Tools

Terminal tool for exploring and wrangling tabular data: opens dozens of formats including CSV, JSON, Excel and SQLite for filtering, sorting, pivots and frequency counts. --batch mode replays actions headlessly or converts file formats.

Say build a harness for this project and it designs a domain-specific agent team, generating subagent definitions, companion skills and orchestration, validates them and keeps evolving them from feedback. Supports workflow orchestration, persistent agent teams and subagent delegation.

Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud.

Manage database schemas as code: declare the desired schema in SQL, HCL or your ORM and Atlas plans, lints and applies migrations, and can export existing databases as HCL, SQL or Mermaid ER diagrams. Supports PostgreSQL, MySQL and a dozen other databases.

Gives agents on-demand guidance for the modern web platform, covering View Transitions, container queries, Popover, INP optimization, accessibility and more, with browser compatibility data so they avoid outdated code. Maintained by the Google Chrome team; currently in preview.

Manages multiple Claude Code, Codex, Gemini and Aider sessions in parallel from one terminal: each task gets its own git worktree, can run in the background, and changes are reviewed before merging. Requires tmux and gh.

Companion skills for Google Stitch: generate UIs from text or images, extract DESIGN.md from code, and turn designs into React or React Native components. From Google Labs but not an officially supported Google product; set up the Stitch MCP first.

Converts the output of 100+ commands such as dig, ps, ls and ifconfig, plus common file formats, into JSON so agents can parse it reliably with jq or scripts. Also usable as a Python library.

Free remote MCP service that turns any GitHub repo or GitHub Pages site into a docs endpoint, so agents can read up-to-date docs and search code on demand and hallucinate fewer APIs. No sign-up or install; self-hosting is also possible.

asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key.

Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key.

Open-source visual traceroute that shows IP geolocation, AS number and carrier for every hop, with continuous MTR probing and JSON output; the full edition can also be deployed as an MCP server.

Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg.

Moonshot AI's official terminal coding agent: reads and edits code, runs commands, searches files and fetches web pages, with video input, MCP, plugins, subagents and hooks, plus Zed and JetBrains integration via ACP. Needs a Kimi sign-in or Moonshot API key. Replaces the archived Kimi CLI.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.

Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.

Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.

Turns a Notion PRD or feature spec into an implementation plan page and tasks, flagging open questions and linking spec, plan and tasks while tracking progress. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP connected.

OpenAI's official set of 18 web data visualization skills: chart selection and critique, D3, Canvas, Three.js, maps, statistical uncertainty, live dashboards, Gantt charts, UML and scrollytelling. Ships with a Codex plugin; installed alone, the plugin-level references are missing.

Remotion's official Codex plugin (OpenAI marketplace) for making videos in React code: 12 skills covering project setup, animation and effects, captions, maps, preview and rendering. Free for individuals, nonprofits and companies up to 3 people; bigger companies need a license.

OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues.