# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for QA or ML / AI or Data engineering or Security or Design: 599 items. > - QA: Functional testing, test automation and quality assurance. > - ML / AI: Model training, evaluation and LLM application development. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Design: Interface, interaction, visual and brand design. - [wshobson/agents](https://hebbmind.com/de/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands. - [GDPR Data Handling](https://hebbmind.com/de/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions. - [Agent Teams](https://hebbmind.com/de/plugin/agent-teams.md): [Plugin] Orchestrates multi-agent teams using Claude Code's experimental Agent Teams feature: parallel multi-angle code review, competing-hypothesis debugging and feature work split by file ownership. Enable CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS first. - [wshobson/agents](https://hebbmind.com/de/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [UI Design](https://hebbmind.com/de/plugin/ui-design.md): [Plugin] UI/UX design plugin from the wshobson/agents marketplace with 3 subagents, 9 skills and commands for design review, component creation and accessibility audits, covering design tokens, WCAG 2.2, responsive layout, iOS HIG and Material Design 3 for in-code UI design and review. - [TDD Workflows](https://hebbmind.com/de/plugin/tdd-workflows.md): [Plugin] Test-driven development plugin: /tdd-workflows:tdd-cycle and related commands move through red-green-refactor phases with a checkpoint for approval at each, plus TDD orchestrator and code reviewer subagents. Part of the wshobson/agents marketplace. - [Machine Learning Ops](https://hebbmind.com/de/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills. - [LLM Application Dev](https://hebbmind.com/de/plugin/llm-application-dev.md): [Plugin] Plugin for building LLM apps: LangGraph agents with memory and tool use, hybrid-search RAG, vector index tuning, prompt optimization and LLM evaluation. Includes 3 subagents and 8 skills. - [Quantitative Trading](https://hebbmind.com/de/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice. - [Security Scanning](https://hebbmind.com/de/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [Accessibility Compliance](https://hebbmind.com/de/plugin/accessibility-compliance.md): [Plugin] Accessibility review plugin with an audit command, a UI validation subagent, and WCAG 2.2 and screen reader testing skills. Before design reviews or launch, the agent checks contrast, keyboard use and screen reader support and suggests fixes. For Claude Code; automated checks need Node.js. - [Data Engineering](https://hebbmind.com/de/plugin/data-engineering.md): [Plugin] Data engineering plugin from the wshobson/agents marketplace: a data engineer subagent, a data pipeline command, and skills for Airflow DAGs, dbt transformations, Spark tuning and data quality, to help build ETL and data warehouses. - [Lightpanda Browser](https://hebbmind.com/de/cli/browser.md): [CLI] Headless browser written from scratch in Zig for AI agents and automation, using less memory and running faster than headless Chrome in official benchmarks. fetch turns pages into Markdown, and it can serve CDP or MCP. Telemetry is on by default (an env var disables it); Windows needs WSL. - [Nushell](https://hebbmind.com/de/cli/nushell.md): [CLI] Cross-platform shell built around structured data: pipelines pass tables instead of plain text, and you can open and query JSON, CSV, TOML and more directly. Default builds include nu --mcp, which serves it to agents as an MCP server. - [Marker](https://hebbmind.com/de/cli/marker.md): [CLI] Converts PDFs, images, PPTX, DOCX, XLSX, EPUB and more into Markdown, JSON or HTML, preserving tables, formulas and layout, with optional LLM help for higher accuracy. Needs Python 3.10+ and PyTorch; large-scale commercial use of the model weights needs a paid license. - [@agent-infra/mcp-server-browser](https://hebbmind.com/de/mcp/browser.md): [MCP] Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP. - [Agent TARS CLI](https://hebbmind.com/de/cli/ui-tars-desktop.md): [CLI] ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key. - [Trivy](https://hebbmind.com/de/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security. - [Find Skills](https://hebbmind.com/de/skill/find-skills.md): [Skill] When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo. - [skills](https://hebbmind.com/de/cli/skills.md): [CLI] Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs. - [llmfit](https://hebbmind.com/de/cli/llmfit.md): [CLI] Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output. - [Docker Compose](https://hebbmind.com/de/cli/compose.md): [CLI] Define multi-container apps in compose.yaml and bring up services, databases, caches