# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Full-stack / Indie or DevOps / SRE or ML / AI or Data engineering: 738 items.

> - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration.
> - DevOps / SRE: Deployment, monitoring, cloud resources and reliability.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.

- [Hugging Face LLM Trainer](https://hebbmind.com/de/skill/huggingface-llm-trainer.md): [Skill] Lets agents fine-tune language and vision models with TRL or Unsloth on Hugging Face Jobs cloud GPUs, supporting SFT, DPO, GRPO and reward models, and convert results to GGUF for local use. Requires an HF Pro or higher paid plan. Maintained by Hugging Face.
- [Hugging Face Skills](https://hebbmind.com/de/skill/huggingface-skills.md): [Skill] Hugging Face's official skills: manage Hub models and datasets with the hf CLI, fine-tune language and vision models, run model evaluations, and build Gradio apps deployed to Spaces. Needs an HF account; cloud training on HF Jobs requires a paid plan.
- [Hugging Face CLI (hf-cli)](https://hebbmind.com/de/skill/hf-cli.md): [Skill] Teaches agents the Hugging Face Hub CLI hf: search and download models, manage datasets, Spaces, Buckets and repos, and run Jobs and inference endpoints. The skill content is generated from your local CLI, so install hf first. Maintained by Hugging Face.
- [Codex Security](https://hebbmind.com/de/cli/codex-security.md): [CLI] OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key.
- [MCP Inspector](https://hebbmind.com/de/cli/inspector.md): [CLI] The official MCP debugging tool: connect to any MCP server through a web UI, CLI or terminal UI to list and call its tools, resources and prompts. CLI mode outputs JSON, suited to scripts and CI smoke tests.
- [GSD Core](https://hebbmind.com/de/plugin/get-shit-done.md): [Plugin] Spec-driven development and context engineering framework (formerly Get Shit Done): a five-step loop of discuss, plan, execute, verify and ship, handing heavy work to subagents with fresh context to avoid degradation in long sessions. Supports Claude Code, Codex and more.
- [visual-explainer](https://hebbmind.com/de/plugin/visual-explainer.md): [Plugin] Turns terminal output like architecture explanations, diff reviews and plan comparisons into styled HTML pages or slides with zoomable interactive Mermaid diagrams, replacing hard-to-read ASCII diagrams and tables. No build step; open directly in a browser.
- [visual-explainer](https://hebbmind.com/de/skill/visual-explainer.md): [Skill] Turns architecture explanations, diff reviews, plan reviews and data comparisons into self-contained HTML pages or slides with Mermaid diagrams and light and dark themes, replacing ASCII diagrams in the terminal.
- [drawio-skill](https://hebbmind.com/de/skill/drawio-skill.md): [Skill] Generates editable draw.io architecture diagrams, ER diagrams, UML and BPMN flows from natural language or from Terraform, SQL DDL, OpenAPI specs and code repos, with incremental sync and multi-format export. Native export needs the draw.io desktop app.
- [usql](https://hebbmind.com/de/cli/usql.md): [CLI] Universal psql-style SQL command line: one tool to connect to PostgreSQL, MySQL, SQLite, SQL Server, Oracle and dozens of other SQL and NoSQL databases, with support for copying data between databases.
- [Desktop Commander MCP](https://hebbmind.com/de/mcp/desktopcommandermcp.md): [MCP] Lets agents run terminal commands on your machine, manage long-running processes, and read, write, search and diff-edit files. Extends the official Filesystem server; collects pseudonymized telemetry by default (no file contents or command arguments), which you can turn off in config.
- [Miller](https://hebbmind.com/de/cli/miller.md): [CLI] Processes CSV, TSV, JSON and other structured data like awk, sed, cut, join and sort, but by field name, for cleaning, aggregation, format conversion and pretty-printing. The command is mlr; written in Go with no runtime dependencies.
- [Feynman](https://hebbmind.com/de/cli/feynman.md): [CLI] Open-source research agent: one command runs literature reviews, deep research, paper reviews, paper-code consistency checks and replication plans, searching arXiv, PubMed and more with sources recorded. Good for grad students writing reviews. Run feynman setup to sign in to a model provider.
- [SQLFluff](https://hebbmind.com/de/cli/sqlfluff.md): [CLI] Linter and formatter for 20+ SQL dialects that auto-fixes most issues and handles Jinja templating and dbt projects (dbt needs a plugin), suited to warehouse code review and CI.
- [AWS IaC MCP Server](https://hebbmind.com/de/mcp/aws-iac-mcp-server.md): [MCP] Official AWS MCP that validates CloudFormation templates for syntax and security compliance, diagnoses deployment failures, and searches CloudFormation and CDK docs, code samples and best practices. Replaces the deprecated Cloud Control API server; needs AWS credentials.
- [Amazon CloudWatch MCP Server](https://hebbmind.com/de/mcp/cloudwatch-mcp-server.md): [MCP] Official AWS MCP that queries CloudWatch metrics, alarms and logs, analyzes log anomaly patterns and recommends alarm settings, helping agents with root cause analysis. Requires AWS credentials.
- [Amazon EKS MCP Server](https://hebbmind.com/de/mcp/eks-mcp-server.md): [MCP] Official AWS MCP to create and manage EKS clusters, deploy apps, manage Kubernetes resources, and read pod logs and events for troubleshooting. Read-only by default; writes need --allow-write and reading logs needs --allow-sensitive-data-access.
- [AWS Billing and Cost Management MCP Server](https://hebbmind.com/de/mcp/billing-cost-management-mcp-server.md): [MCP] Lets agents query AWS bills, cost trends, budgets and spending anomalies, and recommends Savings Plans, Reserved Instances and rightsizing. Maintained by AWS; requires AWS credentials.
- [AWS Documentation MCP Server](https://hebbmind.com/de/mcp/aws-documentation-mcp-server.md): [MCP] Official AWS MCP that searches and reads AWS documentation, converts it to Markdown for agents to cite, and suggests related pages. No AWS credentials needed; requires uv.
- [AWS HealthLake MCP Server](https://hebbmind.com/de/mcp/healthlake-mcp-server.md): [MCP] Official AWS MCP for managing FHIR health data in AWS HealthLake: CRUD, advanced search, full patient records, and import and export, with a read-only mode to prevent changes. Needs an AWS account, a paid HealthLake data store and local AWS credentials; clinical conclusions need professional review.
- [Apache SeaTunnel](https://hebbmind.com/de/cli/seatunnel.md): [CLI] Distributed data integration tool and Apache top-level project with 160+ connectors for batch, real-time and CDC sync. Define jobs in config files and run them on the built-in Zeta engine or on Flink or Spark. Requires Java.
- [Defuddle](https://hebbmind.com/de/cli/defuddle.md): [CLI] Extracts the main content of a web page, stripping comments, sidebars, headers and footers, and outputs clean HTML or Markdown with metadata like title, author and publish date, saving tokens when agents read the web. Built for Obsidian Web Clipper by kepano; still in development.
- [WeasyPrint](https://hebbmind.com/de/cli/weasyprint.md): [CLI] Rendering engine that lays out HTML and CSS and exports PDF, supporting paged media and other print style standards, ideal for generating reports, invoices and receipts in bulk. Written in Python; depends on the system Pango library.
- [garak](https://hebbmind.com/de/cli/garak.md): [CLI] NVIDIA's open-source LLM vulnerability scanner that probes for prompt injection, jailbreaks, data leakage, hallucination and harmful content, supporting OpenAI, Hugging Face, Bedrock and most REST-accessible models. Scanning cloud models needs their API keys.
- [Plannotator](https://hebbmind.com/de/plugin/plannotator.md): [Plugin] Annotate and review agent-generated plans, docs and code diffs in the browser, then send feedback back to the agent in one click. Hooks into plan mode and supports Claude Code, Codex and other agents. Run the official install script to set up the CLI first.
- [PaperQA2](https://hebbmind.com/de/cli/paper-qa.md): [CLI] High-accuracy retrieval-augmented Q&A over paper PDFs, text and Office documents, filling in citation metadata, checking retractions and attaching traceable sources to answers. Provides the pqa CLI and a Python library. Needs an LLM API key by default; local models can be configured.
- [VisiData](https://hebbmind.com/de/cli/visidata.md): [CLI] Terminal tool for exploring and wrangling tabular data: opens dozens of formats including CSV, JSON, Excel and SQLite for filtering, sorting, pivots and frequency counts. --batch mode replays actions headlessly or converts file formats.
- [Worktrunk](https://hebbmind.com/de/cli/worktrunk.md): [CLI] Git worktree manager (wt) built for running multiple AI agents in parallel: create, switch and clean up worktrees by branch name, and spin up a worktree and launch Claude in one command. Supports hooks, LLM-generated commit messages and one-step merges.
- [improve](https://hebbmind.com/de/plugin/improve.md): [Plugin] Uses a strong model to audit your codebase and list evidence-backed issues across correctness, security, performance and testing, writes a plan a cheaper model can execute, and reviews the results. It never edits code itself. By shadcn.
- [Harness](https://hebbmind.com/de/plugin/harness.md): [Plugin] Say build a harness for this project and it designs a domain-specific agent team, generating subagent definitions, companion skills and orchestration, validates them and keeps evolving them from feedback. Supports workflow orchestration, persistent agent teams and subagent delegation.
- [Checkov](https://hebbmind.com/de/cli/checkov.md): [CLI] Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud.
- [BrowserSkill](https://hebbmind.com/de/cli/browserskill.md): [CLI] Tencent's open-source browser bridge: through the bsk CLI and a Chrome/Edge extension, agents use your logged-in accounts in a separate visible window to browse, fill forms and take full-page screenshots, and correlate network requests with console output to debug sites.
- [Atlas](https://hebbmind.com/de/cli/atlas.md): [CLI] Manage database schemas as code: declare the desired schema in SQL, HCL or your ORM and Atlas plans, lints and applies migrations, and can export existing databases as HCL, SQL or Mermaid ER diagrams. Supports PostgreSQL, MySQL and a dozen other databases.
- [jc](https://hebbmind.com/de/cli/jc.md): [CLI] Converts the output of 100+ commands such as dig, ps, ls and ifconfig, plus common file formats, into JSON so agents can parse it reliably with jq or scripts. Also usable as a Python library.
- [Claude Squad](https://hebbmind.com/de/cli/claude-squad.md): [CLI] Manages multiple Claude Code, Codex, Gemini and Aider sessions in parallel from one terminal: each task gets its own git worktree, can run in the background, and changes are reviewed before merging. Requires tmux and gh.
- [GitMCP](https://hebbmind.com/de/mcp/git-mcp.md): [MCP] Free remote MCP service that turns any GitHub repo or GitHub Pages site into a docs endpoint, so agents can read up-to-date docs and search code on demand and hallucinate fewer APIs. No sign-up or install; self-hosting is also possible.
- [CCPM](https://hebbmind.com/de/skill/ccpm.md): [Skill] Spec-driven project management for software: guides brainstorming into a PRD, breaks it into epics and dependent tasks synced as GitHub Issues, answers standup, next-step and blocker questions, and can dispatch several agents to code in parallel. Needs Git, an authenticated gh CLI and a GitHub repo.
- [NextTrace](https://hebbmind.com/de/cli/ntrace-core.md): [CLI] Open-source visual traceroute that shows IP geolocation, AS number and carrier for every hop, with continuous MTR probing and JSON output; the full edition can also be deployed as an MCP server.
- [xh](https://hebbmind.com/de/cli/xh.md): [CLI] HTTP client CLI that reimplements HTTPie's syntax in Rust with a focus on performance; key-value pairs on the command line are sent as JSON by default, making it quick to debug REST APIs.
- [MLX-Audio](https://hebbmind.com/de/cli/mlx-audio.md): [CLI] Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg.
- [dasel](https://hebbmind.com/de/cli/dasel.md): [CLI] Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.
- [Steampipe](https://hebbmind.com/de/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.
- [App Store Connect CLI](https://hebbmind.com/de/cli/app-store-connect-cli.md): [CLI] asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key.
- [Kimi Code CLI](https://hebbmind.com/de/cli/kimi-code.md): [CLI] Moonshot AI's official terminal coding agent: reads and edits code, runs commands, searches files and fetches web pages, with video input, MCP, plugins, subagents and hooks, plus Zed and JetBrains integration via ACP. Needs a Kimi sign-in or Moonshot API key. Replaces the archived Kimi CLI.
- [stable-diffusion.cpp](https://hebbmind.com/de/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.
- [Firecrawl MCP Server](https://hebbmind.com/de/mcp/firecrawl-mcp-server.md): [MCP] Scrapes web pages into Markdown or structured data, with full-site crawling, sitemaps, web search and interaction with dynamic pages. Maintained by Firecrawl; the cloud needs an API key (self-hosting is possible), and the keyless hosted endpoint only offers scrape, search and parse.
- [Differential Review](https://hebbmind.com/de/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.
- [Agentic Actions Auditor](https://hebbmind.com/de/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.
- [Defending Code Reference Harness](https://hebbmind.com/de/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.
- [Supply Chain Risk Auditor](https://hebbmind.com/de/skill/supply-chain-risk-auditor.md): [Skill] Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.

Next page: https://hebbmind.com/de/tools.md?page=9&profession=fullstack%2Cdevops%2Calgorithm%2Cdata-engineering
