Tools

Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.

Generates template-driven charts as single-file HTML: picks a chart from real Lupi, Basics, Glance, Maps and Interactive gallery implementations based on data shape, or fills one of 12 Chinese and English report templates. Defaults to Mono grayscale with semantic color presets. Written in Chinese.

Open-source alternative to NotebookLM's podcast feature: turns web pages, PDFs, images, YouTube videos or text into two-host conversational audio, useful for lecture notes or articles. Uses Gemini and OpenAI API keys by default, or local models plus free Edge TTS.

One command extracts or summarizes web pages, PDFs, YouTube videos, podcasts and media files, with JSON output. Summaries can use many model APIs, local models or a logged-in Codex or Claude CLI; plain extraction needs no key. Also has a browser sidebar extension.

Lets coding agents control real Chrome with short Puppeteer scripts, with named pages that keep state across calls, accessibility-tree snapshots and screenshots for self-testing web changes. Install the dev-browser CLI globally first; macOS and glibc Linux only.

Open-source offline machine translation built on OpenNMT, usable as a CLI, Python library or GUI. Download language packages as needed; when no direct model exists it pivots through an intermediate language. Suits text you would rather not upload to the cloud.

14 skills plus a hook-based reminder layer for use with n8n-mcp: teaches agents to write correct n8n expressions, configure nodes, apply workflow patterns, fix validation errors and deploy self-hosted n8n. Requires n8n-mcp to be set up first.

14 n8n workflow skills: expression syntax, MCP tool usage, node configuration, validation and troubleshooting, Code nodes, AI Agent workflows and self-hosted n8n deployment. Meant to be used with the n8n-mcp server.

Command-line color tool: generate, mix, lighten and darken colors, convert between HEX, RGB, HSL, Lab and more, build gradients and sets of distinct colors, pick readable text colors for a background, and simulate color blindness. Install via Homebrew; no account or API key.

Unofficial nlm CLI and MCP server for NotebookLM (now Gemini Notebook): bulk-create notebooks, import web pages and docs, and generate audio overviews, quizzes, flashcards, mind maps and slides for teaching and study. Relies on undocumented APIs and a Google sign-in, so it may break.

Unofficial CLI and MCP that let agents work with NotebookLM (now Gemini Notebook): bulk-import sources, ask questions with citations, and generate audio overviews, quizzes, flashcards, mind maps and slides. Uses undocumented APIs and may break; needs a Google sign-in and uv.

21st.dev's official MCP: lets agents search and fetch UI components, themes and template code from the 21st.dev community, and generate components from a description once AI access is enabled. Absorbs the former Magic MCP; requires a free API key from 21st.dev.

A prose linter that checks docs against style guides: use ready-made packages like Microsoft and Google or write your own YAML rules. It parses Markdown, AsciiDoc and other formats before checking, runs fully offline, and plugs into editors and CI.

Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.

Polishes existing motion against the transitions.dev token scale for duration, distance, scale, blur and easing, matching each value by what the motion does rather than the nearest number, with rules for open/close asymmetry, hover in and out, stagger and intent delays.

In-chat fallback for the transitions.dev Timeline Inspector's Refine button: the agent long-polls a local relay and answers jobs with motion-token tweaks or a full transition recipe swap, and applies accepted changes. Idle polling costs credits, so the persistent CLI mode is preferred.

Local neural text-to-speech engine that converts text to speech offline, with voices in dozens of languages, handy for listening materials or narrating articles and course slides. Needs Python; download a voice model before first use. The project is currently looking for maintainers.

250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.

Fixes defensive academic writing full of hedging and preemptive disclaimers, organizing abstract, introduction, experiments and conclusion around your strongest contribution. Also helps trim length and self-check before a rebuttal. English and Chinese versions, plus a prompt for any AI chat.

Posit's open-source scientific and technical publishing system built on Pandoc: embed Python, R or Julia code in Markdown or Jupyter notebooks, then quarto render produces HTML, PDF, Word, slides, websites and books.

The .NET team's official skill collection, grouped into plugins: ASP.NET Core, Blazor, MAUI, EF Core data access, MSBuild troubleshooting, performance diagnostics, testing, and framework upgrades and migrations. Maintained by Microsoft; install via the Claude Code or Codex plugin marketplace.

Veteran command-line task manager with projects, tags, priorities, due dates and custom reports, JSON export, and a rich ecosystem of hooks and extensions, well suited for agents that record and track tasks.

Docker's official CLI for building images, running and managing containers, viewing logs and pushing to registries, a foundational tool for agents setting up isolated environments. Needs a local or remote Docker Engine such as Docker Desktop.

Community-maintained MCP for Jira and Confluence: search with JQL/CQL and create or update issues, pages and comments. Supports both Cloud and Server/Data Center deployments; needs an API token or personal access token.