Tools

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.

Define multi-container apps in compose.yaml and bring up services, databases, caches and the rest with one docker compose up, handy for agents setting up local dev and test dependencies. Maintained by Docker; included with Docker Desktop on macOS.

Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.

Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.

Distills technical books, doc folders or paper collections (PDF, EPUB, DOCX, Markdown and more) into an agent skill with a core framework, on-demand chapter files, glossary and cheat sheet for lookup while working. Extraction needs local Python; poppler or docling optional for PDFs.

Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.

Claude Code plugin for Next AI Draw.io that starts its Draw.io MCP server via npx. Generate and edit flowcharts, architecture and sequence diagrams in plain language, with live browser preview, version history and .drawio export. Needs Node.js.

Lets agents create and edit draw.io diagrams such as flowcharts and architecture diagrams in plain language, with live browser preview, version history and export to .drawio, PNG or SVG. Includes an embedded server; runs locally with no API key.

Command runner that saves and runs project commands in a justfile, with make-inspired but simpler syntax. Agents can use just --list to discover a project's build, test and deploy commands and run them directly.

Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.

Polyglot dev environment manager: declare Node, Python, Go and other tool versions, environment variables and project tasks in mise.toml; mise exec and mise run install tools on demand and run them, with one config shared by local and CI.

Terminal multiplexer written in Rust, an alternative to tmux, with layout files, floating and stacked panes, WebAssembly plugins and a built-in web client. Handy for running several agent sessions at once.

Pre-signature check for final contracts: open redlines, missing exhibits, party names and signature blocks, then sets up sequential or parallel signing. Sends via DocuSign or similar e-signature services when connected, otherwise writes signing instructions. From Anthropic's legal plugin.

Builds structured interview kits for a role: behavioral and situational questions by competency, follow-up probes, a 1 to 4 scoring rubric and a debrief template, so interviewers assess candidates against the same bar. Part of Anthropic's official human-resources plugin.

Screens resumes against a role rubric into a cited shortlist, ignoring irrelevant details like name and age; drafts invite, hold or decline replies, schedules interviews and builds onboarding checklists. Gmail and Calendar are optional, sending only after you confirm. Official from Anthropic.

Turns resolved tickets, common questions or workarounds into publish-ready knowledge base articles, structured as how-to guides, troubleshooting, FAQs or known issues, and optimized for search. From Anthropic's official customer-support plugin.

Anthropic's official business operations plugin: vendor evaluations, process docs (flowcharts, RACI, SOPs), change requests, capacity planning, status reports and runbooks. Works without external tools and does more with ITSM and project management tools connected.

Support for small merchants: reads customer emails, checks orders and refunds in Stripe, PayPal, Square or Shopify, and drafts replies in the owner's voice per your refund policy; can refund via Stripe or Square after explicit approval. Works with pasted emails too. Official from Anthropic.

Builds onboarding plans for new hires: a pre-start checklist (accounts, equipment, buddy), day-one and first-week schedules, and 30/60/90-day goals. Works in plain chat; with an HRIS, knowledge base or calendar connected it pulls in team info and books day-one events. Official from Anthropic.

Pulls verbatim customer quotes on a topic from call transcripts, meeting notes and emails, tagging each with speaker, account and date, and summarizes recurring themes into voice-of-customer findings for product and marketing. Connect Gong, email or drive, or upload transcripts. By Anthropic.

Before replying to a customer, verifies answers across the knowledge base, past tickets, CRM and chat history, grades confidence and cites sources; can also find whether an issue was reported before or what a customer was told. From Anthropic's official customer-support plugin.

HR plugin: drafts offer letters, generates onboarding checklists, runs performance reviews, answers policy questions, and produces compensation benchmarks and people analytics reports. Can connect to HRIS and ATS systems. Official from Anthropic.

Compensation analysis for HR and managers: market pay percentiles by role, level and location, offer competitiveness checks and equity modeling; upload a pay sheet to find employees outside their band and flight risks. Without a comp data source it uses public web data, so verify. By Anthropic.