# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Security or Research / Academia: 326 items. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Research / Academia: Literature search and reviews, experimental data analysis, paper writing and submission. - [yt-dlp](https://hebbmind.com/de/cli/yt-dlp.md): [CLI] Command-line audio and video downloader supporting thousands of sites: pick formats and quality, grab subtitles and metadata, and merge or transcode with FFmpeg. The actively maintained fork of youtube-dl. - [MarkItDown-MCP](https://hebbmind.com/de/mcp/markitdown-mcp.md): [MCP] From Microsoft: converts PDF, Word, Excel, PowerPoint, HTML and other files or URLs to Markdown so agents can read and search them. A single convert_to_markdown tool over STDIO or local HTTP. - [MarkItDown](https://hebbmind.com/de/cli/markitdown.md): [CLI] Converts PDF, Word, Excel, PowerPoint, HTML, images, audio and more into Markdown that keeps headings, lists and tables, ready for LLMs to read and analyze. Maintained by Microsoft; requires Python 3.10+. - [PDF](https://hebbmind.com/de/skill/pdf.md): [Skill] Extracts text and tables from PDFs; merges, splits and rotates pages, adds watermarks, fills forms and OCRs scanned documents. The official Anthropic skill behind Claude's document features; source-available, not open source. - [Scientific Agent Skills](https://hebbmind.com/de/skill/scientific-agent-skills.md): [Skill] 166 research skills maintained by K-Dense (formerly Claude Scientific Skills), spanning bioinformatics, cheminformatics, clinical research, materials and physics, including unified access to 78 public databases such as PubChem and UniProt. Works with Claude Code, Codex and Cursor. - [Claude Security](https://hebbmind.com/de/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [Trail of Bits Skills](https://hebbmind.com/de/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace. - [Teach](https://hebbmind.com/de/skill/teach.md): [Skill] Turns the current folder into a teaching workspace you can resume across conversations: asks your learning goal, gathers reliable sources, builds short HTML lessons and cheat sheets, and tracks progress. Good for self-study and lesson prep; invoke manually (/teach), no API key. - [ECC](https://hebbmind.com/de/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [Discernment Nudge](https://hebbmind.com/de/skill/discernment-nudge.md): [Skill] After giving advice, a draft or a data analysis, adds 2-3 targeted follow-up questions that prompt the user to check key facts, test the reasoning and fill in missing context. Fires at most once per conversation. Official Anthropic skill. - [TradingAgents](https://hebbmind.com/de/cli/tradingagents.md): [CLI] Multi-agent investment research framework where fundamental, sentiment, news and technical analysts, bull and bear researchers, a trader and risk managers debate a stock and produce a report and rating. Covers US, Hong Kong and A-shares. Needs Python and an LLM API key; not investment advice. - [Whisper](https://hebbmind.com/de/cli/whisper.md): [CLI] OpenAI's open-source general-purpose speech recognition model. The whisper command transcribes many languages, translates foreign speech into English and writes subtitle files. Needs FFmpeg; faster with a GPU. - [Fetch MCP Server](https://hebbmind.com/de/mcp/fetch.md): [MCP] Official MCP reference server that fetches web pages and converts them to Markdown for the model, reading long pages in chunks from a given offset. Zero config, but it can reach internal network addresses, so use it with care. - [PaddleOCR](https://hebbmind.com/de/cli/paddleocr.md): [CLI] Baidu PaddlePaddle's official OCR and document parsing tool: the paddleocr command reads text from images and parses PDFs and scans into Markdown or JSON, supporting 100+ languages with models that run locally. - [PaddleOCR MCP Server](https://hebbmind.com/de/mcp/paddlepaddle-mcp-server.md): [MCP] Official PaddleOCR MCP: text recognition and layout parsing for images and PDFs (PP-OCR, PP-StructureV3, PaddleOCR-VL), returning text or Markdown. Runs inference locally, or calls the official API or a self-hosted service. - [MinerU](https://hebbmind.com/de/cli/mineru.md): [CLI] Document parser from OpenDataLab that turns PDFs, images and Office files into Markdown or JSON, handling tables, formulas and complex layouts well, with page-by-page reading and citation anchors for agents. Parses locally by default; needs Python 3.10+. - [LlamaFactory](https://hebbmind.com/de/cli/llamafactory.md): [CLI] All-in-one LLM fine-tuning framework: llamafactory-cli handles pretraining, SFT, PPO/DPO alignment and LoRA/QLoRA training, plus