# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Data analysis or Security: 222 items. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [Browser Use](https://hebbmind.com/fr/skill/browser-use.md): [Skill] Controls your local Chrome over CDP to navigate, click, type, take screenshots and scrape data, reusing logged-in sessions. Official browser-use skill; install the browser-use CLI with uv first. - [Scientific Agent Skills](https://hebbmind.com/fr/skill/scientific-agent-skills.md): [Skill] 166 research skills maintained by K-Dense (formerly Claude Scientific Skills), spanning bioinformatics, cheminformatics, clinical research, materials and physics, including unified access to 78 public databases such as PubChem and UniProt. Works with Claude Code, Codex and Cursor. - [DuckDB](https://hebbmind.com/fr/cli/duckdb.md): [CLI] In-process analytical SQL database. Its CLI queries CSV, Parquet and JSON files directly with SQL, no import or server needed, so agents can sample and aggregate large files. Officially maintained. - [Claude Security](https://hebbmind.com/fr/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [MCP Toolbox for Databases](https://hebbmind.com/fr/mcp/mcp-toolbox.md): [MCP] Google's open-source database MCP server with ready-made query and SQL tools for dozens of sources, including PostgreSQL, MySQL, BigQuery, Spanner and MongoDB. Define controlled custom queries in tools.yaml. - [Trail of Bits Skills](https://hebbmind.com/fr/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace. - [ECC](https://hebbmind.com/fr/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [XLSX](https://hebbmind.com/fr/skill/xlsx.md): [Skill] Creates, edits and analyzes Excel spreadsheets: formulas, formatting, charts and data cleaning, plus conversion between CSV, TSV and other tabular formats. The official Anthropic skill behind Claude's document features; source-available, not open source. - [Browser Use MCP](https://hebbmind.com/fr/mcp/browser-use-mcp.md): [MCP] Local MCP server built into Browser Use: lets agents navigate, click, type and extract page content, or hand multi-step tasks to the built-in browser agent. Bring your own OpenAI or Anthropic API key. - [Scrapling](https://hebbmind.com/fr/mcp/scrapling.md): [MCP] MCP server built into the adaptive Python scraping framework Scrapling: supports plain HTTP requests, browser rendering and stealth fetching, and uses CSS selectors to pass only the target content to the AI, saving tokens and filtering out prompt injection. - [Scrapling](https://hebbmind.com/fr/cli/scrapling.md): [CLI] Adaptive web scraping framework: scrapling extract turns a page into Markdown, text or HTML in one command, with CSS selectors and browser rendering for dynamic pages, plus an MCP server (needs the ai extra). Needs Python 3.10+ and a browser install on first use. - [Crawl4AI](https://hebbmind.com/fr/cli/crawl4ai.md): [CLI] Open-source, LLM-friendly web crawler that turns pages into clean Markdown for RAG and agents. Ships the crwl CLI and supports deep crawling and question-driven data extraction (extraction needs an LLM key). Free to self-host. - [OpenBB MCP Server](https://hebbmind.com/fr/mcp/openbb-finance-mcp-server.md): [MCP] Official OpenBB MCP server exposing the OpenBB Platform's equity, ETF, macroeconomic, crypto and news data to agents; enable only the tool categories you need to save context. Needs uv locally; some data sources need your own API keys. Not investment advice. - [OpenBB Platform CLI](https://hebbmind.com/fr/cli/openbb-finance-cli.md): [CLI] Command-line edition of the open-source OpenBB investment research platform: query stock prices, financial statements, macroeconomic and other financial data from the terminal, and automate data pulls with Routine scripts. Officially maintained; some sources need API keys. - [Database Lookup](https://hebbmind.com/fr/skill/database-lookup.md): [Skill] Unified database lookup skill from K-Dense's scientific collection: reproducibly queries about 80 public database APIs such as PubChem, UniProt, ChEMBL, ClinicalTrials.gov and FRED, returning traceable results with endpoints, parameters and count checks. Some need API keys. - [Scanpy Single-Cell Analysis](https://hebbmind.com/fr/skill/scanpy.md): [Skill] Teaches agents standard single-cell RNA-seq analysis with Scanpy: QC, normalization, PCA/UMAP, clustering, differential expression and plots, with ready-to-run pipeline scripts and guidance on converting Seurat and other R objects to h5ad. Needs Python 3.12+; by K-Dense. - [Statistical Analysis](https://hebbmind.com/fr/skill/statistical-analysis.md): [Skill] Guides agents to the right statistical method for research data: t-tests, ANOVA, chi-square, regression and Bayesian analysis, checking assumptions, computing effect sizes and power, and reporting results in APA format. Python-based (pingouin, statsmodels); by K-Dense. - [Agentic Awesome Skills](https://hebbmind.com/fr/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills. - [wshobson/agents](https://hebbmind.com/fr/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Security Scanning](https://hebbmind.com/fr/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [wshobson/agents](https://hebbmind.com/fr/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands. - [Business Analytics](https://hebbmind.com/fr/plugin/business-analytics.md): [Plugin] Business analytics plugin from the wshobson/agents marketplace: KPI dashboard design and data storytelling skills plus a business analyst subagent to choose metrics, plan dashboard layouts and turn data into reports executives or investors understand. Methods