# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Data engineering or Data analysis or Security or Video / Media: 548 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Video / Media: Video editing, image and audio generation, music production, podcasts and short videos.

- [Vault](https://hebbmind.com/de/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.
- [jq](https://hebbmind.com/de/cli/jq.md): [CLI] Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.
- [Anthropic Cybersecurity Skills](https://hebbmind.com/de/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.
- [Data](https://hebbmind.com/de/plugin/data.md): [Plugin] Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic.
- [Performance Report](https://hebbmind.com/de/skill/performance-report.md): [Skill] Turns campaign or channel data into weekly, monthly or quarterly marketing reports: executive summary, key metrics and period-over-period trends, wins and misses, and next-period priorities. Connect analytics tools or just paste tables or key numbers. From Anthropic's knowledge-work-plugins.
- [Bio Research](https://hebbmind.com/de/plugin/bio-research.md): [Plugin] For preclinical life sciences research: bundles MCP connectors for PubMed, bioRxiv, ChEMBL, Open Targets, ClinicalTrials and more, plus analysis skills for single-cell RNA QC, scvi-tools and nf-core pipelines. Official from Anthropic; some data sources need accounts.
- [SQL Queries](https://hebbmind.com/de/skill/sql-queries.md): [Skill] Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.
- [Compliance Tracking](https://hebbmind.com/de/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.
- [people-report](https://hebbmind.com/de/skill/people-report.md): [Skill] Generates people analytics reports from employee data: headcount snapshots, voluntary and involuntary attrition, diversity metrics, spans of control and flight risk, with findings and recommendations for leadership. Needs an uploaded employee CSV or a connected HRIS. Official from Anthropic.
- [Cognee MCP](https://hebbmind.com/de/mcp/cognee-mcp.md): [MCP] Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud.
- [Nuclei](https://hebbmind.com/de/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.
- [Graphiti MCP Server](https://hebbmind.com/de/mcp/getzep-mcp-server.md): [MCP] Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.
- [OpenCLI](https://hebbmind.com/de/cli/opencli.md): [CLI] Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension.
- [video-use](https://hebbmind.com/de/skill/video-use.md): [Skill] Browser Use's video editing skill: put raw footage in a folder and chat with Claude Code or Codex to get a finished cut, with filler words and pauses removed, color grading, burned-in subtitles, animations and per-cut self-checks. Needs ffmpeg, Python (uv) and an ElevenLabs API key.
- [Gitleaks](https://hebbmind.com/de/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.
- [Huashu Design](https://hebbmind.com/de/skill/huashu-design.md): [Skill] Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed.
- [TruffleHog](https://hebbmind.com/de/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.
- [baoyu-skills](https://hebbmind.com/de/skill/baoyu-skills.md): [Skill] Baoyu's (JimLiu) content creation skills: infographics, covers, article illustrations, slide decks, comics and translation, plus Xiaohongshu cards and publishing to WeChat, Weibo and X. Needs Node.js, bun and an image model API key; some skills rely on Chrome automation or unofficial APIs.
- [baoyu-skills](https://hebbmind.com/de/plugin/baoyu-skills.md): [Plugin] Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key.
- [promptfoo](https://hebbmind.com/de/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.
- [Rembg](https://hebbmind.com/de/cli/rembg.md): [CLI] Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally.
- [radare2](https://hebbmind.com/de/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript.
- [WhisperX](https://hebbmind.com/de/cli/whisperx.md): [CLI] Fast speech transcription built on faster-whisper, with word-level timestamps and speaker diarization, suited to meeting notes and subtitles. Diarization needs a Hugging Face token; GPU acceleration needs CUDA.
- [HandBrake](https://hebbmind.com/de/cli/handbrake.md): [CLI] Veteran open-source video transcoder. HandBrakeCLI uses built-in presets to batch-compress screen recordings, course videos and footage or convert them to MP4, MKV or WebM for phones and the web. Free, runs locally, installable on macOS via Homebrew.
- [Google Ads API Account Performance Diagnostics](https://hebbmind.com/de/skill/google-ads-api-account-diagnostics.md): [Skill] Google's official skill that queries account data through the Google Ads MCP server to diagnose conversion drops, falling leads and impression share lost to bids, budgets or ad rank. Needs a Google Ads account, API credentials (developer token and OAuth) and Python 3.12.
- [Google Skills](https://hebbmind.com/de/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.
- [BigQuery Basics](https://hebbmind.com/de/skill/bigquery-basics.md): [Skill] Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project.
- [Google Agent Skills](https://hebbmind.com/de/skill/google-google-skills.md): [Skill] Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.
- [SOPS](https://hebbmind.com/de/cli/sops.md): [CLI] Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.
- [Buzz](https://hebbmind.com/de/cli/buzz.md): [CLI] Offline speech transcription and translation based on Whisper; audio never leaves your machine. buzz add exports lectures, interviews and meeting recordings to TXT, SRT or VTT. pip install needs Python 3.12 and FFmpeg; a desktop app is also available. Check transcripts manually.
- [Video2X](https://hebbmind.com/de/cli/video2x.md): [CLI] ML-based video upscaling and frame interpolation using Real-ESRGAN, Real-CUGAN, RIFE and other models to upscale old low-res video or raise frame rates; video2x handles one video per run and is scriptable. Needs a Vulkan GPU; Windows, Linux and Docker builds, no native macOS.
