# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Data analysis or Security or Customer support: 284 items. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Customer support: Tickets, customer questions, knowledge-base upkeep and service quality. - [Browser Use](https://hebbmind.com/fr/skill/browser-use.md): [Skill] Controls your local Chrome over CDP to navigate, click, type, take screenshots and scrape data, reusing logged-in sessions. Official browser-use skill; install the browser-use CLI with uv first. - [Scientific Agent Skills](https://hebbmind.com/fr/skill/scientific-agent-skills.md): [Skill] 166 research skills maintained by K-Dense (formerly Claude Scientific Skills), spanning bioinformatics, cheminformatics, clinical research, materials and physics, including unified access to 78 public databases such as PubChem and UniProt. Works with Claude Code, Codex and Cursor. - [DuckDB](https://hebbmind.com/fr/cli/duckdb.md): [CLI] In-process analytical SQL database. Its CLI queries CSV, Parquet and JSON files directly with SQL, no import or server needed, so agents can sample and aggregate large files. Officially maintained. - [Claude Security](https://hebbmind.com/fr/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [Knowledge Work Plugins](https://hebbmind.com/fr/plugin/knowledge-work-plugins.md): [Plugin] Anthropic's knowledge-work plugin marketplace, bundling skills, commands and connectors by role: sales, support, product, marketing, legal, finance, HR, data and more, plus many partner plugins. Built mainly for Cowork; also works in Claude Code. - [MCP Toolbox for Databases](https://hebbmind.com/fr/mcp/mcp-toolbox.md): [MCP] Google's open-source database MCP server with ready-made query and SQL tools for dozens of sources, including PostgreSQL, MySQL, BigQuery, Spanner and MongoDB. Define controlled custom queries in tools.yaml. - [Trail of Bits Skills](https://hebbmind.com/fr/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace. - [Customer Billing Ops](https://hebbmind.com/fr/skill/customer-billing-ops.md): [Skill] Resolves subscription billing issues: checks customer and subscription state, separates duplicate purchases, team seats and failed payments, restores self-serve before refunding, and drafts the reply. Needs Stripe or similar tools connected; refunds move real money, so review them. - [ECC](https://hebbmind.com/fr/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [XLSX](https://hebbmind.com/fr/skill/xlsx.md): [Skill] Creates, edits and analyzes Excel spreadsheets: formulas, formatting, charts and data cleaning, plus conversion between CSV, TSV and other tabular formats. The official Anthropic skill behind Claude's document features; source-available, not open source. - [Browser Use MCP](https://hebbmind.com/fr/mcp/browser-use-mcp.md): [MCP] Local MCP server built into Browser Use: lets agents navigate, click, type and extract page content, or hand multi-step tasks to the built-in browser agent. Bring your own OpenAI or Anthropic API key. - [Scrapling](https://hebbmind.com/fr/mcp/scrapling.md): [MCP] MCP server built into the adaptive Python scraping framework Scrapling: supports plain HTTP requests, browser rendering and stealth fetching, and uses CSS selectors to pass only the target content to the AI, saving tokens and filtering out prompt injection. - [Scrapling](https://hebbmind.com/fr/cli/scrapling.md): [CLI] Adaptive web scraping framework: scrapling extract turns a page into Markdown, text or HTML in one command, with CSS selectors and browser rendering for dynamic pages, plus an MCP server (needs the ai extra). Needs Python 3.10+ and a browser install on first use. - [Crawl4AI](https://hebbmind.com/fr/cli/crawl4ai.md): [CLI] Open-source, LLM-friendly web crawler that turns pages into clean Markdown for RAG and agents. Ships the crwl CLI and supports deep crawling and question-driven data extraction (extraction needs an LLM key). Free to self-host. - [OpenBB MCP Server](https://hebbmind.com/fr/mcp/openbb-finance-mcp-server.md): [MCP] Official OpenBB MCP server exposing the OpenBB Platform's equity, ETF, macroeconomic, crypto and news data to agents; enable only the tool categories you need to save context. Needs uv locally; some data sources need your own API keys. Not investment advice. - [OpenBB