# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for ML / AI or Data engineering or Security or Product / Projects: 526 items. > - ML / AI: Model training, evaluation and LLM application development. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Product / Projects: Specs, user research, roadmaps, scheduling and project delivery. - [Trail of Bits Skills](https://hebbmind.com/de/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [Differential Review](https://hebbmind.com/de/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [dasel](https://hebbmind.com/de/cli/dasel.md): [CLI] Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq. - [Product Manager Skills](https://hebbmind.com/de/plugin/product-manager-skills.md): [Plugin] Plugin marketplace of 77 product management skills based on JTBD, opportunity solution trees, RICE and other proven methods, covering user interviews, PRDs, roadmaps, prioritization, market sizing and product sunsets. A Codex skill pack is also available. - [Steampipe](https://hebbmind.com/de/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in. - [Product Manager Skills](https://hebbmind.com/de/skill/product-manager-skills.md): [Skill] 77 product management skills built on JTBD, opportunity solution trees, RICE, Working Backwards and other proven methods: user interviews, PRDs, roadmaps, prioritization, competitive intel, market sizing and sunsetting, explaining the frameworks as they go. CC BY-NC-SA licensed. - [stable-diffusion.cpp](https://hebbmind.com/de/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source. - [Codex Security](https://hebbmind.com/de/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. - [Notion](https://hebbmind.com/de/plugin/notion.md): [Plugin] Notion's plugin in OpenAI's official Codex marketplace: uses the Notion connector and hosted MCP to search and update workspace pages, with skills for spec-to-implementation plans, research write-ups, meeting prep and knowledge capture. Codex only; needs Notion authorization. - [notion-spec-to-implementation](https://hebbmind.com/de/skill/notion-spec-to-implementation.md): [Skill] Turns a Notion PRD or feature spec into an implementation plan page and tasks, flagging open questions and linking spec, plan and tasks while tracking progress. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP connected. - [Product Design](https://hebbmind.com/de/plugin/product-design.md): [Plugin] OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues. - [Granola](https://hebbmind.com/de/plugin/granola.md): [Plugin] Granola's official plugin in OpenAI's Codex marketplace: search past Granola meeting notes by topic, person, company or date, and cite the discussions and decisions when writing proposals, reports or analyses. Codex only; needs a Granola account already recording meetings. - [Notion Knowledge Capture](https://hebbmind.com/de/skill/notion-knowledge-capture.md): [Skill] Turns conversations and notes into structured Notion pages such as team wikis, how-to guides, decision records and FAQs, linked to related pages. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP. - [OpenAI Codex Plugins](https://hebbmind.com/de/plugin/openai-plugins.md): [Plugin] OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install. - [Notion Research Documentation](https://hebbmind.com/de/skill/notion-research-documentation.md): [Skill] Searches multiple pages in your Notion workspace and turns them into briefs, research summaries, comparisons or full reports with citations, written back to Notion. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP. - [ClickUp](https://hebbmind.com/de/plugin/clickup.md): [Plugin] ClickUp's official plugin in OpenAI's Codex marketplace: search your whole ClickUp workspace in natural language, find, create, update and manage tasks, and check whether a project or sprint is at risk of slipping. Codex only; needs a ClickUp account and authorization. - [Jupyter Notebooks](https://hebbmind.com/de/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins. - [Data Analytics](https://hebbmind.com/de/skill/openai-skills.md): [Skill] OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime. - [Microsoft Teams](https://hebbmind.com/de/plugin/teams.md): [Plugin] OpenAI's official Codex plugin for Microsoft Teams: summarizes chats and channel messages, pulls out action items, and drafts channel replies or meeting follow-ups. Requires signing in to Codex with ChatGPT and authorizing a Microsoft account. - [monday.com](https://hebbmind.com/de/plugin/monday-com.md): [Plugin] monday.com's official plugin in OpenAI's Codex marketplace: search boards, create and update items, assign owners, set timelines and post updates, for campaign schedules, approvals, project tracking and client management. Codex only; needs a monday.com account. - [Outlook Calendar](https://hebbmind.com/de/plugin/outlook-calendar.md): [Plugin] OpenAI's official Codex plugin for Outlook Calendar: summarizes your day, compares availability across people, preps meetings, explains busy and tentative states, and creates, reschedules or cancels meetings. Requires Codex with a ChatGPT sign-in and a Microsoft account. - [Data Analytics](https://hebbmind.com/de/plugin/data-analytics.md): [Plugin] OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools. - [Notion Meeting Intelligence](https://hebbmind.com/de/skill/notion-meeting-intelligence.md): [Skill] Prepares meetings using past notes, requirements and decisions in Notion: picks a template by meeting type, drafts the agenda and pre-reads, and adds research. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP. - [Linear (Codex plugin)](https://hebbmind.com/de/plugin/openai-linear.md): [Plugin] Linear's official plugin in OpenAI's Codex marketplace: search, create and update Linear issues, projects and initiatives from Codex, and draft PRDs, status updates and customer request summaries. Codex only; needs a Linear account and authorization. - [OpenAI Developers](https://hebbmind.com/de/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only. - [Google Calendar](https://hebbmind.com/de/plugin/google-calendar.md): [Plugin] OpenAI's official Codex plugin for Google Calendar: summarize today's schedule, compare availability across people, prep for meetings, and create, edit or delete events. Requires signing in to Codex with ChatGPT and authorizing your Google account. - [Google Drive](https://hebbmind.com/de/plugin/google-drive.md): [Plugin] OpenAI's official Codex plugin that makes Google Drive the single entry point to search, organize, share and export files, handing Docs, Sheets, Slides and comments to dedicated sub-skills for summaries, edits and new files. Authorize your Google account in Codex. - [Firecrawl MCP Server](https://hebbmind.com/de/mcp/firecrawl-mcp-server.md): [MCP] Scrapes web pages into Markdown or structured data, with full-site crawling, sitemaps, web search and interaction with dynamic pages. Maintained by Firecrawl; the cloud needs an API key (self-hosting is possible), and the keyless hosted endpoint only offers scrape, search and parse. - [Defending Code Reference Harness](https://hebbmind.com/de/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained. - [OpenCompass](https://hebbmind.com/de/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference. - [Pricing Page](https://hebbmind.com/de/skill/pricing-page.md): [Skill] Designs or rewrites a high-converting SaaS pricing page: gathers plans, limits, upgrade triggers and objections, then structures a value headline, monthly/annual toggle, tiered plans, comparison, FAQ and trust sections with copy templates. - [Backlog.md](https://hebbmind.com/de/cli/backlog-md.md): [CLI] Turns any folder into a Markdown task board: Claude Code or Codex break work into tasks with acceptance criteria for review before coding, managed from the terminal or a browser board. Works without Git for personal plans too. Runs locally with no account; needs Node.js or Homebrew. - [Jupytext](https://hebbmind.com/de/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip. - [OpenPencil](https://hebbmind.com/de/mcp/openpencil.md): [MCP] Open-source AI-native vector design tool with an MCP server built into its desktop app, connectable to Claude Code or Codex in one click. Agents read and edit .op designs in natural language, apply style guides and export React, Vue, Flutter or SwiftUI code. Needs the desktop app. - [arxiv-latex-cleaner](https://hebbmind.com/de/cli/arxiv-latex-cleaner.md): [CLI] Cleans a LaTeX project before arXiv submission: removes comments, auxiliary files and unused .tex files and images, and can compress images, so internal notes are not published with the source. From Google Research; installable with Homebrew on macOS. - [Trafilatura](https://hebbmind.com/de/cli/trafilatura.md): [CLI] Python library and CLI for extracting main web content: fetches pages, crawls via sitemaps and RSS feeds, strips headers, footers and other noise, and outputs TXT, Markdown, JSON, XML and more with metadata. Also processes downloaded HTML offline. - [Talk to Figma MCP](https://hebbmind.com/de/mcp/cursor-talk-to-figma-mcp.md): [MCP] Uses a Figma plugin and a local WebSocket server so agents can read and directly edit designs: create frames and text, adjust auto layout and styles, and replace copy in bulk. Requires Bun; now maintained by Grab. - [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/de/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview. - [zizmor](https://hebbmind.com/de/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings. - [Summarize](https://hebbmind.com/de/cli/summarize.md): [CLI] One command extracts or summarizes web pages, PDFs, YouTube videos, podcasts and media files, with JSON output. Summaries can use many model APIs, local models or a logged-in Codex or Claude CLI; plain extraction needs no key. Also has a browser sidebar extension. - [csvkit](https://hebbmind.com/de/cli/csvkit.md): [CLI] Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files. - [Google Agents CLI Skills](https://hebbmind.com/de/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key. - [Ghidra MCP Server](https://hebbmind.com/de/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first. - [Taskwarrior](https://hebbmind.com/de/cli/taskwarrior.md): [CLI] Veteran command-line task manager with projects, tags, priorities, due dates and custom reports, JSON export, and a rich ecosystem of hooks and extensions, well suited for agents that record and track tasks. - [MCP Atlassian](https://hebbmind.com/de/mcp/mcp-atlassian.md): [MCP] Community-maintained MCP for Jira and Confluence: search with JQL/CQL and create or update issues, pages and comments. Supports both Cloud and Server/Data Center deployments; needs an API token or personal access token. - [JiraCLI](https://hebbmind.com/de/cli/jira-cli.md): [CLI] Full-featured Jira CLI: filter, create, transition, assign and link issues and manage epics and sprints, with --plain text output that agents can read. Works with Cloud and self-hosted Jira; set up an API token and run jira init. - [Claude Scholar](https://hebbmind.com/de/plugin/claude-scholar.md): [Plugin] Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist. - [Claude Scholar](https://hebbmind.com/de/skill/claude-scholar.md): [Skill] Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin. - [Draw.io MCP Server](https://hebbmind.com/de/mcp/drawio-mcp.md): [MCP] draw.io's official MCP: opens XML, CSV or Mermaid diagrams generated by the agent directly in the draw.io editor, good for flowcharts and architecture diagrams. A no-install remote version can also render diagrams inline in the chat. - [Codebase to Course](https://hebbmind.com/de/skill/codebase-to-course.md): [Skill] Turns any codebase into an interactive browser course: real code with plain-language explanations, animations, hover glossaries and scenario quizzes. Built for people who build software with AI but can't read code, and useful for intro programming classes. Needs only an agent and the repo. Next page: https://hebbmind.com/de/tools.md?page=7&profession=algorithm%2Cdata-engineering%2Csecurity%2Cproduct