# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Frontend or ML / AI or Data engineering or Security: 722 items. > - Frontend: Web and mobile-web interfaces: building, debugging and performance tuning. > - ML / AI: Model training, evaluation and LLM application development. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [GitHub Copilot CLI](https://hebbmind.com/es/cli/copilot-cli.md): [CLI] GitHub's official terminal coding agent, sharing its harness with the Copilot coding agent and shipping with the GitHub MCP built in. Work with repos, issues and PRs in natural language, approving each action before it runs. Requires a Copilot subscription. - [Hugging Face Skills](https://hebbmind.com/es/skill/huggingface-skills.md): [Skill] Hugging Face's official skills: manage Hub models and datasets with the hf CLI, fine-tune language and vision models, run model evaluations, and build Gradio apps deployed to Spaces. Needs an HF account; cloud training on HF Jobs requires a paid plan. - [Hugging Face CLI (hf-cli)](https://hebbmind.com/es/skill/hf-cli.md): [Skill] Teaches agents the Hugging Face Hub CLI hf: search and download models, manage datasets, Spaces, Buckets and repos, and run Jobs and inference endpoints. The skill content is generated from your local CLI, so install hf first. Maintained by Hugging Face. - [Hugging Face LLM Trainer](https://hebbmind.com/es/skill/huggingface-llm-trainer.md): [Skill] Lets agents fine-tune language and vision models with TRL or Unsloth on Hugging Face Jobs cloud GPUs, supporting SFT, DPO, GRPO and reward models, and convert results to GGUF for local use. Requires an HF Pro or higher paid plan. Maintained by Hugging Face. - [Hugging Face Skills](https://hebbmind.com/es/plugin/huggingface-skills.md): [Plugin] Lets agents work with the Hugging Face Hub through the hf CLI: search and download models and datasets, manage repos and Spaces, and run training and evaluation jobs on cloud GPUs, with more workflow skills installable as needed. Maintained by Hugging Face. - [MCP Inspector](https://hebbmind.com/es/cli/inspector.md): [CLI] The official MCP debugging tool: connect to any MCP server through a web UI, CLI or terminal UI to list and call its tools, resources and prompts. CLI mode outputs JSON, suited to scripts and CI smoke tests. - [visual-explainer](https://hebbmind.com/es/plugin/visual-explainer.md): [Plugin] Turns terminal output like architecture explanations, diff reviews and plan comparisons into styled HTML pages or slides with zoomable interactive Mermaid diagrams, replacing hard-to-read ASCII diagrams and tables. No build step; open directly in a browser. - [UI Skills](https://hebbmind.com/es/skill/ui-skills.md): [Skill] UI skills for design engineers: clean up spacing and hierarchy in AI-generated interfaces, fix accessibility and page metadata, debug janky animations, build DESIGN.md from an existing product or site, and run read-only UI reviews with fix plans. Use with a local frontend project in a coding agent. - [Scroll World](https://hebbmind.com/es/skill/scroll-world.md): [Skill] Builds a scroll-scrubbed fly-through 3D world landing page for any brand: generates scene stills with Higgsfield and seamless camera clips via Monid (Seedance 2.0, paid per clip) or Higgsfield credits, then wires a vanilla JS scrub engine. Needs Higgsfield CLI and ffmpeg. - [Plannotator](https://hebbmind.com/es/plugin/plannotator.md): [Plugin] Annotate and review agent-generated plans, docs and code diffs in the browser, then send feedback back to the agent in one click. Hooks into plan mode and supports Claude Code, Codex and other agents. Run the official install script to set up the CLI first. - [BrowserSkill](https://hebbmind.com/es/cli/browserskill.md): [CLI] Tencent's open-source browser bridge: through the bsk CLI and a Chrome/Edge extension, agents use your logged-in accounts in a separate visible window to browse, fill forms and take full-page screenshots, and correlate network requests with console output to debug sites. - [usql](https://hebbmind.com/es/cli/usql.md): [CLI] Universal psql-style SQL command line: one tool to connect to PostgreSQL, MySQL, SQLite, SQL Server, Oracle and dozens of other SQL and NoSQL databases, with support for copying data between databases. - [Feynman](https://hebbmind.com/es/cli/feynman.md): [CLI] Open-source research agent: one command runs literature reviews, deep research, paper reviews, paper-code consistency checks and