Tools

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0.

Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.

Generates single-file HTML slide decks with horizontal paging and two built-in visual systems (editorial magazine and Swiss International style), plus presenter mode with speaker notes. Can also make slide illustrations and covers for various platforms. By Guizang.

For SaaS customer success teams: three standard-library Python scripts turn customer data into health scores, churn-risk tiers and ranked expansion opportunities, with reproducible results. Needs Python and customer data in the sample JSON format. Part of the claude-skills collection.

Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Google Labs' DESIGN.md format and CLI: designers capture colors, typography and spacing in a file for agents; lint checks broken references and WCAG contrast, diff compares versions and export outputs design tokens for Tailwind and more. Needs Node.js; the format is in alpha.

Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key.

Turns an article or Markdown into a set of slide images: drafts an outline and style first, then generates each page, and can merge them into PPTX or PDF. Comes with over ten visual presets. Needs a working image generation backend.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need.

Open-source e-book manager whose command-line tools (ebook-convert, ebook-meta, calibredb) batch-convert between EPUB, MOBI, AZW3, PDF, DOCX and more and manage library metadata. The install command is Linux-only; on macOS and Windows use the installer.

Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi.

Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control.

Open-source Zapier alternative with a built-in MCP server: agents can build and test automations in plain language, manage tables, or call hundreds of apps like email, spreadsheets and chat. Use the cloud or self-host, enable the MCP server in settings and connect via OAuth.

Official plugin for Pascal, an open-source 3D architecture editor: lets agents create, edit and validate 3D models of rooms and floors over MCP and check furniture placement for collisions or blocked doors. Local use needs the Pascal CLI (Node.js 22.13+); hosted projects need an API key.

Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally.

Fast speech transcription built on faster-whisper, with word-level timestamps and speaker diarization, suited to meeting notes and subtitles. Diarization needs a Hugging Face token; GPU acceleration needs CUDA.

Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.

Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.

Google's official GKE basics skill: creating clusters, choosing Autopilot or Standard, getting kubectl credentials, configuring Workload Identity and deploying workloads, plus a list of common gotchas. Needs gcloud and a GCP project.

Community-maintained modern replacement for ls (successor to exa) with colored output, tree view, Git status and file icons, plus .gitignore filtering for quickly scanning directory structures.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.