chat inference, weight merging and export, and OpenAI-style API serving for 100+ open models. Has a Web UI; training usually needs a GPU. - [OpenBB MCP Server](https://hebbmind.com/de/mcp/openbb-finance-mcp-server.md): [MCP] Official OpenBB MCP server exposing the OpenBB Platform's equity, ETF, macroeconomic, crypto and news data to agents; enable only the tool categories you need to save context. Needs uv locally; some data sources need your own API keys. Not investment advice. - [Docling](https://hebbmind.com/de/cli/docling.md): [CLI] Parses PDF, DOCX, PPTX, XLSX, HTML, images and audio, recovering layout, reading order, tables and formulas, and exports Markdown, HTML or lossless JSON. Started by IBM Research, now hosted by the LF AI & Data Foundation; runs fully locally. - [AI Hedge Fund](https://hebbmind.com/de/cli/ai-hedge-fund.md): [CLI] Multi-agent simulated hedge fund: agents modeled on investors like Buffett and Munger work with quant and risk modules to analyze stocks, with backtesting. Good for teaching investment frameworks. Needs Financial Datasets and model API keys; no real trading, not investment advice. - [Typst](https://hebbmind.com/de/cli/typst.md): [CLI] Modern markup-based typesetting system, a LaTeX alternative for papers, reports and resumes. Fast incremental compilation; typst compile outputs a PDF in one command and watch mode recompiles automatically. - [CLI-Anything QGIS](https://hebbmind.com/de/cli/qgis.md): [CLI] QGIS command-line wrapper from HKU's CLI-Anything project: create and edit .qgz projects, add GeoPackage layers and features, build print layouts and export PDF or images, and call QGIS processing algorithms, with JSON results. Needs QGIS desktop and a Python that can import PyQGIS. - [Academic Research Skills](https://hebbmind.com/de/skill/academic-research-skills.md): [Skill] Skill suite for the whole academic research workflow: deep research (including PRISMA systematic reviews), paper writing, multi-perspective peer review and revision, pausing for human approval at each stage, with citation and integrity checks. CC BY-NC, non-commercial only. - [Academic Research Skills](https://hebbmind.com/de/plugin/academic-research-skills.md): [Plugin] End-to-end academic paper plugin: deep research and literature review, writing, multi-perspective simulated peer review, revision and finalization, pausing for your approval at each stage, with built-in citation verification and integrity checks. Licensed CC BY-NC. - [Scientific Writing (K-Dense)](https://hebbmind.com/de/skill/scientific-writing.md): [Skill] Drafts, revises and reviews research manuscripts, tying every fact and number to verified evidence and covering reporting guidelines, authorship, AI disclosure and confidentiality; explicitly forbids fabricated citations or data. Includes offline check scripts; no API key needed. - [Database Lookup](https://hebbmind.com/de/skill/database-lookup.md): [Skill] Unified database lookup skill from K-Dense's scientific collection: reproducibly queries about 80 public database APIs such as PubChem, UniProt, ChEMBL, ClinicalTrials.gov and FRED, returning traceable results with endpoints, parameters and count checks. Some need API keys. - [Literature Review (K-Dense)](https://hebbmind.com/de/skill/literature-review.md): [Skill] Systematic literature reviews following PRISMA and similar standards: searches PubMed, arXiv, bioRxiv and other databases, verifies each citation's DOI, and outputs Markdown and PDF in APA, Nature or other styles. Main web search uses parallel-cli and needs a Parallel account. - [Scanpy Single-Cell Analysis](https://hebbmind.com/de/skill/scanpy.md): [Skill] Teaches agents standard single-cell RNA-seq analysis with Scanpy: QC, normalization, PCA/UMAP, clustering, differential expression and plots, with ready-to-run pipeline scripts and guidance on converting Seurat and other R objects to h5ad. Needs Python 3.12+; by K-Dense. - [Statistical Analysis](https://hebbmind.com/de/skill/statistical-analysis.md): [Skill] Guides agents to the right statistical method for research data: t-tests, ANOVA, chi-square, regression and Bayesian analysis, checking assumptions, computing effect sizes and power, and reporting results in APA format. Python-based (pingouin, statsmodels); by K-Dense. - [Obsidian Skills](https://hebbmind.com/de/plugin/obsidian-skills.md): [Plugin] From Obsidian CEO Steph Ango (kepano): teaches agents to write Obsidian-flavored Markdown, Bases and Canvas files and work with vaults through the Obsidian CLI, plus skills like web page content extraction. Also installable into Codex and other agents via npx skills. - [Obsidian