replication plans, searching arXiv, PubMed and more with sources recorded. Good for grad students writing reviews. Run feynman setup to sign in to a model provider. - [OpenCC](https://hebbmind.com/es/cli/opencc.md): [CLI] Open-source Simplified/Traditional Chinese converter: deterministic dictionary-based conversion (no LLM) covering variant characters and regional vocabulary for mainland China, Taiwan and Hong Kong, with limited Japanese kanji support. Runs offline; CLI plus Node.js and Python APIs. - [Miller](https://hebbmind.com/es/cli/miller.md): [CLI] Processes CSV, TSV, JSON and other structured data like awk, sed, cut, join and sort, but by field name, for cleaning, aggregation, format conversion and pretty-printing. The command is mlr; written in Go with no runtime dependencies. - [garak](https://hebbmind.com/es/cli/garak.md): [CLI] NVIDIA's open-source LLM vulnerability scanner that probes for prompt injection, jailbreaks, data leakage, hallucination and harmful content, supporting OpenAI, Hugging Face, Bedrock and most REST-accessible models. Scanning cloud models needs their API keys. - [SQLFluff](https://hebbmind.com/es/cli/sqlfluff.md): [CLI] Linter and formatter for 20+ SQL dialects that auto-fixes most issues and handles Jinja templating and dbt projects (dbt needs a plugin), suited to warehouse code review and CI. - [Privacy Legal](https://hebbmind.com/es/plugin/privacy-legal.md): [Plugin] Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic. - [AI Governance Legal](https://hebbmind.com/es/plugin/ai-governance-legal.md): [Plugin] Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice. - [AWS HealthLake MCP Server](https://hebbmind.com/es/mcp/healthlake-mcp-server.md): [MCP] Official AWS MCP for managing FHIR health data in AWS HealthLake: CRUD, advanced search, full patient records, and import and export, with a read-only mode to prevent changes. Needs an AWS account, a paid HealthLake data store and local AWS credentials; clinical conclusions need professional review. - [Apache SeaTunnel](https://hebbmind.com/es/cli/seatunnel.md): [CLI] Distributed data integration tool and Apache top-level project with 160+ connectors for batch, real-time and CDC sync. Define jobs in config files and run them on the built-in Zeta engine or on Flink or Spark. Requires Java. - [PaperQA2](https://hebbmind.com/es/cli/paper-qa.md): [CLI] High-accuracy retrieval-augmented Q&A over paper PDFs, text and Office documents, filling in citation metadata, checking retractions and attaching traceable sources to answers. Provides the pqa CLI and a Python library. Needs an LLM API key by default; local models can be configured. - [VisiData](https://hebbmind.com/es/cli/visidata.md): [CLI] Terminal tool for exploring and wrangling tabular data: opens dozens of formats including CSV, JSON, Excel and SQLite for filtering, sorting, pivots and frequency counts. --batch mode replays actions headlessly or converts file formats. - [Harness](https://hebbmind.com/es/plugin/harness.md): [Plugin] Say build a harness for this project and it designs a domain-specific agent team, generating subagent definitions, companion skills and orchestration, validates them and keeps evolving them from feedback. Supports workflow orchestration, persistent agent teams and subagent delegation. - [Checkov](https://hebbmind.com/es/cli/checkov.md): [CLI] Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud. - [Atlas](https://hebbmind.com/es/cli/atlas.md): [CLI] Manage database schemas as code: declare the desired schema in SQL, HCL or your ORM and Atlas plans, lints and applies migrations, and can export existing databases as HCL, SQL or Mermaid ER diagrams. Supports PostgreSQL, MySQL and a dozen other databases. - [Claude Squad](https://hebbmind.com/es/cli/claude-squad.md): [CLI] Manages multiple Claude Code, Codex, Gemini and Aider sessions in parallel from one terminal: each task gets its own git worktree, can run in the background, and changes are reviewed before merging. Requires tmux and gh. - [Stitch Design Skills](https://hebbmind.com/es/skill/stitch-skills.md): [Skill] Companion skills for Google Stitch: generate UIs from text or images, extract DESIGN.md from code, and turn designs into React or React Native components. From Google Labs but not an officially supported Google product; set up the Stitch MCP first. - [jc](https://hebbmind.com/es/cli/jc.md): [CLI] Converts the output of 100+ commands such as dig, ps, ls and ifconfig, plus