Tools

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Marketing team plugin with 40+ skills for copy and content, SEO and AI search optimization, conversion optimization, email and social, paid ads, growth strategy and competitor analysis, plus Python analysis scripts. Most need no account; a few, like YouTube transcripts, need API keys.

For SaaS customer success teams: three standard-library Python scripts turn customer data into health scores, churn-risk tiers and ranked expansion opportunities, with reproducible results. Needs Python and customer data in the sample JSON format. Part of the claude-skills collection.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Proofreads drafts: once you explain the text's purpose, it finds grammar, logic and flow issues and gives located suggestions with reasons, without rewriting the whole piece or changing your voice. Rules and examples target English. Part of PM Skills; no extra account needed.

Turns an article or Markdown into a set of slide images: drafts an outline and style first, then generates each page, and can merge them into PPTX or PDF. Comes with over ten visual presets. Needs a working image generation backend.

Translation skill by Baoyu with quick, normal and refined modes, custom glossaries, and target audience and style settings. Translates local files or URLs; suited to long-form Chinese-English translation and localization. Needs bun or npx.

Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key.

Open-source SEO tool (a Semrush/Ahrefs alternative) with built-in MCP for keyword research, rank tracking, competitor and backlink analysis, site audits and AI search visibility checks. The hosted version has a free trial; self-hosting needs a pay-as-you-go DataForSEO key.

Baoyu's (JimLiu) content creation skills: infographics, covers, article illustrations, slide decks, comics and translation, plus Xiaohongshu cards and publishing to WeChat, Weibo and X. Needs Node.js, bun and an image model API key; some skills rely on Chrome automation or unofficial APIs.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

Open-source e-book manager whose command-line tools (ebook-convert, ebook-meta, calibredb) batch-convert between EPUB, MOBI, AZW3, PDF, DOCX and more and manage library metadata. The install command is Linux-only; on macOS and Windows use the installer.

Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript.

Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.

Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project.

Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.

Google's official skill that queries account data through the Google Ads MCP server to diagnose conversion drops, falling leads and impression share lost to bids, budgets or ad rank. Needs a Google Ads account, API credentials (developer token and OAuth) and Python 3.12.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

From Firecrawl: converts Word, PowerPoint, Excel, PDF, EPUB, RTF and more into clean Markdown locally in milliseconds, keeping headings, tables, footnotes and formulas so agents can read attachments. Needs Node.js; optional Firecrawl cloud OCR for scans uploads the whole file.

Continuously records your screen and audio locally, extracting on-screen text and transcribing speech, so agents can search pages, docs and meetings you saw and summarize your day. Data stays local. Needs screenpipe running: source is free for personal use, desktop app is a subscription.

Compiles Markdown chapters into an online book with a table of contents, full-text search and themes, good for manuals, lecture notes and course material; agents can edit chapter files and rebuild to preview. Maintained by the Rust team; install a prebuilt binary or via cargo.

Scripts terminal sessions in .tape files and records them to GIF, MP4 or WebM, great for CLI demos and docs; text snapshot output also enables terminal integration tests. By Charm; requires ttyd and ffmpeg.

Official MCP from the FunASR project: transcribes audio files locally with the SenseVoice model, supporting Mandarin, Cantonese, English, Japanese and Korean, with optional segment timestamps. Local inference needs no API key and audio stays on your machine. Docker image available.

Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch.