# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Mobile & desktop or DevOps / SRE or ML / AI or Security or Founders: 757 items.

> - Mobile & desktop: Building and shipping iOS, Android and desktop apps.
> - DevOps / SRE: Deployment, monitoring, cloud resources and reliability.
> - ML / AI: Model training, evaluation and LLM application development.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Founders: Business plans, fundraising decks, business analysis and team management.

- [gog (gogcli)](https://hebbmind.com/de/cli/gogcli.md): [CLI] Google Workspace CLI for scripts and agents covering Gmail, Calendar, Drive, Docs, Sheets, Contacts and Tasks, with JSON output, read-only mode and command allowlists; can also run as a read-only-by-default MCP server. Bring your own Google OAuth client.
- [Research Paper Writing Skills](https://hebbmind.com/de/skill/research-paper-writing-skills.md): [Skill] Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key.
- [App Store Connect CLI](https://hebbmind.com/de/cli/app-store-connect-cli.md): [CLI] asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key.
- [NextTrace](https://hebbmind.com/de/cli/ntrace-core.md): [CLI] Open-source visual traceroute that shows IP geolocation, AS number and carrier for every hop, with continuous MTR probing and JSON output; the full edition can also be deployed as an MCP server.
- [MLX-Audio](https://hebbmind.com/de/cli/mlx-audio.md): [CLI] Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg.
- [Static Analysis](https://hebbmind.com/de/skill/static-analysis.md): [Skill] Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.
- [Supply Chain Risk Auditor](https://hebbmind.com/de/skill/supply-chain-risk-auditor.md): [Skill] Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.
- [Variant Analysis](https://hebbmind.com/de/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity.
- [Trail of Bits Skills](https://hebbmind.com/de/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too.
- [Agentic Actions Auditor](https://hebbmind.com/de/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.
- [Differential Review](https://hebbmind.com/de/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.
- [Culture Index](https://hebbmind.com/de/plugin/culture-index.md): [Plugin] Trail of Bits plugin for Culture Index assessments: profiles individual traits, checks team balance (gas, brake, glue), compares people with job profiles to flag burnout and attrition risk, and helps draft hiring profiles. Needs your own reports (JSON or PDF); PDFs need uv.
- [dasel](https://hebbmind.com/de/cli/dasel.md): [CLI] Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.
- [Product Manager Skills](https://hebbmind.com/de/skill/product-manager-skills.md): [Skill] 77 product management skills built on JTBD, opportunity solution trees, RICE, Working Backwards and other proven methods: user interviews, PRDs, roadmaps, prioritization, competitive intel, market sizing and sunsetting, explaining the frameworks as they go. CC BY-NC-SA licensed.
- [Product Manager Skills](https://hebbmind.com/de/plugin/product-manager-skills.md): [Plugin] Plugin marketplace of 77 product management skills based on JTBD, opportunity solution trees, RICE and other proven methods, covering user interviews, PRDs, roadmaps, prioritization, market sizing and product sunsets. A Codex skill pack is also available.
- [Steampipe](https://hebbmind.com/de/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.
- [stable-diffusion.cpp](https://hebbmind.com/de/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.
- [Codex Security](https://hebbmind.com/de/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.
- [Build iOS Apps](https://hebbmind.com/de/skill/openai-skills-3.md): [Skill] OpenAI's official iOS skills: SwiftUI patterns and view refactoring, iOS 26 Liquid Glass, App Intents, performance audits with ETTrace sampling, memory leak hunting with memgraph, and simulator debugging. Needs macOS and Xcode; debugging skills rely on XcodeBuildMCP.
- [Notion Meeting Intelligence](https://hebbmind.com/de/skill/notion-meeting-intelligence.md): [Skill] Prepares meetings using past notes, requirements and decisions in Notion: picks a template by meeting type, drafts the agenda and pre-reads, and adds research. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP.
- [Jupyter Notebooks](https://hebbmind.com/de/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins.
- [Build macOS Apps](https://hebbmind.com/de/plugin/build-macos-apps.md): [Plugin] OpenAI's official Codex plugin for macOS apps: building and running, SwiftUI scenes and AppKit interop, testing and troubleshooting, signing, notarization and packaging, and logging instrumentation. Requires macOS and Xcode; Codex only.
- [Gmail](https://hebbmind.com/de/plugin/gmail.md): [Plugin] OpenAI's official Codex plugin that uses the Gmail connector to search mail, read threads, draft replies and tidy your inbox. The plugin bundles no extra skills; authorize your Google account in Codex.
- [Data Analytics](https://hebbmind.com/de/skill/openai-skills.md): [Skill] OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime.
- [Test Android Apps](https://hebbmind.com/de/plugin/test-android-apps.md): [Plugin] Reproduces issues on the Android emulator: installs builds, drives the UI with adb, dumps the UI tree, takes screenshots, captures logcat, and gathers performance evidence with Simpleperf and Perfetto. OpenAI's official Codex plugin; needs the Android SDK.
- [OpenAI Developers](https://hebbmind.com/de/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.
- [Linear (Codex plugin)](https://hebbmind.com/de/plugin/openai-linear.md): [Plugin] Linear's official plugin in OpenAI's Codex marketplace: search, create and update Linear issues, projects and initiatives from Codex, and draft PRDs, status updates and customer request summaries. Codex only; needs a Linear account and authorization.
- [Outlook Calendar](https://hebbmind.com/de/plugin/outlook-calendar.md): [Plugin] OpenAI's official Codex plugin for Outlook Calendar: summarizes your day, compares availability across people, preps meetings, explains busy and tentative states, and creates, reschedules or cancels meetings. Requires Codex with a ChatGPT sign-in and a Microsoft account.
- [Figma (Codex)](https://hebbmind.com/de/plugin/figma.md): [Plugin] Figma's Codex plugin in OpenAI's official marketplace: implements UI from designs, generates Code Connect mappings, and creates or updates pages, component libraries, FigJam diagrams and slides in Figma. Needs a connected Figma account.
- [Google Calendar](https://hebbmind.com/de/plugin/google-calendar.md): [Plugin] OpenAI's official Codex plugin for Google Calendar: summarize today's schedule, compare availability across people, prep for meetings, and create, edit or delete events. Requires signing in to Codex with ChatGPT and authorizing your Google account.
- [App Store & Google Play Screenshots Generator](https://hebbmind.com/de/skill/app-store-screenshots.md): [Skill] Has the agent build a local Next.js editor that turns app screenshots into App Store and Google Play marketing images: real device frames, bold headlines, 18 visual styles, multiple languages and RTL layouts, with one-click export of every required size. Needs Node.js.
- [Granola](https://hebbmind.com/de/plugin/granola.md): [Plugin] Granola's official plugin in OpenAI's Codex marketplace: search past Granola meeting notes by topic, person, company or date, and cite the discussions and decisions when writing proposals, reports or analyses. Codex only; needs a Granola account already recording meetings.
- [OpenAI Codex Plugins](https://hebbmind.com/de/plugin/openai-plugins.md): [Plugin] OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install.
- [Build iOS Apps](https://hebbmind.com/de/plugin/build-ios-apps.md): [Plugin] OpenAI's official Codex plugin for iOS: SwiftUI UI work and refactoring, App Intents, simulator debugging, performance profiling and memory leak hunting, with XcodeBuildMCP built in. Requires macOS and Xcode; Codex only.
- [Home Assistant MCP Server (ha-mcp)](https://hebbmind.com/de/mcp/ha-mcp.md): [MCP] Lets agents operate Home Assistant: control devices, query state and history, create and debug automations and edit dashboards, with 80+ tools. Community-maintained (unofficial); requires your own Home Assistant instance, and running via uvx needs a long-lived access token.
- [Defending Code Reference Harness](https://hebbmind.com/de/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.
- [Himalaya](https://hebbmind.com/de/cli/himalaya.md): [CLI] Command-line email client supporting IMAP, SMTP, JMAP, Gmail and Microsoft Graph, with multiple accounts and --json output, so agents can check, search, compose and send mail. A first-run wizard auto-detects your mailbox settings.
- [kubectl-ai](https://hebbmind.com/de/cli/kubectl-ai.md): [CLI] Manage Kubernetes clusters in natural language: translates intent into kubectl operations and runs them, and can serve as an MCP server for other agents. Uses Gemini by default (API key required) and also supports OpenAI and local models. Maintained by Google Cloud.
- [OpenCompass](https://hebbmind.com/de/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference.
- [sd](https://hebbmind.com/de/cli/sd.md): [CLI] A more intuitive find-and-replace tool than sed: uses JavaScript/Python-style regex syntax, supports literal string mode and in-place file edits, which suits agents doing bulk text rewrites.
- [Jupytext](https://hebbmind.com/de/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip.
- [arxiv-latex-cleaner](https://hebbmind.com/de/cli/arxiv-latex-cleaner.md): [CLI] Cleans a LaTeX project before arXiv submission: removes comments, auxiliary files and unused .tex files and images, and can compress images, so internal notes are not published with the source. From Google Research; installable with Homebrew on macOS.
- [Trafilatura](https://hebbmind.com/de/cli/trafilatura.md): [CLI] Python library and CLI for extracting main web content: fetches pages, crawls via sitemaps and RSS feeds, strips headers, footers and other noise, and outputs TXT, Markdown, JSON, XML and more with metadata. Also processes downloaded HTML offline.
- [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/de/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.
- [zizmor](https://hebbmind.com/de/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.
- [n8n Skills](https://hebbmind.com/de/skill/n8n-skills.md): [Skill] 14 n8n workflow skills: expression syntax, MCP tool usage, node configuration, validation and troubleshooting, Code nodes, AI Agent workflows and self-hosted n8n deployment. Meant to be used with the n8n-mcp server.
- [MobileBuildMCP](https://hebbmind.com/de/mcp/mobilebuildmcp.md): [MCP] Lets agents build, run, test and debug iOS and macOS projects and control simulators and physical devices, with a CLI mode too. Formerly XcodeBuildMCP, now maintained by Sentry; macOS only, requires Xcode 16 or later.
- [SwiftUI Pro](https://hebbmind.com/de/skill/swiftui-pro.md): [Skill] SwiftUI skill by Paul Hudson of Hacking with Swift: reviews and improves SwiftUI code, covering modern vs deprecated APIs, performance, navigation and layout, state management and VoiceOver accessibility, targeting iOS 26 and Swift 6.2.
- [Google Agents CLI Skills](https://hebbmind.com/de/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.
- [Ghidra MCP Server](https://hebbmind.com/de/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.

Next page: https://hebbmind.com/de/tools.md?page=9&profession=mobile%2Cdevops%2Calgorithm%2Csecurity%2Cfounder