and the rest with one docker compose up, handy for agents setting up local dev and test dependencies. Maintained by Docker; included with Docker Desktop on macOS. - [Vibe-Trading](https://hebbmind.com/de/mcp/vibe-trading.md): [MCP] Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice. - [Claude Code Router](https://hebbmind.com/de/cli/claude-code-router.md): [CLI] Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys. - [WeKnora CLI](https://hebbmind.com/de/cli/tencent-cli.md): [CLI] Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+. - [Vault](https://hebbmind.com/de/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server. - [jq](https://hebbmind.com/de/cli/jq.md): [CLI] Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs. - [Anthropic Cybersecurity Skills](https://hebbmind.com/de/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only. - [synthesize-research](https://hebbmind.com/de/skill/synthesize-research.md): [Skill] Synthesizes user feedback from interview notes, surveys and support tickets into themes ranked by frequency and impact, and outputs structured insights and roadmap recommendations. Can pull data from knowledge bases or meeting transcripts. From Anthropic's official product-management plugin. - [SQL Queries](https://hebbmind.com/de/skill/sql-queries.md): [Skill] Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations. - [Data](https://hebbmind.com/de/plugin/data.md): [Plugin] Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic. - [Design](https://hebbmind.com/de/plugin/design.md): [Plugin] Plugin for design teams: design critiques, design system audits, UX copy, accessibility checks, user research synthesis and developer handoff notes. Official from Anthropic; works best with Figma connected. - [Compliance Tracking](https://hebbmind.com/de/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review. - [Web Design Guidelines](https://hebbmind.com/de/skill/web-design-guidelines.md): [Skill] Reviews UI code against Vercel's Web Interface Guidelines, covering accessibility, focus, forms, animation, typography, dark mode and more, listing issues as file:line. Fetches the latest rules before each review. Maintained by Vercel. - [Cognee MCP](https://hebbmind.com/de/mcp/cognee-mcp.md): [MCP] Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud. - [Nuclei](https://hebbmind.com/de/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test. - [Graphiti MCP Server](https://hebbmind.com/de/mcp/getzep-mcp-server.md): [MCP] Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key. - [Grafana k6](https://hebbmind.com/de/cli/k6.md): [CLI] Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI. - [Lighthouse](https://hebbmind.com/de/cli/lighthouse.md): [CLI] Official web auditing tool from the Google Chrome team: score pages on performance, accessibility, best practices and SEO from the command line and get HTML, JSON or CSV reports, so agents can iterate on a page. Needs Node 22+ and Chrome. - [Gitleaks](https://hebbmind.com/de/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks. - [Huashu Design](https://hebbmind.com/de/skill/huashu-design.md): [Skill] Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed. - [TruffleHog](https://hebbmind.com/de/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives. - [DESIGN.md](https://hebbmind.com/de/cli/design-md.md): [CLI] Google Labs' DESIGN.md format and CLI: designers capture colors, typography and spacing in a file for agents; lint checks broken references and WCAG contrast, diff compares versions and export outputs design tokens for Tailwind and more. Needs Node.js; the format is in alpha. - [baoyu-skills](https://hebbmind.com/de/plugin/baoyu-skills.md): [Plugin] Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key. - [promptfoo](https://hebbmind.com/de/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT. - [Awesome Claude Code Subagents](https://hebbmind.com/de/plugin/awesome-claude-code-subagents.md): [Plugin] 160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need. - [Pascal Agent Skills](https://hebbmind.com/de/plugin/pascalorg-skills.md): [Plugin] Official plugin for Pascal, an open-source 3D architecture editor: lets agents create, edit and validate 3D models of rooms and floors over MCP and check furniture placement for collisions or blocked doors. Local use needs the Pascal CLI (Node.js 22.13+); hosted projects need an API key. - [Rembg](https://hebbmind.com/de/cli/rembg.md): [CLI] Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally. - [radare2](https://hebbmind.com/de/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript. - [Google Skills](https://hebbmind.com/de/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others. Next page: https://hebbmind.com/de/tools.md?page=4&profession=qa%2Calgorithm%2Cdata-engineering%2Csecurity%2Cdesign