# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Full-stack / Indie or Mobile & desktop, Tagged `code-quality`: 42 items.

> - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration.
> - Mobile & desktop: Building and shipping iOS, Android and desktop apps.

- [Verification Before Completion](https://hebbmind.com/de/skill/verification-before-completion.md): [Skill] Requires the agent to run the full verification commands and read the output before claiming work is done, fixed or passing, backing claims with evidence and ruling out unverified success reports. From the Superpowers workflow.
- [Karpathy-Inspired Claude Code Guidelines](https://hebbmind.com/de/skill/andrej-karpathy-skills.md): [Skill] Behavior guidelines drawn from Karpathy's observations of how LLMs go wrong when coding: think before acting, keep it simple, make surgical changes only, and drive work by verifiable goals. Can also be used directly as a CLAUDE.md.
- [Karpathy-Inspired Claude Code Guidelines](https://hebbmind.com/de/plugin/andrej-karpathy-skills.md): [Plugin] Four guidelines based on Karpathy's observations of common LLM coding mistakes: think before coding, prefer simplicity, make only necessary changes, and work toward verifiable goals. Ships as a plugin skill or works as a CLAUDE.md. Community-made, not by Karpathy.
- [Ponytail](https://hebbmind.com/de/skill/ponytail.md): [Skill] Has the agent follow a 'don't write it if you can avoid it' ladder: ask if it's needed, then reuse existing code, the standard library, platform features and installed dependencies, writing only the minimum while keeping validation, error handling, security and accessibility.
- [Ponytail](https://hebbmind.com/de/plugin/ponytail.md): [Plugin] 'Laziest senior engineer' mode: checks whether the work is needed and whether existing code, the standard library or platform features cover it, then writes the minimum code while keeping validation, error handling and security. For Claude Code and Codex; its hook needs Node.js.
- [Hookify](https://hebbmind.com/de/plugin/hookify.md): [Plugin] Generates hook rules from a one-line description or by analyzing recent conversations. Rules are Markdown files with match conditions that block or warn on dangerous commands and unwanted patterns, and take effect without a restart. Official Anthropic plugin.
- [PR Review Toolkit](https://hebbmind.com/de/plugin/pr-review-toolkit.md): [Plugin] Six specialized review subagents that check comment accuracy, test coverage, silent failures, type design, code style and simplification opportunities. Run them individually or all at once. Official Anthropic plugin.
- [Code Review and Quality](https://hebbmind.com/de/skill/code-review-and-quality.md): [Skill] Reviews code changes before merge across five axes: correctness, readability, architecture, security and performance. Works on code and PRs from you, other agents or other people, judged by whether they improve overall code health. Part of Addy Osmani's agent-skills.
- [Impeccable](https://hebbmind.com/de/plugin/impeccable.md): [Plugin] Frontend design quality plugin: one skill plus 24 commands (audit, critique, polish and more) and 61 built-in deterministic rules that find common design flaws in AI-generated interfaces and fix them one by one.
- [Ruff](https://hebbmind.com/de/cli/ruff.md): [CLI] Astral's extremely fast Python linter and formatter written in Rust, replacing Flake8, isort and Black, with 900+ built-in rules and auto-fix.
- [Open Code Review](https://hebbmind.com/de/skill/open-code-review.md): [Skill] Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba.
- [Open Code Review](https://hebbmind.com/de/plugin/open-code-review.md): [Plugin] Alibaba's open-source AI code review tool: reads the Git diff, groups changed files for parallel review by subagents and returns line-level comments; the plugin adds review and delegated review commands. Install the ocr CLI and configure a model first; delegated mode needs no API key.
- [Open Code Review](https://hebbmind.com/de/cli/open-code-review.md): [CLI] Alibaba's open-source AI code review CLI (ocr): a deterministic pass filters and groups files and matches rules, then an agent reads the context and writes line-level comments; ocr scan reviews a whole directory. Needs an LLM endpoint, or delegate mode to hand off to your coding agent.
