Tools

Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.

Generates template-driven charts as single-file HTML: picks a chart from real Lupi, Basics, Glance, Maps and Interactive gallery implementations based on data shape, or fills one of 12 Chinese and English report templates. Defaults to Mono grayscale with semantic color presets. Written in Chinese.

Command-line color tool: generate, mix, lighten and darken colors, convert between HEX, RGB, HSL, Lab and more, build gradients and sets of distinct colors, pick readable text colors for a background, and simulate color blindness. Install via Homebrew; no account or API key.

21st.dev's official MCP: lets agents search and fetch UI components, themes and template code from the 21st.dev community, and generate components from a description once AI access is enabled. Absorbs the former Magic MCP; requires a free API key from 21st.dev.

Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files.

Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.

Polishes existing motion against the transitions.dev token scale for duration, distance, scale, blur and easing, matching each value by what the motion does rather than the nearest number, with rules for open/close asymmetry, hover in and out, stagger and intent delays.

In-chat fallback for the transitions.dev Timeline Inspector's Refine button: the agent long-polls a local relay and answers jobs with motion-token tweaks or a full transition recipe swap, and applies accepted changes. Idle polling costs credits, so the persistent CLI mode is preferred.

Live stock and crypto quotes in the terminal with portfolio profit and loss tracking, using Yahoo Finance and Coinbase data. The main view is an interactive dashboard; ticker print exports holdings from your config at current prices as JSON or CSV for scripts and agents.

250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.

Language and toolset for double-entry bookkeeping in text files: bean-check validates the ledger, bean-format normalizes it, and Fava or beanquery handle reports and queries. Plain-text ledgers are easy for agents to generate and keep in version control.

Classic plain-text double-entry accounting CLI: entries live in a text file and it produces balance, register, budget and other reports directly, with no database or hidden state, so agents can easily read and write ledgers, reconcile and report.

Official skill for the open-source, self-hosted ezBookkeeping app: lets agents log transactions and query records in natural language, and read accounts, categories, tags and exchange rates. Deploy ezBookkeeping first (Docker supported) and configure its URL and API token.

Self-hosted open-source bookkeeping app with a built-in MCP server: AI logs expenses in natural language and queries transactions, balances, categories, tags and exchange rates, keeping data on your server. Deploy via Docker or package, set enable_mcp, and create a token in security settings.

Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin.

Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist.

Design engineering plugin for product interfaces such as admin panels and dashboards: builds UI on design principles and saves spacing, color and hierarchy decisions to .interface-design/system.md to stay consistent across sessions. Not meant for marketing pages.

Lossy PNG compression CLI: converts images to 8-bit PNGs that keep transparency, usually 60-80% smaller, with batch processing and a quality range setting. Handy for slimming down web assets, slides and article images. Install via Homebrew on macOS; no account.

Lets agents generate production-ready Lottie animations (icon motion, loaders, data animations and more) from a text description or SVG, with a local player for live preview and tweaks. Export JSON for web, apps or After Effects. Needs Node.js locally.

High-quality GIF encoder built on pngquant: turns video frames or PNG sequences into animations, using cross-frame palettes and temporal dithering for thousands of colors per frame. Can take video piped straight from ffmpeg.

From the FinanceToolkit author: computes ratios, valuation, risk and macro indicators with 500+ transparent formulas, for company comparisons and first-pass due diligence. Hosted, no install; enter a Financial Modeling Prep key on first connect (free tier: US stocks, 5 years). Verify results.

Detects shot changes in video and splits long footage into scenes, exporting cut lists and per-scene thumbnails, useful for shot analysis, organizing footage and finding edit points. Runs locally; needs Python 3.10+, plus FFmpeg or mkvmerge for splitting.

LM Studio's official CLI: list, load and unload local models, start and stop the local API server, and check status and logs; ls, ps and other commands support --json output for scripts and agents. Requires the LM Studio desktop app.

Font toolkit: pyftsubset subsets fonts to the characters you use and outputs WOFF2 to shrink web fonts, and ttx converts fonts to editable XML for inspection and edits. Needs Python 3.11+ and the woff extra for WOFF2; check the license before subsetting commercial fonts.