publishing CLI for manuscripts that still live in Word or LibreOffice. Keeps named styles as meaning, so poems, letters, epigraphs, and bits of foreign text don't get flattened into "some italics with indentation". Builds EPUB, LaTeX, and PDF from the same DOCX/ODT source. Go.

mergetyp — Mail-merge for PDFs when the template deserves better than a pile of string replacements. Write the layout in Typst, feed it CSV, JSON, or YAML, and get one PDF per record: certificates, invoices, letters, whatever batch paperwork showed up this time. Python.

llmfail — Local proxy that adds failover between LLM providers. Anthropic returning 429s? Falls through to OpenAI or wherever. Mostly just a routing layer, smaller than you'd expect. Go.

smartproxy — Local LLM proxy for the setup that starts with one API key and somehow grows into retry scripts, budget checks, and a cost spreadsheet. Point OpenAI-compatible clients at it and get routing, failover, SQLite telemetry, optional caching, and a terminal dashboard. Go.

querygate — Go middleware and reverse proxy for the awkward HTTP case where a read needs a request body, but POST makes it look like a write. Speaks QUERY, advertises Accept-Query, caches safe body-aware responses, and can bridge older backends through POST. Go.

codebone — CLI and MCP server for giving agents compact code context. Extracts symbols, signatures, and structure with tree-sitter instead of dumping whole files. TypeScript.

ragimg — RAG indexing for the parts of docs that live in images. Reads Markdown/HTML, skips badges and logos, captions useful diagrams/screenshots/charts once, and writes JSONL chunks for the embedding pipeline you already have. Go.

skill-eval-runner — Test runner for SKILL.md files. Spins up a fresh workspace, lets an agent work, then checks what actually happened: files, commands, JSON, exit codes, tokens, and CI reports. Built because "the chat looked right" is not a regression test. TypeScript.

sqliteq — Job queues, pub/sub, and scheduled jobs inside a single SQLite file. No daemon, no Redis. Just a file. Rust.

SteadySend — File transfer for the dull but painful case: one huge file, a flaky network, and a retry that shouldn't start from zero. If the link drops, run the same command again; it resumes from verified chunks. Go.

snapback — Incremental local backups for project folders. Per-file deduplication, SQLite index, and restore by date or file when you need to rewind without thinking about it. Python.

tokmon — Proxy for tracking token usage and costs across Anthropic/OpenAI. If you run a lot of agents you'll want this before the invoice arrives. Go, SQLite.

sudocheck — Linux privilege escalation audit: sudo rules, SUID/SGID binaries, capabilities, GTFOBins cross-reference. Outputs JSON or SARIF. Go.

depshield — Supply-chain check for package managers. One command, works across npm/pip/cargo/etc. Go.

git-pulse — Codebase diagnostics from git history: churn, ownership, dead zones. Rust, TUI.

TubeSift — Search YouTube channels by subtitle content, from the terminal. Full-text index. Python, SQLite.

---

Stack

Go for most backend tooling. Rust when I want small binaries or need the performance. Python for scripting and quick prototypes. SQLite as default storage — you can get surprisingly far without running a server.

All public repos (68)

Show forks Show archived

More creators on gitmyhub

lllyasviel lucast1574 phodal john-smilga angelabauer