Tools

Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP.

ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo.

Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.

Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.

Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.

Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.

Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.

HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.

Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

Tracks the hiring funnel through sourcing, screening, interviews, debrief and offer, watching stage time and conversion, source effectiveness, offer acceptance and time to hire. With an ATS connected it pulls candidate data and updates status. A brief skill from Anthropic's human-resources plugin.

Answers employee policy questions in plain language, such as PTO, benefits, expenses, travel and remote work, with sources cited. Paste the handbook into the chat, or connect Notion, Confluence or another knowledge base to search automatically, cutting repeat HR questions. Official from Anthropic.

Generates people analytics reports from employee data: headcount snapshots, voluntary and involuntary attrition, diversity metrics, spans of control and flight risk, with findings and recommendations for leadership. Needs an uploaded employee CSV or a connected HRIS. Official from Anthropic.

Performance review season helper: generates self-review and manager review templates and calibration materials, summarizes rating distributions and promotion cases, and rewrites vague feedback into specific behavioral examples. Works in plain chat. Official from Anthropic.

Checks hours before payroll for US small businesses: totals regular time, overtime and PTO from Gusto, QuickBooks Payroll or timesheets, and flags missed punches, overtime anomalies, rate changes and mid-period hires or exits. Prepares only, never runs payroll. Official from Anthropic.

Drafts offer letters from role, level, location and comp package, listing base salary, equity, signing bonus and first-year total, plus talking points for the hiring manager's negotiation. The template follows US company conventions; have legal review before sending. Official from Anthropic.

Helps with headcount planning and org design: maps reporting lines and spans of control, sequences upcoming hires, estimates people costs, and flags structural issues like single points of failure or top-heavy management. Works in plain chat. Official from Anthropic.

Builds structured interview kits for a role: behavioral and situational questions by competency, follow-up probes, a 1 to 4 scoring rubric and a debrief template, so interviewers assess candidates against the same bar. Part of Anthropic's official human-resources plugin.

Screens resumes against a role rubric into a cited shortlist, ignoring irrelevant details like name and age; drafts invite, hold or decline replies, schedules interviews and builds onboarding checklists. Gmail and Calendar are optional, sending only after you confirm. Official from Anthropic.

Builds onboarding plans for new hires: a pre-start checklist (accounts, equipment, buddy), day-one and first-week schedules, and 30/60/90-day goals. Works in plain chat; with an HRIS, knowledge base or calendar connected it pulls in team info and books day-one events. Official from Anthropic.

HR plugin: drafts offer letters, generates onboarding checklists, runs performance reviews, answers policy questions, and produces compensation benchmarks and people analytics reports. Can connect to HRIS and ATS systems. Official from Anthropic.

Compensation analysis for HR and managers: market pay percentiles by role, level and location, offer competitiveness checks and equity modeling; upload a pay sheet to find employees outside their band and flight risks. Without a comp data source it uses public web data, so verify. By Anthropic.