common file formats, into JSON so agents can parse it reliably with jq or scripts. Also usable as a Python library. - [GitMCP](https://hebbmind.com/es/mcp/git-mcp.md): [MCP] Free remote MCP service that turns any GitHub repo or GitHub Pages site into a docs endpoint, so agents can read up-to-date docs and search code on demand and hallucinate fewer APIs. No sign-up or install; self-hosting is also possible. - [Research Paper Writing Skills](https://hebbmind.com/es/skill/research-paper-writing-skills.md): [Skill] Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key. - [MLX-Audio](https://hebbmind.com/es/cli/mlx-audio.md): [CLI] Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg. - [Kimi Code CLI](https://hebbmind.com/es/cli/kimi-code.md): [CLI] Moonshot AI's official terminal coding agent: reads and edits code, runs commands, searches files and fetches web pages, with video input, MCP, plugins, subagents and hooks, plus Zed and JetBrains integration via ACP. Needs a Kimi sign-in or Moonshot API key. Replaces the archived Kimi CLI. - [Supply Chain Risk Auditor](https://hebbmind.com/es/skill/supply-chain-risk-auditor.md): [Skill] Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended. - [Variant Analysis](https://hebbmind.com/es/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity. - [Trail of Bits Skills](https://hebbmind.com/es/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [Agentic Actions Auditor](https://hebbmind.com/es/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks. - [Differential Review](https://hebbmind.com/es/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [Static Analysis](https://hebbmind.com/es/skill/static-analysis.md): [Skill] Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally. - [dasel](https://hebbmind.com/es/cli/dasel.md): [CLI] Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq. - [Steampipe](https://hebbmind.com/es/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in. - [stable-diffusion.cpp](https://hebbmind.com/es/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source. - [Build Web Data Visualization](https://hebbmind.com/es/skill/openai-openai-skills.md): [Skill] OpenAI's official set of 18 web data visualization skills: chart selection and critique, D3, Canvas, Three.js, maps, statistical uncertainty, live dashboards, Gantt charts, UML and scrollytelling. Ships with a Codex plugin; installed alone, the plugin-level references are missing. - [notion-spec-to-implementation](https://hebbmind.com/es/skill/notion-spec-to-implementation.md): [Skill] Turns a Notion PRD or feature spec into an implementation plan page and tasks, flagging open questions and linking spec, plan and tasks while tracking progress. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP connected. - [Build Web Data Visualization](https://hebbmind.com/es/plugin/build-web-data-visualization.md): [Plugin] OpenAI's official Codex plugin with 18 skills to choose, design, build, test and export web charts, maps, dashboards, Gantt charts and UML, using D3, Vega-Lite and Three.js with attention to accessibility and responsiveness. Codex only. - [Jupyter Notebooks](https://hebbmind.com/es/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins. - [Build ChatGPT App](https://hebbmind.com/es/skill/chatgpt-apps.md): [Skill] Builds, refactors and debugs ChatGPT apps with the OpenAI Apps SDK: plans tools, scaffolds the MCP server and UI widgets, and checks the work against official docs. Maintained by OpenAI; formerly chatgpt-apps in openai/skills. - [Product Design](https://hebbmind.com/es/plugin/product-design.md): [Plugin] OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues. - [Frontend Testing Debugging](https://hebbmind.com/es/skill/playwright-interactive.md): [Skill] Tests and debugs a locally running frontend with Codex's Browser plugin or Playwright: checks blank pages, framework and console errors, captures screenshots, re-verifies after fixes and writes a QA report. Maintained by OpenAI; formerly playwright-interactive in openai/skills. - [Game Studio](https://hebbmind.com/es/skill/openai-skills-4.md): [Skill] OpenAI's official browser-game skills: plan core gameplay and tech choices first, then build with Phaser for 2D or Three.js / React Three Fiber for 3D, plus HUD and menu UI, sprite animation, a GLB asset pipeline and in-browser playtesting. Next page: https://hebbmind.com/es/tools.md?page=8&profession=frontend%2Calgorithm%2Cdata-engineering%2Csecurity