Herramientas

Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud.

Turns outlines or scripts into web slides that present in the browser (not .pptx files), with 36 themes and 15 full deck templates; press S for presenter mode with script and timer. Good for lessons, training and reports. Plain local files; no account or API key needed.

PDF command line written in pure Go with almost no external dependencies: dozens of subcommands to merge, split, crop, rotate, watermark, encrypt and decrypt, extract images and fonts, and work with forms.

Manage database schemas as code: declare the desired schema in SQL, HCL or your ORM and Atlas plans, lints and applies migrations, and can export existing databases as HCL, SQL or Mermaid ER diagrams. Supports PostgreSQL, MySQL and a dozen other databases.

Companion skills for Google Stitch: generate UIs from text or images, extract DESIGN.md from code, and turn designs into React or React Native components. From Google Labs but not an officially supported Google product; set up the Stitch MCP first.

Converts the output of 100+ commands such as dig, ps, ls and ifconfig, plus common file formats, into JSON so agents can parse it reliably with jq or scripts. Also usable as a Python library.

Google Workspace CLI for scripts and agents covering Gmail, Calendar, Drive, Docs, Sheets, Contacts and Tasks, with JSON output, read-only mode and command allowlists; can also run as a read-only-by-default MCP server. Bring your own Google OAuth client.

Lightweight OCR built on PaddleOCR models converted to ONNX, recognizing Chinese and English by default on CPU alone. The rapidocr CLI reads text from screenshots, photos and scanned page images. Needs Python; downloads models on first run, then works offline. Convert PDFs to images first.

asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key.

Open-source visual traceroute that shows IP geolocation, AS number and carrier for every hop, with continuous MTR probing and JSON output; the full edition can also be deployed as an MCP server.

Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg.

Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key.

Removes backgrounds from images and videos with one AI command: batch whole folders, use a portrait model, refine edges or swap in a solid color, and output transparent MOV or composite video onto a new background. Runs locally; install PyTorch and ffmpeg first. Models download on first run.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.

Open-source font editor: fontforge -script runs Python scripts headlessly to batch-edit glyphs, convert between OTF, TTF, UFO and other formats, and generate fonts, for type design and font processing. Homebrew installs the CLI version; install the desktop app for the GUI.

Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.

Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.

Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.

Has the agent build a local Next.js editor that turns app screenshots into App Store and Google Play marketing images: real device frames, bold headlines, 18 visual styles, multiple languages and RTL layouts, with one-click export of every required size. Needs Node.js.

MagicPath's official Codex plugin from OpenAI's plugin marketplace: search and install UI components from MagicPath canvases, apply team themes, and move interfaces from local code onto the canvas to keep iterating. Needs a MagicPath account and Node.js.

Figma's Codex plugin in OpenAI's official marketplace: implements UI from designs, generates Code Connect mappings, and creates or updates pages, component libraries, FigJam diagrams and slides in Figma. Needs a connected Figma account.

OpenAI's official Codex plugin for Microsoft Teams: summarizes chats and channel messages, pulls out action items, and drafts channel replies or meeting follow-ups. Requires signing in to Codex with ChatGPT and authorizing a Microsoft account.