Tools

Browserbase's official skills: drive a local or cloud browser with the browse CLI for web scraping and search, turning site traffic into an OpenAPI spec, adversarial UI testing and competitor research. Cloud features need a Browserbase account.

Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills.

PostgreSQL MCP server with database health checks, index tuning, EXPLAIN plan analysis and hypothetical index simulation, plus safe read-only SQL execution in restricted mode.

AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials.

Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt.

Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare.

Testing practices for Vue apps: Vitest and Vue Test Utils, black-box component tests, flushPromises for async code, helpers for testing composables, Pinia stores, async components and Teleport, avoiding snapshot-only tests, and Playwright for end-to-end testing.

Lets agents write and run Playwright scripts on the fly for browser automation: page tests, UX checks and multi-step flows, opening a visible browser by default and auto-detecting local dev servers. After installing the plugin, run npm run setup in the skill directory.

Lets agents write and run Playwright scripts on the fly for browser testing and automation, auto-detecting local dev servers, with screenshots, responsive checks, login flows and link checking. After installing, run npm run setup in the skill directory.

Search and download arXiv papers and read the authors' LaTeX source section by section, export BibTeX and follow topic updates, with papers cached locally. No API key needed.

Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all.

Agent skills maintained by the Flutter team: layered architecture, responsive layouts, fixing layout overflows, declarative routing, internationalization, JSON serialization, and widget and integration tests. Works alongside the Dart MCP server.

Official plugin from the Dart and Flutter teams that installs Flutter skills and the Dart MCP server together, covering layered architecture, responsive layouts, layout error fixes, widget and integration tests, routing and internationalization. Requires the Dart/Flutter SDK locally.

Reviews mobile and desktop app designs against Apple's Human Interface Guidelines, bundled as 123 pages from developer.apple.com, citing the exact guideline through five review lenses, and flags generic, templated choices. Works on screenshots, mockups or code for SwiftUI, Flutter or Electron.

Measurement-first audits and optimization of web quality using Lighthouse, Chrome DevTools performance traces and CrUX data, covering Core Web Vitals, WCAG 2.2 accessibility, SEO and best practices, for any frontend framework. By Addy Osmani (not an official Google project).

Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.

Replaces arXiv preprint entries in your .bib file with the official published versions from DBLP and ACL Anthology, keeping citation keys, to tidy references before camera-ready. Overwrites the file by default, so preview with --dry-run. Mainly covers CS venues; needs Python 3.10+.

Postgres rules ranked by impact: query optimization, indexing, connection pooling, RLS security, schema design and lock troubleshooting, with wrong-vs-right SQL examples, applicable to any Postgres. Maintained by Supabase.

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.

Open-source, agent-friendly BI: define metrics and dashboards in YAML and SQL, and rill init generates project instructions and MCP config for Claude Code so agents can build business dashboards and answer questions in natural language. Local use is free; publishing to Rill Cloud needs an account.

A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.

Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.

Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.