and templates only; no data connections. - [GDPR Data Handling](https://hebbmind.com/fr/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions. - [Quantitative Trading](https://hebbmind.com/fr/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice. - [Nushell](https://hebbmind.com/fr/cli/nushell.md): [CLI] Cross-platform shell built around structured data: pipelines pass tables instead of plain text, and you can open and query JSON, CSV, TOML and more directly. Default builds include nu --mcp, which serves it to agents as an MCP server. - [PostHog MCP](https://hebbmind.com/fr/mcp/posthog-mcp.md): [MCP] PostHog's official hosted MCP: lets agents query product analytics with HogQL, manage feature flags and A/B experiments, and investigate errors and session replays. Sign in to PostHog to authorize; tool calls are free, though a few LLM-powered tools count toward AI usage. - [Security Guidance](https://hebbmind.com/fr/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [clean-data-xls](https://hebbmind.com/fr/skill/clean-data-xls.md): [Skill] Official Anthropic skill for cleaning messy Excel exports: trims spaces, standardizes case and dates, converts text numbers, dedupes, and flags mixed types, garbled text and errors. Keeps originals via helper-column formulas and confirms each step. Works in Claude for Excel; local files need Python. - [audit-xls](https://hebbmind.com/fr/skill/audit-xls.md): [Skill] Official Anthropic finance skill that checks Excel for formula errors like #REF!, numbers hardcoded in formulas, sum ranges that miss rows and mixed units; on full models it also checks the balance sheet balances and cash ties. Lists issues and fixes and asks before changing anything. - [Trivy](https://hebbmind.com/fr/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security. - [Vault](https://hebbmind.com/fr/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server. - [Vibe-Trading](https://hebbmind.com/fr/mcp/vibe-trading.md): [MCP] Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice. - [Anthropic Cybersecurity Skills](https://hebbmind.com/fr/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only. - [Nuclei](https://hebbmind.com/fr/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test. - [OpenCLI](https://hebbmind.com/fr/cli/opencli.md): [CLI] Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension. - [Gitleaks](https://hebbmind.com/fr/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks. - [Performance Report](https://hebbmind.com/fr/skill/performance-report.md): [Skill] Turns campaign or channel data into weekly, monthly or quarterly marketing reports: executive summary, key metrics and period-over-period trends, wins and misses, and next-period priorities. Connect analytics tools or just paste tables or key numbers. From Anthropic's knowledge-work-plugins. - [Compliance Tracking](https://hebbmind.com/fr/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review. - [Bio Research](https://hebbmind.com/fr/plugin/bio-research.md): [Plugin] For preclinical life sciences research: bundles MCP connectors for PubMed, bioRxiv, ChEMBL, Open Targets, ClinicalTrials and more, plus analysis skills for single-cell RNA QC, scvi-tools and nf-core pipelines. Official from Anthropic; some data sources need accounts. - [people-report](https://hebbmind.com/fr/skill/people-report.md): [Skill] Generates people analytics reports from employee data: headcount snapshots, voluntary and involuntary attrition, diversity metrics, spans of control and flight risk, with findings and recommendations for leadership. Needs an uploaded employee CSV or a connected HRIS. Official from Anthropic. - [Data](https://hebbmind.com/fr/plugin/data.md): [Plugin] Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic. - [SQL Queries](https://hebbmind.com/fr/skill/sql-queries.md): [Skill] Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations. - [TruffleHog](https://hebbmind.com/fr/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives. - [promptfoo](https://hebbmind.com/fr/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT. - [radare2](https://hebbmind.com/fr/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript. - [SOPS](https://hebbmind.com/fr/cli/sops.md): [CLI] Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project. - [Google Ads API Account Performance Diagnostics](https://hebbmind.com/fr/skill/google-ads-api-account-diagnostics.md): [Skill] Google's official skill that queries account data through the Google Ads MCP server to diagnose conversion drops, falling leads and impression share lost to bids, budgets or ad rank. Needs a Google Ads account, API credentials (developer token and OAuth) and Python 3.12. - [BigQuery Basics](https://hebbmind.com/fr/skill/bigquery-basics.md): [Skill] Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project. - [lark-base (Lark Base)](https://hebbmind.com/fr/skill/lark-base.md): [Skill] Official Lark (Feishu) skill for Lark Base: create tables, add fields, add and edit records, build views, forms and dashboards, or apply ready-made templates, good for sign-ups, asset registers and trackers. Needs lark-cli on a machine with Node.js, plus app setup and authorization. - [lark-sheets (Lark Sheets)](https://hebbmind.com/fr/skill/lark-sheets.md): [Skill] Official Lark (Feishu) skill to create and edit Lark Sheets: formulas, charts and pivot tables, conditional formatting and filters, plus import and export of local Excel/CSV, for summaries, budgets and reports. Needs lark-cli on a machine with Node.js, plus app setup and authorization. Next page: https://hebbmind.com/fr/tools.md?page=2&profession=data%2Csecurity