# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Type Skill, Resources for ML / AI or Security: 50 items. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [Skill Creator](https://hebbmind.com/de/skill/skill-creator.md): [Skill] Guides the agent through writing or improving a skill: clarify intent, draft SKILL.md, run scored evals with and without the skill, then tune the description so it triggers accurately. Official Anthropic skill. - [Scientific Agent Skills](https://hebbmind.com/de/skill/scientific-agent-skills.md): [Skill] 166 research skills maintained by K-Dense (formerly Claude Scientific Skills), spanning bioinformatics, cheminformatics, clinical research, materials and physics, including unified access to 78 public databases such as PubChem and UniProt. Works with Claude Code, Codex and Cursor. - [Trail of Bits Skills](https://hebbmind.com/de/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace. - [Claude API](https://hebbmind.com/de/skill/claude-api.md): [Skill] Reference for the Claude API and Anthropic SDK: model selection and pricing, streaming, tool use, prompt caching, Managed Agents and more, plus workflows for model migration and prompt audits. Official Anthropic skill. - [MCP Builder](https://hebbmind.com/de/skill/mcp-builder.md): [Skill] Guides agents in building quality MCP servers: research the protocol and target API, design tools, implement with Python (FastMCP) or the TypeScript SDK, and write evaluation questions to test the result. Official Anthropic skill. - [Agentic Awesome Skills](https://hebbmind.com/de/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills. - [wshobson/agents](https://hebbmind.com/de/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands. - [GDPR Data Handling](https://hebbmind.com/de/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions. - [Find Skills](https://hebbmind.com/de/skill/find-skills.md): [Skill] When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo. - [Anthropic Cybersecurity Skills](https://hebbmind.com/de/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only. - [Compliance Tracking](https://hebbmind.com/de/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review. - [Google Agent Skills](https://hebbmind.com/de/skill/google-google-skills.md): [Skill] Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics. - [Agent Skills for Context Engineering](https://hebbmind.com/de/skill/agent-skills-for-context-engineering.md): [Skill] Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform. - [ARIS (Auto-claude-code-research-in-sleep)](https://hebbmind.com/de/skill/auto-claude-code-research-in-sleep.md): [Skill] Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too. - [Prompt Master](https://hebbmind.com/de/skill/prompt-master.md): [Skill] Writes precise prompts for a specific AI tool: identifies the target tool, extracts your intent, asks at most three questions if details are missing, then outputs a lean, paste-ready prompt. Covers dozens of tools including ChatGPT, Claude Code, Cursor, Midjourney and Sora. - [AI Research Skills](https://hebbmind.com/de/skill/ai-research-skills.md): [Skill] Nearly 100 skills spanning the AI research workflow: ideation and literature review, fine-tuning and post-training, distributed training, inference serving, evaluation, interpretability and paper writing, tied together by an autoresearch orchestration skill. - [Hugging Face CLI (hf-cli)](https://hebbmind.com/de/skill/hf-cli.md): [Skill] Teaches agents the Hugging Face Hub CLI hf: search and download models, manage datasets, Spaces, Buckets and repos, and run Jobs and inference endpoints. The skill content is generated from your local CLI, so install hf first. Maintained by Hugging Face. - [Hugging Face Skills](https://hebbmind.com/de/skill/huggingface-skills.md): [Skill] Hugging Face's official skills: manage Hub models and datasets with the hf CLI, fine-tune language and vision models, run model evaluations, and build Gradio apps deployed to Spaces. Needs an HF account; cloud training on HF Jobs requires a paid plan. - [Hugging Face LLM Trainer](https://hebbmind.com/de/skill/huggingface-llm-trainer.md): [Skill] Lets agents fine-tune language and vision models with TRL or Unsloth on Hugging Face Jobs cloud GPUs, supporting SFT, DPO, GRPO and reward models, and convert results to GGUF for local use. Requires an HF Pro or higher paid plan. Maintained by Hugging Face. - [Supply Chain Risk Auditor](https://hebbmind.com/de/skill/supply-chain-risk-auditor.md): [Skill] Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended. - [Agentic Actions Auditor](https://hebbmind.com/de/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks. - [Differential Review](https://hebbmind.com/de/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [Static Analysis](https://hebbmind.com/de/skill/static-analysis.md): [Skill] Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally. - [Variant Analysis](https://hebbmind.com/de/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity. - [Defending Code Reference Harness](https://hebbmind.com/de/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained. - [Research Paper Writing Skills](https://hebbmind.com/de/skill/research-paper-writing-skills.md): [Skill] Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key. - [Jupyter Notebooks](https://hebbmind.com/de/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins. - [Google Agents CLI Skills](https://hebbmind.com/de/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key. - [Claude Scholar](https://hebbmind.com/de/skill/claude-scholar.md): [Skill] Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin. - [Gemini API Dev](https://hebbmind.com/de/skill/gemini-api-dev.md): [Skill] Teaches agents to code against the latest Gemini API and Python/TypeScript SDKs: multi-turn chat, function calling, structured output, and image and speech generation, while avoiding deprecated older models. Maintained by Google's Gemini team. - [Gemini Skills](https://hebbmind.com/de/skill/gemini-skills.md): [Skill] Gemini API development skills: gemini-api-dev (core API and SDKs), gemini-live-api-dev (real-time bidirectional audio/video streaming) and gemini-omni-flash-api (Omni video generation and editing), filling in APIs released after model training cutoffs. Maintained by Google's Gemini team. - [NVIDIA Agent Skills](https://hebbmind.com/de/skill/nvidia-skills.md): [Skill] NVIDIA's official, verified catalog of hundreds of skills covering CUDA-X libraries, NeMo training, NIM and Dynamo inference, RAG blueprints, Jetson, Omniverse and robotics simulation. The install adds only nvidia-skill-finder, which recommends other skills and installs them once you confirm. - [CTF Skills](https://hebbmind.com/de/skill/ctf-skills.md): [Skill] Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills. - [Microsoft Agent Skills](https://hebbmind.com/de/skill/microsoft-skills.md): [Skill] Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all. - [Cloudflare Agents SDK](https://hebbmind.com/de/skill/agents-sdk.md): [Skill] Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare. - [evil-read-arxiv](https://hebbmind.com/de/skill/evil-read-arxiv.md): [Skill] Recommends daily papers from arXiv and Semantic Scholar by research interest, reads them and writes illustrated Obsidian notes and a paper graph; can also search venues like CVPR and NeurIPS. Needs Python 3, Obsidian, a vault path and an interests config; the web app needs an Anthropic API key. - [dailypaper-skills](https://hebbmind.com/de/skill/dailypaper-skills.md): [Skill] Pulls new papers from Hugging Face Daily Papers and arXiv, scores them by research area into a recommendation page, and writes deep-read Obsidian notes for key ones; can also batch-read Zotero collections. Needs Python 3, Obsidian and poppler; copy the whole skills folder per the README. - [LangChain Skills](https://hebbmind.com/de/skill/langchain-skills.md): [Skill] LangChain's official skill collection: framework selection, quickstarts, middleware, persistence, human-in-the-loop approval, RAG and eval design across LangChain, LangGraph and Deep Agents, in Python and TypeScript. Also installable as a Claude Code plugin. Still in early development. - [PaperJury](https://hebbmind.com/de/skill/paperjury.md): [Skill] Pre-submission review for CS conference papers (CVPR, ACL, NeurIPS and more): polish, translate or condense on request, or let AI reviewers raise issues and a jury rule on them. Only wording fixes are drafted, with your approval; missing experiments go back to you, never invented. Needs Node.js. - [Sentry Skills](https://hebbmind.com/de/skill/getsentry-skills.md): [Skill] Skills Sentry's engineering team uses itself: code review, bug finding, security review, writing commits and PRs, and iterating on a PR until CI passes. Maintained by Sentry; some skills follow its internal conventions. - [Awesome Legal Skills](https://hebbmind.com/de/skill/awesome-legal-skills.md): [Skill] 250+ human-reviewed legal skills from practicing lawyers, in-house counsel and academics, mostly US and EU law: compliance, GDPR, legal research, litigation, contract review and drafting, the EU AI Act. Install all or pick one; output is a draft for a lawyer to review. - [PaperOrchestra](https://hebbmind.com/de/skill/paperorchestra.md): [Skill] The five-agent PaperOrchestra pipeline (outline, figures, literature review, section writing, polishing) as skills: turns research ideas, experiment logs and a conference template into a LaTeX paper and checks citations via Semantic Scholar. Needs Python; verify the draft yourself. - [Firecrawl](https://hebbmind.com/de/skill/firecrawl.md): [Skill] Official Firecrawl skill: drives the Firecrawl CLI to search, scrape, map site URLs, batch-crawl, interact with pages and monitor changes, returning LLM-ready Markdown. Search and scrape have a rate-limited free tier; crawling and monitoring need an account or self-hosted instance. - [Elastic Agent Skills](https://hebbmind.com/de/skill/elastic-agent-skills.md): [Skill] Elastic's official skills teaching agents to use Elasticsearch and Kibana correctly: index design, ES|QL queries, search relevance tuning, dashboards, observability troubleshooting and security alert triage. Currently a technical preview. - [ElevenLabs Skills](https://hebbmind.com/de/skill/elevenlabs-skills.md): [Skill] Official ElevenLabs skills: text to speech, speech to text, sound effects and music generation, voice changing, vocal isolation, multilingual dubbing and building voice agents. Needs an ElevenLabs API key. - [Tavily Agent Skills](https://hebbmind.com/de/skill/tavily-ai-skills.md): [Skill] Official Tavily skills: let agents search the web, extract page content, discover site URLs, crawl in bulk and run cited deep research through the Tavily CLI (tvly). Install the CLI first; search and extract have a limited no-login tier, other features need sign-in or an API key. - [Claude Trading Skills (AGIPro)](https://hebbmind.com/de/skill/agiprolabs-claude-trading-skills.md): [Skill] 68 trading and quant skills focused on crypto and DeFi: market and on-chain data, technical indicators, backtesting, position sizing and risk, prediction markets, and tax tools for cost basis and wash sales. Most need Python and data API keys (often free tiers); get expert review. - [FinLab AI](https://hebbmind.com/de/skill/finlab-ai.md): [Skill] Official FinLab quant skill: lets agents use FinLab data (mainly Taiwan stocks, plus US, Japan, Korea and Hong Kong) to write stock-picking strategies, run backtests and analyze factors. Needs a FinLab account (free tier has a daily data cap), Python 3.10+ and uv. Not investment advice. - [Databricks Agent Skills](https://hebbmind.com/de/skill/databricks-agent-skills.md): [Skill] Official Databricks skills guiding agents to build Lakeflow pipelines and jobs, Apps, Lakebase, Vector Search, Model Serving and AI/BI dashboards on the lakehouse. Needs the Databricks CLI. - [Alibaba Cloud Skills](https://hebbmind.com/de/skill/alibabacloud-aiops-skills.md): [Skill] Alibaba Cloud's official agent skills: ECS diagnosis and DR, RDS/PolarDB database checks, PAI training and EAS deployment, ACK clusters, RAM permissions, OSS and network troubleshooting, and Model Studio. Needs an AccessKey or aliyun CLI credentials.