Herramientas

Two parts: an API server on Kali Linux and an MCP bridge, letting agents run nmap, sqlmap, Metasploit, Hydra and other tools, or arbitrary terminal commands, for authorized penetration testing and CTFs. Available in Kali's official repositories.

From the X (Twitter) developer platform: a FastMCP server that turns the X API into tools to post, search posts and users, and manage DMs and lists, with an allowlist for which tools load. Needs X developer app credentials and a locally started Python server.

Lets agents drive a local Photoshop: remove backgrounds, retouch portraits, color grade, batch-watermark, and export or split carousels at social media sizes; multi-step edits undo in one step. Needs Photoshop and Node.js 18+. Unofficial; sends anonymous telemetry by default (opt-out).

50+ skills for Amazon sellers: product and keyword research, listings and A+ copy, PPC, FBA fees and profit, and tariff estimates. Free, no API key; a few skills run bundled scripts on public Amazon data and need Python. Tariff and compliance output needs professional review.

Intlayer's official MCP server: in projects using Intlayer, lets agents build dictionaries, fill in missing translations with AI, sync multilingual content with the Intlayer CMS and look up docs. Needs Node.js; AI translation needs your own LLM API key, CMS sync needs credentials.

From Vercel: discovers locally running Next.js 16+ dev servers and hands the runtime errors, routes and logs from their built-in MCP endpoint to the agent, and points the agent to docs matching your installed version.

Microsoft's official skill: has the agent use Microsoft Learn docs to call Azure text and document translation, enforce glossaries, train Custom Translator models and troubleshoot quotas and errors. For localization teams building batch translation; needs an Azure account and Translator resource.

Official from LINE: connects to a LINE Official Account through the Messaging API to push or broadcast text and Flex messages, manage rich menus, and look up followers and user profiles. Needs a channel access token; currently in preview.

Unbabel's machine-translation quality metric: comet-score rates translations per sentence and overall, XCOMET marks error spans and severity, and CometKiwi works without a reference. Good for spot-checking MT. Needs Python 3.8+; models download from Hugging Face, some need a license; GPU helps.

Enter a URL and get a single-page SEO audit report in HTML: checks title and meta description, H1, robots, sitemap, structured data and more, and lists priority fixes. Needs local Python; the full audit also needs a Google PageSpeed API key.

Interviews you on scope, pain points and brand tone, infers the visual language from existing styles, and builds five React UI variants on a temporary route with a feedback overlay. Iterates on feedback, then writes an implementation plan and deletes the temp files.

Shopify's official CLI: scaffold, develop locally and deploy Shopify apps, extensions, Functions and themes, and build and host Hydrogen custom storefronts. Requires Node.js.

Skill pack for YouTube creators with 14 subcommands: channel audits, video SEO, retention-focused scripts, hooks, thumbnail briefs, content calendars, and Shorts and cross-platform repurposing. Works with data you provide; add a YouTube API key or DataForSEO for live data.

A research plugin for Claude Code: commands like /omp:survey, /omp:experiment and /omp:write chain literature review, topic selection, experiments, writing and self-review, with 5 specialized agents and 34 research skills that remember project progress across sessions. Experiments lean toward ML.

21 English writing rules (12 from The Elements of Style, Orwell, Pinker and other classics, 9 from observed LLM habits) for clearer, leaner papers, grant proposals, design docs and documentation. Expository English only; not for fiction or marketing copy.

Open-source marketing toolkit with 78 skills for SEO audits, blog and landing-page copy, email sequences, social posting, ad campaigns and competitor analysis. Basic use needs no keys; pulling data from Semrush, GA4 or HubSpot, or publishing automatically, needs the matching API keys.

YouTube channel assistant: lets agents upload videos, edit titles, descriptions and thumbnails, and manage playlists, captions, comments and live streams; also works as a CLI. Requires enabling the YouTube Data API in Google Cloud and creating OAuth credentials; daily API quotas apply.

The five-agent PaperOrchestra pipeline (outline, figures, literature review, section writing, polishing) as skills: turns research ideas, experiment logs and a conference template into a LaTeX paper and checks citations via Semantic Scholar. Needs Python; verify the draft yourself.

Applies the concrete rules from Refactoring UI to design and fix interfaces: pick spacing, type, color and shadow values from fixed scales, build hierarchy with weight and color rather than size, and create depth with emulated light. Useful when a UI looks amateur, cluttered or off.

One server for Google Docs, Sheets, Drive, Gmail and Calendar: draft and format documents, handle comments, organize sheets and charts, triage email and schedule events. Create an OAuth client in Google Cloud and run the auth command once; needs Node.js.

Official SonarSource server: connects to SonarQube Server or Cloud so agents can query code issues, quality gates, security hotspots and dependency risks, and analyze file contents directly. Needs a SonarQube token; Docker is the recommended way to run it.

Official Firecrawl skill: drives the Firecrawl CLI to search, scrape, map site URLs, batch-crawl, interact with pages and monitor changes, returning LLM-ready Markdown. Search and scrape have a rate-limited free tier; crawling and monitoring need an account or self-hosted instance.

Firecrawl's official CLI: scrape, search, map and crawl sites and interact with pages in a browser from the terminal, with Markdown output; can also install companion skills for coding agents. Needs a Firecrawl account or API key, or point it at a self-hosted instance.

Lets Claude Code, Cursor and others read and edit Figma designs via a plugin bridge: batch-change colors and fonts, check contrast, generate component code. Free Figma accounts work. Needs Node.js, Figma Desktop, the local WebSocket server running and the plugin imported.