Tools

Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP.

ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo.

Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.

Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.

Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.

Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.

Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.

HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.

Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

All-in-one plugin for small business owners: 44 skills covering cash flow and bookkeeping, collections and taxes, customer acquisition and marketing, customer feedback, inventory, hiring and contract review. Anything touching money or customers needs your approval. Official from Anthropic.

Official Slack (Salesforce) plugin in Anthropic's knowledge work marketplace: connects Slack's hosted MCP to search and send messages, read channels and threads, and manage canvases, with commands for channel digests, standup updates and announcements. Needs workspace admin approval.

Generates project or team status reports with an executive summary, overall red/yellow/green status, key metrics, risks and open decisions, turning scattered project tool activity into a report for leadership. From Anthropic's official operations plugin.

Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic.

Guides you through creating a plugin from scratch or customizing an existing plugin's connectors, skills and settings for your team's tools and workflows, producing an installable plugin package. Maintained by Anthropic; runs in Cowork mode in the Claude desktop app.

Turns campaign or channel data into weekly, monthly or quarterly marketing reports: executive summary, key metrics and period-over-period trends, wins and misses, and next-period priorities. Connect analytics tools or just paste tables or key numbers. From Anthropic's knowledge-work-plugins.

Gathers all agreements with a vendor from your CLM, CRM, email and drive, lists signed and missing MSAs, DPAs and SOWs, and flags upcoming expirations, auto-renewal notice windows and surviving obligations. Needs those connectors. From Anthropic's legal plugin; verify against originals.

Marketing plugin: drafts blog, social, email and landing page content, plans campaigns, reviews copy against your brand voice, and produces competitive briefs, SEO audits and channel performance reports. Official from Anthropic.

Checks hours before payroll for US small businesses: totals regular time, overtime and PTO from Gusto, QuickBooks Payroll or timesheets, and flags missed punches, overtime anomalies, rate changes and mid-period hires or exits. Prepares only, never runs payroll. Official from Anthropic.

Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.

Drafts offer letters from role, level, location and comp package, listing base salary, equity, signing bonus and first-year total, plus talking points for the hiring manager's negotiation. The template follows US company conventions; have legal review before sending. Official from Anthropic.

Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.