Skills](https://hebbmind.com/de/skill/obsidian-skills.md): [Skill] Teaches agents to read and write Obsidian vaults: Obsidian-flavored Markdown, Bases data views, JSON Canvas and the Obsidian CLI, plus Defuddle web content extraction and Knap template rendering. Maintained by Obsidian CEO kepano. - [Qlib](https://hebbmind.com/de/cli/qlib.md): [CLI] Microsoft's open-source AI quant investment research platform: the qrun command runs dataset building, model training, backtesting and evaluation from a YAML config, with many benchmark models. The official dataset is paused, so prepare market data per the README first. - [Umi-OCR](https://hebbmind.com/de/cli/umi-ocr.md): [CLI] Free, open-source offline OCR desktop app for screenshots, batch images, scanned PDFs and QR codes, callable via the umi-ocr CLI or an HTTP API (the CLI relies on the app's local HTTP service, on by default). Windows and Linux only. - [Agentic Awesome Skills](https://hebbmind.com/de/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills. - [Pandoc](https://hebbmind.com/de/cli/pandoc.md): [CLI] Universal document converter between dozens of formats including Markdown, Word, HTML, LaTeX and EPUB, with templates, citations and Lua filters. PDF output uses LaTeX by default, which you install separately. - [Fabric](https://hebbmind.com/de/cli/fabric.md): [CLI] Turns common prompts such as summarizing, extracting insights and rewriting into reusable patterns you pipe text, web pages or YouTube transcripts through, using many model providers or local Ollama. Can also run as a REST API. Run fabric --setup first to configure models. - [Manim](https://hebbmind.com/de/cli/manim.md): [CLI] Engine for math and explainer animations in Python (Community Edition, ManimCE): write scenes and render them to video with the manim command, letting agents create teaching and science animations. On macOS install cairo and pkg-config first; formulas need LaTeX. - [DeepTutor](https://hebbmind.com/de/cli/deeptutor.md): [CLI] Personalized tutoring system from HKU's HKUDS: build a knowledge base from textbooks for Q&A, step-by-step solutions and quizzes, for teachers and self-learners. The deeptutor command outputs JSON for agents like Claude Code. Needs Python 3.11+, Node.js 20+ and an LLM API key. - [wshobson/agents](https://hebbmind.com/de/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Security Scanning](https://hebbmind.com/de/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [wshobson/agents](https://hebbmind.com/de/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands. - [GDPR Data Handling](https://hebbmind.com/de/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions. - [Marker](https://hebbmind.com/de/cli/marker.md): [CLI] Converts PDFs, images, PPTX, DOCX, XLSX, EPUB and more into Markdown, JSON or HTML, preserving tables, formulas and layout, with optional LLM help for higher accuracy. Needs Python 3.10+ and PyTorch; large-scale commercial use of the model weights needs a paid license. - [Security Guidance](https://hebbmind.com/de/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [project-artifact](https://hebbmind.com/de/plugin/project-artifact.md): [Plugin] Official Anthropic plugin that builds a shareable status page for big multi-track projects such as migrations, launches or research: goals, workstream order, next steps and risks; say 'refresh' to update the same link. Needs a claude.ai login; Artifacts are a beta for Team and Enterprise plans. - [Math Olympiad](https://hebbmind.com/de/plugin/math-olympiad.md): [Plugin] Official Anthropic plugin that solves competition math such as IMO and Putnam problems, with adversarial checks by an independent verifier that only sees the clean proof. Gives up explicitly rather than bluffing when unsure, and outputs LaTeX/PDF once verified. - [Trivy](https://hebbmind.com/de/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security. - [PDFMathTranslate](https://hebbmind.com/de/cli/pdfmathtranslate.md): [CLI] Translates full PDF papers while preserving formulas, charts and layout (command pdf2zh), outputting monolingual and side-by-side bilingual PDFs. Uses Google Translate by default and can switch to DeepL, OpenAI and others; also runs as an MCP server. - [Vault](https://hebbmind.com/de/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server. - [OCRmyPDF](https://hebbmind.com/de/cli/ocrmypdf.md): [CLI] Adds a searchable, copyable text layer to scanned PDFs, with automatic deskew, rotation and size optimization, outputting PDF/A by default. Built on Tesseract, supports 100+ languages and runs fully locally. Next page: https://hebbmind.com/de/tools.md?page=2&profession=security%2Cresearch