- [wshobson/agents](https://hebbmind.com/de/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands.
- [Code Modernization](https://hebbmind.com/de/plugin/code-modernization.md): [Plugin] Modernizes legacy codebases: assesses the current state, maps dependencies, extracts business rules and plans the migration, then upgrades or rewrites, running old and new code on the same inputs to prove identical behavior. Official Anthropic plugin.
- [ShellCheck](https://hebbmind.com/de/cli/shellcheck.md): [CLI] Static analysis for shell scripts: flags syntax errors and common bash/sh pitfalls such as quoting and variable expansion, with suggested fixes. Good for checking agent-generated scripts and easy to add to CI.
- [Code Simplifier](https://hebbmind.com/de/plugin/code-simplifier.md): [Plugin] Simplifies and tidies recently changed code without changing behavior: reduces nesting and redundancy, improves naming and follows the project conventions in CLAUDE.md. Official Anthropic plugin.
- [Ruby LSP](https://hebbmind.com/de/plugin/ruby-lsp.md): [Plugin] Connects Claude Code to Shopify's Ruby LSP for code intelligence and analysis of .rb, .rake, .gemspec, .erb and other files. Needs Ruby 3.0+; run gem install ruby-lsp first. Official Anthropic plugin.
- [C/C++ LSP (clangd)](https://hebbmind.com/de/plugin/clangd-lsp.md): [Plugin] Connects Claude Code to the clangd C/C++ language server for code intelligence, diagnostics and formatting. Install LLVM/clangd and add it to PATH first. Official Anthropic plugin.
- [TypeScript LSP](https://hebbmind.com/de/plugin/typescript-lsp.md): [Plugin] Connects Claude Code to a TypeScript/JavaScript language server for go-to-definition, find references and live type error checking. Install typescript-language-server globally first. Official Anthropic plugin.
- [C# LSP](https://hebbmind.com/de/plugin/csharp-lsp.md): [Plugin] Connects Claude Code to the C# language server csharp-ls for code intelligence and diagnostics. Needs .NET SDK 6.0+; install csharp-ls first via dotnet tool or Homebrew. Official Anthropic plugin.
- [Pyright LSP](https://hebbmind.com/de/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin.
- [Go LSP (gopls)](https://hebbmind.com/de/plugin/gopls-lsp.md): [Plugin] Connects Claude Code to gopls, Go's official language server, for code intelligence, refactoring and analysis. Install gopls with go install and add Go's bin directory to PATH first. Official Anthropic plugin.
- [PHP LSP](https://hebbmind.com/de/plugin/php-lsp.md): [Plugin] Connects Claude Code to the Intelephense PHP language server for code intelligence and diagnostics. Install intelephense globally with npm first. Official Anthropic plugin.
- [React Composition Patterns](https://hebbmind.com/de/skill/composition-patterns.md): [Skill] Vercel's guide to React composition patterns: replaces boolean prop sprawl with compound components, lifted state and clean Context interfaces, including React 19 API changes. Useful for refactoring component libraries and reviewing component architecture.
- [Vercel React Best Practices](https://hebbmind.com/de/skill/react-best-practices.md): [Skill] React and Next.js performance rules from Vercel's engineering team: 70 rules ranked by impact covering request waterfalls, bundle size, server performance and re-renders, for writing, reviewing and refactoring. Maintained by Vercel.
- [Biome](https://hebbmind.com/de/cli/biome.md): [CLI] All-in-one toolchain for web projects: fast formatting and linting with 500+ rules for JS, TS, JSX, JSON, CSS and GraphQL. Formatting is highly compatible with Prettier, and check --write applies all fixes in one pass.
- [SwiftLint](https://hebbmind.com/de/cli/swiftlint.md): [CLI] Style and convention linter for Swift, with most rules built on SwiftSyntax. Configure it with .swiftlint.yml, auto-correct with --fix, and run it in an Xcode build phase or as a SwiftPM plugin.
