Tools

Daemonless, rootless container and pod manager with a Docker-compatible CLI for building, running and pushing OCI images. On macOS and Windows it runs inside a podman machine VM.

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.

Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI.

Built-in gws CLI skill: lets agents create Google Forms, add or edit questions in bulk, publish and read responses, handy for sign-ups, surveys and class feedback. Needs gws with a Google account authorized via your own Google Cloud project; not an officially supported Google product.

HR coordinator persona skill for the gws CLI: schedules onboarding sessions in Calendar, uploads onboarding docs to shared Drive, announces new hires in Chat, and turns email requests into tasks and bulk notices. Needs gws with OAuth via a Google Cloud project; not officially supported by Google.

Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension.

Browser Use's video editing skill: put raw footage in a folder and chat with Claude Code or Codex to get a finished cut, with filler words and pauses removed, color grading, burned-in subtitles, animations and per-cut self-checks. Needs ffmpeg, Python (uv) and an ElevenLabs API key.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0.

Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.

Helps HR and hiring managers design structured interviews: plans rounds by role and level, builds question banks, competency matrices and scoring rubrics, and suggests ways to reduce interviewer bias and recalibrate. Examples focus on tech roles; optional local Python scripts.

Chief people officer perspective for HR and founders: hiring plans and headcount costs, salary bands and equity design, org structure, performance calibration and retention. Includes two local Python scripts; pay examples use USD and US city tiers. Have comp and equity plans reviewed.

Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key.

Baoyu's (JimLiu) content creation skills: infographics, covers, article illustrations, slide decks, comics and translation, plus Xiaohongshu cards and publishing to WeChat, Weibo and X. Needs Node.js, bun and an image model API key; some skills rely on Chrome automation or unofficial APIs.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

Distills a colleague, friend or public figure's chats, documents and public material into a persona profile packaged as a callable skill, for handoffs and preserving know-how. Collects material from Lark, DingTalk, Slack and more. Mind privacy and consent when using others' data.

160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need.

Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi.

Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control.

Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally.

Fast speech transcription built on faster-whisper, with word-level timestamps and speaker diarization, suited to meeting notes and subtitles. Diarization needs a Hugging Face token; GPU acceleration needs CUDA.