# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Game development or ML / AI or Data engineering or Security: 312 items.

> - Game development: Gameplay, engine scripting, levels and 3D assets.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [jc](https://hebbmind.com/de/cli/jc.md): [CLI] Converts the output of 100+ commands such as dig, ps, ls and ifconfig, plus common file formats, into JSON so agents can parse it reliably with jq or scripts. Also usable as a Python library.
- [Research Paper Writing Skills](https://hebbmind.com/de/skill/research-paper-writing-skills.md): [Skill] Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key.
- [MLX-Audio](https://hebbmind.com/de/cli/mlx-audio.md): [CLI] Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg.
- [Static Analysis](https://hebbmind.com/de/skill/static-analysis.md): [Skill] Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.
- [Supply Chain Risk Auditor](https://hebbmind.com/de/skill/supply-chain-risk-auditor.md): [Skill] Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.
- [Variant Analysis](https://hebbmind.com/de/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity.
- [Trail of Bits Skills](https://hebbmind.com/de/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too.
- [Agentic Actions Auditor](https://hebbmind.com/de/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.
- [Differential Review](https://hebbmind.com/de/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.
- [dasel](https://hebbmind.com/de/cli/dasel.md): [CLI] Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.
- [Steampipe](https://hebbmind.com/de/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.
- [stable-diffusion.cpp](https://hebbmind.com/de/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.
- [Codex Security](https://hebbmind.com/de/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.
- [Jupyter Notebooks](https://hebbmind.com/de/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins.
- [Game Studio](https://hebbmind.com/de/skill/openai-skills-4.md): [Skill] OpenAI's official browser-game skills: plan core gameplay and tech choices first, then build with Phaser for 2D or Three.js / React Three Fiber for 3D, plus HUD and menu UI, sprite animation, a GLB asset pipeline and in-browser playtesting.
- [OpenAI Developers](https://hebbmind.com/de/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.
- [Firecrawl MCP Server](https://hebbmind.com/de/mcp/firecrawl-mcp-server.md): [MCP] Scrapes web pages into Markdown or structured data, with full-site crawling, sitemaps, web search and interaction with dynamic pages. Maintained by Firecrawl; the cloud needs an API key (self-hosting is possible), and the keyless hosted endpoint only offers scrape, search and parse.
- [Defending Code Reference Harness](https://hebbmind.com/de/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.
- [OpenCompass](https://hebbmind.com/de/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference.
- [Jupytext](https://hebbmind.com/de/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip.
- [arxiv-latex-cleaner](https://hebbmind.com/de/cli/arxiv-latex-cleaner.md): [CLI] Cleans a LaTeX project before arXiv submission: removes comments, auxiliary files and unused .tex files and images, and can compress images, so internal notes are not published with the source. From Google Research; installable with Homebrew on macOS.
- [Trafilatura](https://hebbmind.com/de/cli/trafilatura.md): [CLI] Python library and CLI for extracting main web content: fetches pages, crawls via sitemaps and RSS feeds, strips headers, footers and other noise, and outputs TXT, Markdown, JSON, XML and more with metadata. Also processes downloaded HTML offline.
- [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/de/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.
- [zizmor](https://hebbmind.com/de/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.
- [Godot MCP](https://hebbmind.com/de/mcp/godot-mcp.md): [MCP] Lets agents launch the Godot editor, run projects in debug mode and read console output and errors, plus create scenes, add nodes and manage UIDs (Godot 4.4+). Requires Godot and Node.js installed locally.
- [csvkit](https://hebbmind.com/de/cli/csvkit.md): [CLI] Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files.
- [Google Agents CLI Skills](https://hebbmind.com/de/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.
- [Ghidra MCP Server](https://hebbmind.com/de/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.
- [Claude Scholar](https://hebbmind.com/de/plugin/claude-scholar.md): [Plugin] Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist.
- [Claude Scholar](https://hebbmind.com/de/skill/claude-scholar.md): [Skill] Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin.
- [PySceneDetect](https://hebbmind.com/de/cli/pyscenedetect.md): [CLI] Detects shot changes in video and splits long footage into scenes, exporting cut lists and per-scene thumbnails, useful for shot analysis, organizing footage and finding edit points. Runs locally; needs Python 3.10+, plus FFmpeg or mkvmerge for splitting.
- [LM Studio CLI (lms)](https://hebbmind.com/de/cli/lms.md): [CLI] LM Studio's official CLI: list, load and unload local models, start and stop the local API server, and check status and logs; ls, ps and other commands support --json output for scripts and agents. Requires the LM Studio desktop app.
- [ExifTool](https://hebbmind.com/de/cli/exiftool.md): [CLI] Classic CLI for reading and writing metadata in hundreds of file types including images, video, audio and PDF, covering EXIF, GPS, IPTC, XMP and camera makers' proprietary tags, with batch editing, stripping and conversion. Requires Perl.
- [MCPorter](https://hebbmind.com/de/cli/mcporter.md): [CLI] CLI and TypeScript runtime for discovering and calling MCP servers from the terminal and scripts: list tool signatures and call tools directly, or generate a standalone CLI or typed client from a server. Auto-imports existing MCP configs from Claude Code, Codex and others.
- [YouPlot](https://hebbmind.com/de/cli/youplot.md): [CLI] Draws bar charts, histograms, line charts, scatter plots and box plots in the terminal from CSV/TSV on stdin, so you can glance at data distributions at the end of a shell pipeline. The command is uplot.
- [Gemini API Dev](https://hebbmind.com/de/skill/gemini-api-dev.md): [Skill] Teaches agents to code against the latest Gemini API and Python/TypeScript SDKs: multi-turn chat, function calling, structured output, and image and speech generation, while avoiding deprecated older models. Maintained by Google's Gemini team.
- [Gemini Skills](https://hebbmind.com/de/skill/gemini-skills.md): [Skill] Gemini API development skills: gemini-api-dev (core API and SDKs), gemini-live-api-dev (real-time bidirectional audio/video streaming) and gemini-omni-flash-api (Omni video generation and editing), filling in APIs released after model training cutoffs. Maintained by Google's Gemini team.
- [Three.js Animation](https://hebbmind.com/de/skill/threejs-animation.md): [Skill] Three.js animation reference with code: procedural motion with Clock, the AnimationClip, AnimationMixer and AnimationAction keyframe system, playing GLTF animations, skeletal animation, morph targets and blending multiple animations.
- [Three.js Interaction](https://hebbmind.com/de/skill/threejs-interaction.md): [Skill] Three.js interaction reference with code: raycasting for click detection and object selection, camera controls such as OrbitControls, and mouse and touch input handling for interactive 3D experiences.
- [Three.js Loaders](https://hebbmind.com/de/skill/threejs-loaders.md): [Skill] Three.js asset loading reference with code: loading GLTF models, textures, images and HDR environments, coordinating loaders and progress with LoadingManager, and async loading patterns.
- [Three.js Post-Processing](https://hebbmind.com/de/skill/threejs-postprocessing.md): [Skill] Three.js post-processing reference with code: chaining passes with EffectComposer, adding bloom, depth of field, color grading, blur and glow, and writing custom screen-space shader passes.
- [Three.js Textures](https://hebbmind.com/de/skill/threejs-textures.md): [Skill] Three.js texture reference with code: loading and configuring texture maps, UV mapping, cubemaps and HDR environment maps, texture settings and optimization.
- [Three.js Shaders](https://hebbmind.com/de/skill/threejs-shaders.md): [Skill] Three.js shader reference with code: writing GLSL vertex and fragment shaders, ShaderMaterial versus RawShaderMaterial, uniforms and animating them, and extending built-in materials for custom visual effects.
- [Three.js Geometry](https://hebbmind.com/de/skill/threejs-geometry.md): [Skill] Three.js geometry reference with code: parameters for built-in shapes like boxes, spheres, cylinders and tori, building custom meshes from vertices with BufferGeometry, and instanced rendering for large numbers of objects.
- [Three.js Lighting](https://hebbmind.com/de/skill/threejs-lighting.md): [Skill] Three.js lighting reference with code: ambient, hemisphere, directional, point, spot and area lights with their cost and shadow support, shadow setup, image-based environment lighting and lighting performance tips.
- [Three.js Materials](https://hebbmind.com/de/skill/threejs-materials.md): [Skill] Three.js materials reference with code: when to use Basic, Lambert, Phong, Standard, Physical, Toon and other materials, PBR properties such as roughness and metalness, custom ShaderMaterial and material performance.
- [Three.js Fundamentals](https://hebbmind.com/de/skill/threejs-fundamentals.md): [Skill] Three.js fundamentals with code: setting up the scene, cameras and WebGLRenderer, Object3D hierarchy, coordinate systems and transforms, the render loop and resize handling. A starting point for building a 3D scene on the web.
- [Nali](https://hebbmind.com/de/cli/nali.md): [CLI] Terminal tool for offline IP geolocation and CDN provider lookup, supporting QQwry, GeoIP2, ip2region and other databases. Pipe output from dig, nslookup and similar commands through it to annotate IPs automatically.
- [Hugging Face CLI](https://hebbmind.com/de/cli/huggingface-hub.md): [CLI] Hugging Face's official hf CLI: search, download and upload models and datasets, manage repos and storage buckets, and run jobs on Hugging Face's cloud. Output adapts automatically for agents, and hf skills add installs companion skills. Uploads and similar actions need a login.
- [NVIDIA Agent Skills](https://hebbmind.com/de/plugin/nvidia-skills.md): [Plugin] NVIDIA's official plugin that finds and installs the right skills from NVIDIA's catalog for your task, spanning CUDA acceleration, NIM inference, NeMo training, RAG blueprints, Omniverse simulation and robotics. Listed in both the Claude and Codex official marketplaces.

Next page: https://hebbmind.com/de/tools.md?page=5&profession=gamedev%2Calgorithm%2Cdata-engineering%2Csecurity