- [Brag](https://hebbmind.com/de/skill/brag.md): [Skill] Turns the current project into a 15-25 second shareable launch video: reads the code, plans a concept and storyboard, hands a composition brief to Hyperframes to render with music and sound effects, and writes share copy. Supports tone, format and duration options plus optional Kokoro voiceover.
- [Brag Slim](https://hebbmind.com/de/skill/brag-slim.md): [Skill] Turns a project directory or website URL into a roughly 20-second launch video: gathers copy, colors and real UI from the code or live site, storyboards it, and builds visuals, music and the render with tools already on the machine, delivering an MP4, poster frame and share copy.
- [FunASR](https://hebbmind.com/de/cli/funasr.md): [CLI] Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch.
- [FunASR MCP Server](https://hebbmind.com/de/mcp/modelscope-mcp-server.md): [MCP] Official MCP from the FunASR project: transcribes audio files locally with the SenseVoice model, supporting Mandarin, Cantonese, English, Japanese and Korean, with optional segment timestamps. Local inference needs no API key and audio stays on your machine. Docker image available.
- [gallery-dl](https://hebbmind.com/de/cli/gallery-dl.md): [CLI] Command-line tool for bulk-downloading galleries and posts from many image hosts and social platforms, with flexible file naming and config, and yt-dlp integration for video. Main development has moved to Codeberg; the GitHub repo stays in sync.
- [olmOCR](https://hebbmind.com/de/cli/olmocr.md): [CLI] AI2's tool for converting PDFs and scans to Markdown with a vision LLM, handling equations, tables, handwriting and multi-column layouts, suited to bulk digitizing papers and archives. Local runs need an NVIDIA GPU with 12GB+ VRAM; otherwise use a paid OpenAI-compatible remote endpoint.
- [pyVideoTrans](https://hebbmind.com/de/cli/pyvideotrans.md): [CLI] All-in-one video translation and dubbing: chains speech recognition, subtitle translation, multi-speaker AI voiceover and audio-video muxing, with local or online models like Faster-Whisper, DeepSeek and Edge-TTS. cli.py supports headless batch runs. Needs FFmpeg.
- [video-shotcraft](https://hebbmind.com/de/skill/video-shotcraft.md): [Skill] Turns Claude Code or Codex into a motion studio: from your site or product it writes storyboards, animates shots and adds sound, rendering promo videos with Remotion. Edit further in a browser workspace or export JianYing drafts. Needs Node.js and ffmpeg; Remotion may need a paid license.
- [ARIS (Auto-claude-code-research-in-sleep)](https://hebbmind.com/de/skill/auto-claude-code-research-in-sleep.md): [Skill] Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too.
- [Browser Harness](https://hebbmind.com/de/cli/browser-harness.md): [CLI] Browser control from the browser-use team: an editable CDP connection lets agents drive the Chrome you are already using, writing missing helper functions as they go and keeping them for reuse. Also offers an MCP server. Allow remote debugging in Chrome on first use.
- [Agent Skills for Context Engineering](https://hebbmind.com/de/skill/agent-skills-for-context-engineering.md): [Skill] Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform.
- [Agent Skills for Context Engineering](https://hebbmind.com/de/plugin/agent-skills-for-context-engineering.md): [Plugin] Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems.
- [lark-sheets (Lark Sheets)](https://hebbmind.com/de/skill/lark-sheets.md): [Skill] Official Lark (Feishu) skill to create and edit Lark Sheets: formulas, charts and pivot tables, conditional formatting and filters, plus import and export of local Excel/CSV, for summaries, budgets and reports. Needs lark-cli on a machine with Node.js, plus app setup and authorization.
- [lark-base (Lark Base)](https://hebbmind.com/de/skill/lark-base.md): [Skill] Official Lark (Feishu) skill for Lark Base: create tables, add fields, add and edit records, build views, forms and dashboards, or apply ready-made templates, good for sign-ups, asset registers and trackers. Needs lark-cli on a machine with Node.js, plus app setup and authorization.
- [ImageMagick](https://hebbmind.com/de/cli/imagemagick.md): [CLI] Veteran image processing CLI suite that converts, resizes, crops, composites and batch-processes JPEG, PNG, GIF, TIFF, PDF and many more formats, handy for agents handling images in scripts.
- [Semgrep MCP](https://hebbmind.com/de/mcp/semgrep-mcp.md): [MCP] Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN.
- [Semgrep](https://hebbmind.com/de/cli/semgrep.md): [CLI] Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.
- [DataX](https://hebbmind.com/de/cli/datax.md): [CLI] Alibaba's open-source offline data sync tool: JSON job configs batch-sync between heterogeneous sources like MySQL, Oracle, PostgreSQL, Hive, HDFS and MaxCompute, run with python datax.py. Needs JDK 1.8+ and Python; download and unpack the official toolkit.
- [VideoCaptioner](https://hebbmind.com/de/cli/videocaptioner.md): [CLI] CLI version of the VideoCaptioner subtitle assistant: transcribes courses, lectures and interviews, uses an LLM to segment, proofread and translate, then burns subtitles into the video. Free ASR and Bing translation work out of the box; LLM refinement needs an API key. Python 3.10 to 3.12.

Next page: https://hebbmind.com/de/tools.md?page=4&profession=algorithm%2Cdata-engineering%2Cdata%2Csecurity%2Cmedia