- [Semgrep](https://hebbmind.com/de/cli/semgrep.md): [CLI] Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.
- [Semgrep MCP](https://hebbmind.com/de/mcp/semgrep-mcp.md): [MCP] Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN.
- [ast-grep](https://hebbmind.com/de/cli/ast-grep.md): [CLI] AST-based structural code search, lint and bulk rewrite tool: matches code patterns rather than text, with $VAR wildcards for nodes, making it well suited to agents doing large cross-file refactors.
- [pre-commit](https://hebbmind.com/de/cli/pre-commit.md): [CLI] Multi-language git hook manager: declare formatting, lint, secret scanning and other hooks in .pre-commit-config.yaml to run automatically before each commit, or have the agent self-check with pre-commit run --all-files before committing.
- [React Doctor](https://hebbmind.com/de/skill/react-doctor.md): [Skill] Runs React Doctor via npx to scan React code for security, performance, correctness, accessibility and architecture issues with a 0-100 health score; checks changed code for regressions, and on /doctor fetches the official triage playbook to fix issues.
- [Improve React](https://hebbmind.com/de/skill/improve-react.md): [Skill] Audits a whole React codebase read-only: runs a React Doctor scan as evidence, vets findings across bugs, performance, accessibility, security and maintainability, ranks them by leverage, then writes self-contained plans other agents can execute. Never edits source.
- [Thermo-Nuclear Code Quality Review](https://hebbmind.com/de/skill/thermo-nuclear-code-quality-review.md): [Skill] Runs an extremely strict maintainability review of the current branch: hunts for restructurings that make the change dramatically simpler and flags files pushed past 1,000 lines, ad-hoc conditionals, thin wrappers and needless casts. From Cursor's official plugins; invoke manually.
- [improve](https://hebbmind.com/de/plugin/improve.md): [Plugin] Uses a strong model to audit your codebase and list evidence-backed issues across correctness, security, performance and testing, writes a plan a cheaper model can execute, and reviews the results. It never edits code itself. By shadcn.
- [Antfu Conventions](https://hebbmind.com/de/skill/antfu.md): [Skill] Applies Anthony Fu's conventions for JavaScript and TypeScript projects: file organization, explicit imports, Vitest style, @antfu/ni, @antfu/eslint-config with antislop, Knip, tsdown and a single ci script, mirroring the antfu/starter-ts template for new projects.
- [Sentry Skills](https://hebbmind.com/de/skill/getsentry-skills.md): [Skill] Skills Sentry's engineering team uses itself: code review, bug finding, security review, writing commits and PRs, and iterating on a PR until CI passes. Maintained by Sentry; some skills follow its internal conventions.
- [SonarQube MCP Server](https://hebbmind.com/de/mcp/sonarqube-mcp-server.md): [MCP] Official SonarSource server: connects to SonarQube Server or Cloud so agents can query code issues, quality gates, security hotspots and dependency risks, and analyze file contents directly. Needs a SonarQube token; Docker is the recommended way to run it.
- [Effect](https://hebbmind.com/de/skill/effect.md): [Skill] Opinionated guide to production TypeScript with Effect v4: Effect.gen workflows, Context.Service and Layer services, Schema models and typed errors, Config, Schedule retries, Cache, Stream, HttpClient and deterministic tests, plus patterns to avoid. Requires Effect v4.
- [Svelte Code Writer](https://hebbmind.com/de/skill/svelte-code-writer.md): [Skill] Has the agent use the @sveltejs/mcp CLI via npx whenever it creates, edits or analyzes Svelte components or modules: list and fetch Svelte 5 and SvelteKit docs sections, and run svelte-autofixer to catch issues and validate every component before finishing. Official Svelte skill.
- [SonarQube](https://hebbmind.com/de/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.