Platform CLI](https://hebbmind.com/fr/cli/openbb-finance-cli.md): [CLI] Command-line edition of the open-source OpenBB investment research platform: query stock prices, financial statements, macroeconomic and other financial data from the terminal, and automate data pulls with Routine scripts. Officially maintained; some sources need API keys. - [churn-prevention](https://hebbmind.com/fr/skill/churn-prevention.md): [Skill] Helps subscription products reduce churn: designs cancellation flows, save offers and exit surveys, spots churn risk signals, and plans dunning and win-back emails after failed payments. For customer success, lifecycle and growth teams; billing platforms like Stripe need setup on your side. - [Database Lookup](https://hebbmind.com/fr/skill/database-lookup.md): [Skill] Unified database lookup skill from K-Dense's scientific collection: reproducibly queries about 80 public database APIs such as PubChem, UniProt, ChEMBL, ClinicalTrials.gov and FRED, returning traceable results with endpoints, parameters and count checks. Some need API keys. - [Scanpy Single-Cell Analysis](https://hebbmind.com/fr/skill/scanpy.md): [Skill] Teaches agents standard single-cell RNA-seq analysis with Scanpy: QC, normalization, PCA/UMAP, clustering, differential expression and plots, with ready-to-run pipeline scripts and guidance on converting Seurat and other R objects to h5ad. Needs Python 3.12+; by K-Dense. - [Statistical Analysis](https://hebbmind.com/fr/skill/statistical-analysis.md): [Skill] Guides agents to the right statistical method for research data: t-tests, ANOVA, chi-square, regression and Bayesian analysis, checking assumptions, computing effect sizes and power, and reporting results in APA format. Python-based (pingouin, statsmodels); by K-Dense. - [Agentic Awesome Skills](https://hebbmind.com/fr/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills. - [Customer Sales Automation](https://hebbmind.com/fr/plugin/customer-sales-automation.md): [Plugin] Support and sales plugin with two subagents: one handles support replies, ticket triage and help docs; the other writes cold email sequences, follow-up cadences, quote templates and objection handling. Prompts only; no direct CRM connection. - [wshobson/agents](https://hebbmind.com/fr/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Security Scanning](https://hebbmind.com/fr/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [wshobson/agents](https://hebbmind.com/fr/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands. - [Business Analytics](https://hebbmind.com/fr/plugin/business-analytics.md): [Plugin] Business analytics plugin from the wshobson/agents marketplace: KPI dashboard design and data storytelling skills plus a business analyst subagent to choose metrics, plan dashboard layouts and turn data into reports executives or investors understand. Methods and templates only; no data connections. - [GDPR Data Handling](https://hebbmind.com/fr/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions. - [Quantitative Trading](https://hebbmind.com/fr/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice. - [Nushell](https://hebbmind.com/fr/cli/nushell.md): [CLI] Cross-platform shell built around structured data: pipelines pass tables instead of plain text, and you can open and query JSON, CSV, TOML and more directly. Default builds include nu --mcp, which serves it to agents as an MCP server. - [PostHog MCP](https://hebbmind.com/fr/mcp/posthog-mcp.md): [MCP] PostHog's official hosted MCP: lets agents query product analytics with HogQL, manage feature flags and A/B experiments, and investigate errors and session replays. Sign in to PostHog to authorize; tool calls are free, though a few LLM-powered tools count toward AI usage. - [Security Guidance](https://hebbmind.com/fr/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [clean-data-xls](https://hebbmind.com/fr/skill/clean-data-xls.md): [Skill] Official Anthropic skill for cleaning messy Excel exports: trims spaces, standardizes case and dates, converts text numbers, dedupes, and flags mixed types, garbled text and errors. Keeps originals via helper-column formulas and confirms each step. Works in Claude for Excel; local files need Python. - [audit-xls](https://hebbmind.com/fr/skill/audit-xls.md): [Skill] Official Anthropic finance skill that checks Excel for formula errors like #REF!, numbers hardcoded in formulas, sum ranges that miss rows and mixed units; on full models it also checks the balance sheet balances and cash ties. Lists issues and fixes and asks before changing anything. - [Trivy](https://hebbmind.com/fr/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security. - [Vault](https://hebbmind.com/fr/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server. - [Vibe-Trading](https://hebbmind.com/fr/mcp/vibe-trading.md): [MCP] Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice. - [Anthropic Cybersecurity Skills](https://hebbmind.com/fr/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only. - [WeKnora CLI](https://hebbmind.com/fr/cli/tencent-cli.md): [CLI] Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+. - [Nuclei](https://hebbmind.com/fr/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test. - [persona-customer-support](https://hebbmind.com/fr/skill/persona-customer-support.md): [Skill] Support persona skill for the gws CLI: triages support-labeled Gmail, turns emails into tasks, logs tickets in Google Sheets, escalates urgent issues to Chat and books follow-ups. Needs gws authorized via your own Google Cloud project plus its companion skills; not officially supported by Google. - [OpenCLI](https://hebbmind.com/fr/cli/opencli.md): [CLI] Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension. - [Gitleaks](https://hebbmind.com/fr/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks. - [Performance Report](https://hebbmind.com/fr/skill/performance-report.md): [Skill] Turns campaign or channel data into weekly, monthly or quarterly marketing reports: executive summary, key metrics and period-over-period trends, wins and misses, and next-period priorities. Connect analytics tools or just paste tables or key numbers. From Anthropic's knowledge-work-plugins. - [Enterprise Search](https://hebbmind.com/fr/plugin/enterprise-search.md): [Plugin] Anthropic's official knowledge work plugin: one question searches your connected chat, email, cloud docs, wiki and project tools at once and returns a sourced answer; can also produce daily or weekly digests. Preset MCP connectors for Slack, Notion, Atlassian, Asana and more, each needing auth. - [Compliance Tracking](https://hebbmind.com/fr/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review. - [Ticket Deflector](https://hebbmind.com/fr/skill/ticket-deflector.md): [Skill] Support for small merchants: reads customer emails, checks orders and refunds in Stripe, PayPal, Square or Shopify, and drafts replies in the owner's voice per your refund policy; can refund via Stripe or Square after explicit approval. Works with pasted emails too. Official from Anthropic. - [customer-escalation](https://hebbmind.com/fr/skill/customer-escalation.md): [Skill] Packages customer issues that need engineering, product or leadership into an escalation brief with scope, repro steps, business impact, asks and deadline, and decides who to escalate to. Support and CRM connectors add context automatically. Part of Anthropic's official customer-support plugin. - [ticket-triage](https://hebbmind.com/fr/skill/ticket-triage.md): [Skill] Triages support tickets: extracts the issue and urgency signals, categorizes and assigns P1 to P4 priority, checks for duplicates or known issues, suggests the team to route to and drafts the first response. Part of Anthropic's official customer-support plugin. - [Customer Health](https://hebbmind.com/fr/skill/customer-health.md): [Skill] Account health checks for customer success managers: pulls CRM, email, calendar and call notes to score relationship, engagement, commercial (renewal and expansion), support and value delivery red/yellow/green, and can prep a QBR agenda. CRM preferred; uploads work. Official from Anthropic. - [Renewal Radar](https://hebbmind.com/fr/skill/renewal-radar.md): [Skill] Lists renewals coming up in the next few months, flags churn risk and expansion opportunities from signals like usage, key contact changes and open complaints, and checks for missing or wrong renewal opportunities in the CRM. Needs a CRM or uploaded contract exports. Official from Anthropic. Next page: https://hebbmind.com/fr/tools.md?page=2&profession=data%2Csecurity%2Csupport