# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for QA or ML / AI or Data engineering or Security or Design: 599 items.

> - QA: Functional testing, test automation and quality assurance.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Design: Interface, interaction, visual and brand design.

- [SQLMesh](https://hebbmind.com/de/cli/sqlmesh.md): [CLI] Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt.
- [Designer Skills Pack](https://hebbmind.com/de/plugin/designer-skills.md): [Plugin] Claude Code plugin marketplace for designers: 33 plugins and 273 skills for user research, design systems, UX strategy, interaction, prototype testing, visual critique and accessibility. Install designer-toolkit and run /designer-toolkit:start-here for a suggested flow; no coding needed.
- [Vue Testing Best Practices](https://hebbmind.com/de/skill/vue-testing-best-practices.md): [Skill] Testing practices for Vue apps: Vitest and Vue Test Utils, black-box component tests, flushPromises for async code, helpers for testing composables, Pinia stores, async components and Teleport, avoiding snapshot-only tests, and Playwright for end-to-end testing.
- [FreeCAD MCP](https://hebbmind.com/de/mcp/freecad-mcp.md): [MCP] Lets agents drive the open-source CAD app FreeCAD: create and edit part models in natural language, run Python scripts, capture views and run FEM structural analysis for mechanical and product design. Needs FreeCAD with the addon and its RPC server, plus uv; engineers should verify results.
- [Figma Console MCP](https://hebbmind.com/de/mcp/figma-console-mcp.md): [MCP] Lets agents read and write Figma: extract variables, components and styles, create and edit screens, FigJam boards and slides on the canvas, and run accessibility checks and design-system audits. Needs a Figma personal access token, the Figma desktop app, Node.js and the companion plugin.
- [Playwright Skill](https://hebbmind.com/de/skill/playwright-skill.md): [Skill] Lets agents write and run Playwright scripts on the fly for browser testing and automation, auto-detecting local dev servers, with screenshots, responsive checks, login flows and link checking. After installing, run npm run setup in the skill directory.
- [Playwright Skill](https://hebbmind.com/de/plugin/playwright-skill.md): [Plugin] Lets agents write and run Playwright scripts on the fly for browser automation: page tests, UX checks and multi-step flows, opening a visible browser by default and auto-detecting local dev servers. After installing the plugin, run npm run setup in the skill directory.
- [arXiv MCP Server](https://hebbmind.com/de/mcp/arxiv-mcp-server.md): [MCP] Search and download arXiv papers and read the authors' LaTeX source section by section, export BibTeX and follow topic updates, with papers cached locally. No API key needed.
- [Apple Design](https://hebbmind.com/de/skill/apple-design.md): [Skill] Reviews mobile and desktop app designs against Apple's Human Interface Guidelines, bundled as 123 pages from developer.apple.com, citing the exact guideline through five review lenses, and flags generic, templated choices. Works on screenshots, mockups or code for SwiftUI, Flutter or Electron.
- [Microsoft Agent Skills](https://hebbmind.com/de/skill/microsoft-skills.md): [Skill] Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all.
- [Paper Search MCP](https://hebbmind.com/de/mcp/paper-search-mcp.md): [MCP] Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.
- [Web Quality Skills](https://hebbmind.com/de/skill/web-quality-skills.md): [Skill] Measurement-first audits and optimization of web quality using Lighthouse, Chrome DevTools performance traces and CrUX data, covering Core Web Vitals, WCAG 2.2 accessibility, SEO and best practices, for any frontend framework. By Addy Osmani (not an official Google project).
- [Supabase Postgres Best Practices](https://hebbmind.com/de/skill/supabase-postgres-best-practices.md): [Skill] Postgres rules ranked by impact: query optimization, indexing, connection pooling, RLS security, schema design and lock troubleshooting, with wrong-vs-right SQL examples, applicable to any Postgres. Maintained by Supabase.
- [Rebiber](https://hebbmind.com/de/cli/rebiber.md): [CLI] Replaces arXiv preprint entries in your .bib file with the official published versions from DBLP and ACL Anthology, keeping citation keys, to tidy references before camera-ready. Overwrites the file by default, so preview with --dry-run. Mainly covers CS venues; needs Python 3.10+.
- [JADX AI MCP](https://hebbmind.com/de/mcp/jadx-ai-mcp.md): [MCP] A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.
- [Rill](https://hebbmind.com/de/cli/rill.md): [CLI] Open-source, agent-friendly BI: define metrics and dashboards in YAML and SQL, and rill init generates project instructions and MCP config for Claude Code so agents can build business dashboards and answer questions in natural language. Local use is free; publishing to Rill Cloud needs an account.
- [x64dbg MCP Server](https://hebbmind.com/de/mcp/x64dbg-mcp-server.md): [MCP] A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.
