# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Type Plugin, Resources for DevOps / SRE or Security: 50 items. > - DevOps / SRE: Deployment, monitoring, cloud resources and reliability. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [Claude Security](https://hebbmind.com/fr/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [ECC](https://hebbmind.com/fr/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [Hookify](https://hebbmind.com/fr/plugin/hookify.md): [Plugin] Generates hook rules from a one-line description or by analyzing recent conversations. Rules are Markdown files with match conditions that block or warn on dangerous commands and unwanted patterns, and take effect without a restart. Official Anthropic plugin. - [wshobson/agents](https://hebbmind.com/fr/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Kubernetes Operations](https://hebbmind.com/fr/plugin/kubernetes-operations.md): [Plugin] Kubernetes operations plugin from the wshobson/agents marketplace: a kubernetes-architect subagent plus four skills for manifest generation, Helm chart scaffolding, GitOps workflows and security policies. Community-maintained. - [Machine Learning Ops](https://hebbmind.com/fr/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills. - [Security Scanning](https://hebbmind.com/fr/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [Security Guidance](https://hebbmind.com/fr/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [Terraform](https://hebbmind.com/fr/plugin/terraform.md): [Plugin] HashiCorp's official Terraform plugin: runs the Terraform MCP Server in Docker against the Terraform Registry and HCP Terraform API to look up provider and module docs and help write IaC. Needs Docker; TFE_TOKEN is optional. - [Claude Code Setup](https://hebbmind.com/fr/plugin/claude-code-setup.md): [Plugin] Scans your codebase and recommends the best hooks, skills, MCP servers, subagents and slash commands by category. Analysis only, no file changes; a quick way to set up Claude Code for a project. Official Anthropic plugin. - [Go LSP (gopls)](https://hebbmind.com/fr/plugin/gopls-lsp.md): [Plugin] Connects Claude Code to gopls, Go's official language server, for code intelligence, refactoring and analysis. Install gopls with go install and add Go's bin directory to PATH first. Official Anthropic plugin. - [Claude Plugins Official](https://hebbmind.com/fr/plugin/claude-plugins-official.md): [Plugin] Anthropic's official plugin marketplace, built into Claude Code by default, with 300+ official and partner plugins for development, security, design and office collaboration. Browse and install with /plugin. - [GitHub](https://hebbmind.com/fr/plugin/github.md): [Plugin] Connects GitHub's official remote MCP server to manage issues and PRs, review code, search repos and call the GitHub API from Claude Code. Requires GITHUB_PERSONAL_ACCESS_TOKEN. - [GitLab](https://hebbmind.com/fr/plugin/gitlab.md): [Plugin] Connects GitLab's official remote MCP server (beta) so Claude can work with repos, merge requests, CI/CD pipelines, issues and wikis on GitLab.com. MCP access must be enabled on the top-level group, with browser OAuth. In Anthropic's official plugin marketplace. - [Next AI Draw.io](https://hebbmind.com/fr/plugin/claude-plugin.md): [Plugin] Claude Code plugin for Next AI Draw.io that starts its Draw.io MCP server via npx. Generate and edit flowcharts, architecture and sequence diagrams in plain language, with live browser preview, version history and .drawio export. Needs Node.js. - [Context Mode](https://hebbmind.com/fr/plugin/context-mode.md): [Plugin] Processes large tool outputs in a sandbox and returns only the results to context; logs session events in SQLite with FTS5 so work continues after context compaction. Supports Claude Code, Codex and a dozen other clients. ELv2 licensed. - [Engineering](https://hebbmind.com/fr/plugin/engineering.md): [Plugin] Everyday software engineering plugin: standup summaries, code review, structured debugging, architecture decision records, incident response and pre-deploy checks. Official from Anthropic, built mainly for Cowork but also usable in Claude Code. - [Awesome Claude Code Subagents](https://hebbmind.com/fr/plugin/awesome-claude-code-subagents.md): [Plugin] 160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need. - [Google Skills](https://hebbmind.com/fr/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others. - [Claude Skills (Fullstack Dev Skills)](https://hebbmind.com/fr/plugin/jeffallan-claude-skills.md): [Plugin] Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP). - [AI Governance Legal](https://hebbmind.com/fr/plugin/ai-governance-legal.md): [Plugin] Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice. - [Privacy Legal](https://hebbmind.com/fr/plugin/privacy-legal.md): [Plugin] Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic. - [Trail of Bits Skills](https://hebbmind.com/fr/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [Codex Security](https://hebbmind.com/fr/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. - [Claude Plugins Community](https://hebbmind.com/fr/plugin/claude-plugins-community.md): [Plugin] Read-only mirror of the community plugin marketplace maintained by Anthropic, with 2,000+ community plugins that passed submission review and automated security scans, for Claude Code and Claude Cowork. - [Build with Claude](https://hebbmind.com/fr/plugin/buildwithclaude.md): [Plugin] Community plugin marketplace bundling hundreds of subagents, slash commands, hooks and skills by category, installable individually or all at once, with the buildwithclaude.com site for browsing community plugins and MCP servers. - [NVIDIA Agent Skills](https://hebbmind.com/fr/plugin/nvidia-skills.md): [Plugin] NVIDIA's official plugin that finds and installs the right skills from NVIDIA's catalog for your task, spanning CUDA acceleration, NIM inference, NeMo training, RAG blueprints, Omniverse simulation and robotics. Listed in both the Claude and Codex official marketplaces. - [Cloudflare