Tools

Static analysis for shell scripts: flags syntax errors and common bash/sh pitfalls such as quoting and variable expansion, with suggested fixes. Good for checking agent-generated scripts and easy to add to CI.

Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP.

ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo.

Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.

Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.

Define multi-container apps in compose.yaml and bring up services, databases, caches and the rest with one docker compose up, handy for agents setting up local dev and test dependencies. Maintained by Docker; included with Docker Desktop on macOS.

Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.

Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.

Distills technical books, doc folders or paper collections (PDF, EPUB, DOCX, Markdown and more) into an agent skill with a core framework, on-demand chapter files, glossary and cheat sheet for lookup while working. Extraction needs local Python; poppler or docling optional for PDFs.

Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.

Lets agents create and edit draw.io diagrams such as flowcharts and architecture diagrams in plain language, with live browser preview, version history and export to .drawio, PNG or SVG. Includes an embedded server; runs locally with no API key.

Claude Code plugin for Next AI Draw.io that starts its Draw.io MCP server via npx. Generate and edit flowcharts, architecture and sequence diagrams in plain language, with live browser preview, version history and .drawio export. Needs Node.js.

Command runner that saves and runs project commands in a justfile, with make-inspired but simpler syntax. Agents can use just --list to discover a project's build, test and deploy commands and run them directly.

Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.

Polyglot dev environment manager: declare Node, Python, Go and other tool versions, environment variables and project tasks in mise.toml; mise exec and mise run install tools on demand and run them, with one config shared by local and CI.

Terminal multiplexer written in Rust, an alternative to tmux, with layout files, floating and stacked panes, WebAssembly plugins and a built-in web client. Handy for running several agent sessions at once.

Competitive analysis skill from Anthropic's official marketing plugin: researches competitor websites, pricing, recent news and content strategy, compares positioning and messaging, and lists content gaps, opportunities and threats; can also produce sales battlecards. Needs web search.

Writes competitive briefs on one or more competitors or a feature area: researches websites, pricing and reviews online, then compares features, pricing, positioning and go-to-market for prioritization, sales battlecards or board decks. From Anthropic's product-management plugin.

Common Room's official plugin: researches accounts and contacts using product usage, community and buying-intent signals, builds pre-meeting briefs and weekly call prep, drafts email, LinkedIn and phone outreach, and creates account plans. Needs a Common Room account.

Apollo.io's official plugin: describe your ideal customer profile in plain language to find prospects, enrich contacts with emails, phone numbers and company data, and bulk-add them to outreach sequences. Connects to Apollo's remote MCP; needs an Apollo account, and enrichment uses credits.

Lists renewals coming up in the next few months, flags churn risk and expansion opportunities from signals like usage, key contact changes and open complaints, and checks for missing or wrong renewal opportunities in the CRM. Needs a CRM or uploaded contract exports. Official from Anthropic.

Account research skill from Anthropic's official sales plugin: give a company name or domain (and optionally a contact) to get a company overview, recent news and likely priorities, an ICP fit check and existing CRM records. Without a CRM it uses uploaded lists or web search.