- [Bright Data MCP](https://hebbmind.com/de/mcp/brightdata-mcp.md): [MCP] Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.
- [Wondel.ai Skills](https://hebbmind.com/de/skill/wondelai-skills.md): [Skill] 65 skills built on methods from business, marketing and design bestsellers like Influence, StoryBrand and The Lean Startup: positioning, copywriting, conversion optimization, sales negotiation, UX review, plus step-by-step startup and site-building guides. Prompt-only, no API key needed.
- [ScanCode Toolkit](https://hebbmind.com/de/cli/scancode-toolkit.md): [CLI] Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.
- [Excalidraw MCP Server](https://hebbmind.com/de/mcp/mcp-excalidraw.md): [MCP] Gives agents a live local Excalidraw canvas: add, edit and delete elements to draw architecture diagrams and flowcharts, take screenshots to check the result, convert Mermaid and export .excalidraw files. Runs locally with no API key; also ships a CLI and an agent skill.
- [MFLUX](https://hebbmind.com/de/cli/mflux.md): [CLI] Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.
- [shot-scraper](https://hebbmind.com/de/cli/shot-scraper.md): [CLI] Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use.
- [Tavily MCP Server](https://hebbmind.com/de/mcp/tavily-mcp.md): [MCP] Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.
- [PaperBanana](https://hebbmind.com/de/mcp/paperbanana.md): [MCP] Turns a paper's method description (text or PDF) or data files into publication-ready diagrams and plots, with several AI reviewer roles refining each figure. Needs an OpenAI or Gemini API key (billed per image), Python and uv. A community reimplementation, not by the original paper's authors.
- [TDD Guard](https://hebbmind.com/de/plugin/tdd-guard.md): [Plugin] Uses hooks to enforce test-driven development in Claude Code: blocks implementation without a failing test, prevents code beyond what tests require, and can use lint results to push refactoring. Needs Node.js 22+. Still maintained, but the author suggests its successor Probity for new projects.
- [TypeUI Design Fundamentals](https://hebbmind.com/de/skill/typeui.md): [Skill] TypeUI's design fundamentals skill: general UI and interaction principles covering visual hierarchy, spacing, typography, 30 laws of interaction and WCAG accessibility. Needs Node.js to install; the TypeUI design-system library needs its hosted MCP and sign-in.
- [MiniMax CLI (mmx)](https://hebbmind.com/de/cli/minimax-ai-cli.md): [CLI] MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription.
- [sqlite-utils](https://hebbmind.com/de/cli/sqlite-utils.md): [CLI] A CLI and Python library by Simon Willison: imports JSON and CSV straight into SQLite with automatic table creation, runs in-memory SQL queries over files, and supports full-text search and table transformations.
- [Figma Use](https://hebbmind.com/de/skill/figma-use.md): [Skill] Figma's official skill that teaches agents to run Plugin API scripts via use_figma, creating and editing nodes, components, variables and auto layout directly on the canvas. Load it before any use_figma call. Needs a Figma account and the remote MCP server.
- [Figma Design to Code](https://hebbmind.com/de/skill/figma-implement-design.md): [Skill] Turns Figma designs into production code in your project, using the design screenshot as the visual target and reusing existing components, design tokens and Code Connect mappings first. Maintained by Figma; needs the Figma MCP server (free plans get only 6 calls a month).
- [figma-use-figjam](https://hebbmind.com/de/skill/figma-use-figjam.md): [Skill] Figma's official skill for building FigJam boards through the Figma MCP: sticky notes, sections, connectors, shapes and tables for brainstorms, retros and meetings. Needs a Figma account, the remote MCP server and the figma-use skill; canvas writes are free in beta; usage pricing is planned.
- [Figma MCP Server Guide](https://hebbmind.com/de/plugin/mcp-server-guide.md): [Plugin] Figma's official plugin: connects the remote Figma MCP server and bundles skills for design-to-code, Code Connect, and generating designs and libraries, letting agents read design context and write to the canvas. Needs a Figma account; Starter plans and View/Collab seats get 6 calls a month.
- [Figma Skills (mcp-server-guide)](https://hebbmind.com/de/skill/figma-skills.md): [Skill] Figma's official skill collection: implement designs as code, map components with Code Connect, generate design-system libraries from code, and build screens and FigJam diagrams on the canvas. Needs the Figma MCP server; canvas writes are in beta and currently free.
- [figma-generate-design](https://hebbmind.com/de/skill/figma-generate-design.md): [Skill] Builds editable Figma designs on the canvas from screens, modals or sidebars in your code, or from a text description, reusing components and variables from the file's published design system first. Maintained by Figma; needs the remote Figma MCP server and the figma-use skill.
- [figma-generate-diagram](https://hebbmind.com/de/skill/figma-generate-diagram.md): [Skill] Figma's official skill: the agent writes Mermaid, then uses the Figma MCP to build flowcharts and sequence, state, Gantt and ER diagrams in FigJam for you to tweak by hand. Unsupported types like pie charts and mind maps are flagged upfront. Needs a Figma account and the remote MCP server.
- [MCP Memory Service](https://hebbmind.com/de/mcp/mcp-memory-service.md): [MCP] Self-hostable long-term memory for agents, offering MCP, a REST API and a web dashboard: semantic search, knowledge graph and automatic memory consolidation. Embeddings are computed locally; choose SQLite, Cloudflare or Milvus as the backend.
- [Design DNA](https://hebbmind.com/de/skill/design-dna.md): [Skill] Breaks reference UIs you like (screenshots, images or URLs) into a structured design DNA JSON covering design tokens, overall style and visual effects, then builds new pages from your content in that style. Installing needs Node.js; no API key required.
- [OSS Review Toolkit (ORT)](https://hebbmind.com/de/cli/ort.md): [CLI] The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.
- [glTF Transform CLI](https://hebbmind.com/de/cli/donmccurdy-cli.md): [CLI] Command-line tool for inspecting, compressing and optimizing glTF/GLB 3D models, with Draco and Meshopt mesh compression, texture resizing and WebP/KTX2 compression; a single optimize command handles it all.
- [glTF Transform](https://hebbmind.com/de/cli/gltf-transform.md): [CLI] SDK and CLI for reading, editing and optimizing glTF 2.0 3D models: one optimize command does it all, or run Draco and Meshopt geometry compression, texture resizing and WebP or KTX2 compression separately. Suits game and web 3D assets.
- [CC Safety Net](https://hebbmind.com/de/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.
- [Higgsfield AI Skills](https://hebbmind.com/de/skill/higgsfield-ai-skills.md): [Skill] Higgsfield's official skills: generate images, video and voiceover from a single prompt for product shots, e-commerce hero images, YouTube thumbnails, brand guidelines and narrated explainers. Requires the Higgsfield CLI and a signed-in account; generations use account credits.
- [MATLAB MCP Server](https://hebbmind.com/de/mcp/matlab-mcp-core-server.md): [MCP] MathWorks' official server that lets agents start your local MATLAB, write and run scripts and unit tests, and check code style and potential errors, for computing, simulation and data analysis. Needs a licensed MATLAB R2021a+ and the downloaded server binary.
- [evil-read-arxiv](https://hebbmind.com/de/skill/evil-read-arxiv.md): [Skill] Recommends daily papers from arXiv and Semantic Scholar by research interest, reads them and writes illustrated Obsidian notes and a paper graph; can also search venues like CVPR and NeurIPS. Needs Python 3, Obsidian, a vault path and an interests config; the web app needs an Anthropic API key.
- [MeiGen AI Design MCP](https://hebbmind.com/de/mcp/meigen-ai-design-mcp.md): [MCP] Generates product shots, marketing posters and illustrations, removes or swaps backgrounds, upscales and makes videos, with 1,400+ prompt templates and parallel variations. Cloud use needs a MeiGen account and paid credits; the npm version can use OpenAI-compatible APIs or local ComfyUI.
- [ECommerce Details Image Generator](https://hebbmind.com/de/skill/ecom-details-image.md): [Skill] From product photos and a brief, plans a full e-commerce visual set (main images, Amazon/Shopify detail pages, social promos, livestream scenes) with briefs and image prompts, using 25 scene templates and a consistent style. Renders with an OpenAI-compatible image API key; needs Python 3.10+.
- [MCP Server for WinDbg](https://hebbmind.com/de/mcp/mcp-windbg.md): [MCP] Lets agents drive WinDbg's CDB/KD to analyze crash dumps, debug user-mode processes remotely and debug kernels, and triage many dumps in a batch. Windows only; requires WinDbg or Debugging Tools for Windows.
- [Figma Code Connect](https://hebbmind.com/de/cli/code-connect.md): [CLI] Figma's official CLI that links Figma design-system components to real components in your code, so Dev Mode and the Figma MCP show production snippets instead of generated examples. Needs Node.js 18+, a Figma Organization or Enterprise plan, a full Design or Dev Mode seat and an access token.
- [Cookiy AI User Research Skill](https://hebbmind.com/de/skill/user-research-skill.md): [Skill] User research skill: drafts research plans, screeners and interview guides, and turns transcripts into reports with coding tables, personas and priorities, no account needed. AI-moderated interviews, surveys and recruiting real or synthetic participants need a Cookiy AI account, billed per use.

Next page: https://hebbmind.com/de/tools.md?page=9&profession=qa%2Calgorithm%2Cdata-engineering%2Csecurity%2Cdesign