Skills](https://hebbmind.com/fr/plugin/cloudflare-skills.md): [Plugin] Cloudflare's official plugin with skills for Workers, Durable Objects, the Agents SDK, Wrangler, Sandbox and web performance audits, plus the Cloudflare API MCP for account data and up-to-date docs. - [Agent Toolkit for AWS](https://hebbmind.com/fr/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials. - [CC Safety Net](https://hebbmind.com/fr/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+. - [Azure Skills Plugin](https://hebbmind.com/fr/plugin/azure-skills.md): [Plugin] Microsoft's official Azure plugin: bundles 20+ skills such as azure-prepare, azure-deploy, azure-diagnostics and azure-cost, and connects the Azure MCP and Foundry MCP to query resources, estimate costs, deploy and troubleshoot. Needs an Azure subscription and az login. - [daymade Claude Code Skills](https://hebbmind.com/fr/plugin/claude-code-skills.md): [Plugin] A plugin marketplace with dozens of plugins: an enhanced skill-creator, scrapers for Bilibili, Douban and Feishu docs, China A-share news and US stock fundamentals, WeCom notifications, deep research and fact-checking, with docs in English and Chinese. - [Agent Plugins for AWS](https://hebbmind.com/fr/plugin/agent-plugins.md): [Plugin] AWS Labs' official plugin marketplace: deploy-on-aws (architecture recommendations, cost estimates and IaC deployment), aws-serverless, aws-amplify, databases-on-aws, sagemaker-ai and more. AWS suggests Agent Toolkit for AWS for new projects. - [HashiCorp Agent Skills](https://hebbmind.com/fr/plugin/hashicorp-agent-skills.md): [Plugin] HashiCorp's official plugin marketplace: the terraform plugin has 16 skills (configuration, modules, provider development, testing, import, Stacks and policy), and the packer plugin has 4 image-build and HCP Packer skills. - [Astronomer Data Agents](https://hebbmind.com/fr/plugin/astronomer-agents.md): [Plugin] Astronomer's official data engineering plugin: write Airflow DAGs to best practices, debug pipeline failures, trace data lineage, profile warehouse tables and migrate from Airflow 2 to 3, with a built-in Airflow MCP server and session hooks. - [Railway](https://hebbmind.com/fr/plugin/railway.md): [Plugin] Railway's official plugin, bundling the use-railway skill and hosted Railway MCP so agents can create projects, deploy services, set environment variables and databases, and check logs and metrics to debug deployments. Needs a Railway account. - [Vercel Plugin](https://hebbmind.com/fr/plugin/vercel-plugin.md): [Plugin] Vercel's official plugin: a knowledge graph of the Vercel ecosystem, dozens of skills, expert subagents for deployment and performance, and commands for deploys, env vars and project status, covering Next.js, the AI SDK, storage and CI/CD. Needs Node.js 18+ and Bun; telemetry is opt-out. - [SonarQube](https://hebbmind.com/fr/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker. - [Neon Postgres](https://hebbmind.com/fr/plugin/neon-postgres.md): [Plugin] Neon's official plugin combining the Neon MCP and skills to manage serverless Postgres: projects and branches, object storage, Functions and the AI Gateway. Signs in to Neon via OAuth the first time you use the MCP. - [Pulumi Agent Skills](https://hebbmind.com/fr/plugin/pulumi-agent-skills.md): [Plugin] Pulumi's official plugin marketplace: write infrastructure as code in TypeScript, Python, Go and more, migrate from Terraform, CDK, CloudFormation or ARM, and manage ESC secrets and config. Works with both Claude Code and Codex. - [Auth0](https://hebbmind.com/fr/plugin/auth0.md): [Plugin] Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up). - [Netlify Skills](https://hebbmind.com/fr/plugin/context-and-tools.md): [Plugin] Netlify's official plugin with skills for Functions, Edge Functions, Blobs, databases, forms, caching, netlify.toml configuration and deploys, plus the hosted Netlify MCP (OAuth sign-in on first use). - [Langfuse Observability Plugin](https://hebbmind.com/fr/plugin/claude-observability-plugin.md): [Plugin] Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+. - [AWS Startup Advisor](https://hebbmind.com/fr/plugin/aws-startup-advisor.md): [Plugin] AWS's official plugin for startups: answers AWS Activate credit eligibility and 60+ startup perks, gives architecture and cost advice by funding stage, team size and runway, and plans migrations from GCP, Azure or Heroku. Perk lookups need no AWS account; migrations need your repo. - [Grafana AI Marketplace](https://hebbmind.com/fr/plugin/ai-marketplace.md): [Plugin] Grafana's official plugin marketplace with three plugins: the hosted Grafana Cloud MCP, the local mcp-grafana and Grafana Assistant, covering dashboards, data sources, Prometheus and Loki queries, alerting and incident management. Works with Claude Code and Codex. - [Datadog](https://hebbmind.com/fr/plugin/claude-code-plugin.md): [Plugin] Preconfigures the Datadog MCP in Claude Code to query logs, metrics, traces, dashboards and monitors in plain language while troubleshooting production. Maintained by Datadog; needs a Datadog account (OAuth or API key). In preview. - [Semgrep Guardian](https://hebbmind.com/fr/plugin/semgrep-plugin.md): [Plugin] Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login. - [PagerDuty](https://hebbmind.com/fr/plugin/claude-code-plugins.md): [Plugin] PagerDuty's official plugin: analyzes your current git diff against the service's past incidents and change events, gives a 0-5 risk score and suggestions before you commit, and can create PagerDuty SRE Agent skills (early access program required). Needs a PagerDuty API token. - [Sentry for Claude Code](https://hebbmind.com/fr/plugin/plugin-claude.md): [Plugin] Sentry's official plugin: skills for SDK setup across platforms, production issue debugging, Sentry-aware code review and alert configuration, plus the hosted Sentry MCP to query errors and stack traces. Needs a Sentry account. - [Vanta](https://hebbmind.com/fr/plugin/vanta-mcp-plugin.md): [Plugin] Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert.