# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for QA or ML / AI or Data analysis or Security: 445 items.

> - QA: Functional testing, test automation and quality assurance.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [OpenBB Platform CLI](https://hebbmind.com/ja/cli/openbb-finance-cli.md): [CLI] Command-line edition of the open-source OpenBB investment research platform: query stock prices, financial statements, macroeconomic and other financial data from the terminal, and automate data pulls with Routine scripts. Officially maintained; some sources need API keys.
- [act](https://hebbmind.com/ja/cli/act.md): [CLI] Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed.
- [Docling](https://hebbmind.com/ja/cli/docling.md): [CLI] Parses PDF, DOCX, PPTX, XLSX, HTML, images and audio, recovering layout, reading order, tables and formulas, and exports Markdown, HTML or lossless JSON. Started by IBM Research, now hosted by the LF AI & Data Foundation; runs fully locally.
- [FFmpeg](https://hebbmind.com/ja/cli/ffmpeg.md): [CLI] Command-line toolkit for transcoding, cutting, joining, frame extraction and streaming of audio and video, including ffmpeg, ffprobe and ffplay. A core dependency for agents handling media. The GitHub repo is the official mirror.
- [CLI-Anything](https://hebbmind.com/ja/cli/cli-anything.md): [CLI] From HKU's Data Intelligence Lab: plugins or skills for Claude Code, Codex and other agents generate agent-callable CLIs for apps like GIMP, Blender and LibreOffice, and the cli-hub package manager finds and installs ready-made community CLIs. Needs Python 3.10+.
- [Freqtrade](https://hebbmind.com/ja/cli/freqtrade.md): [CLI] Open-source crypto trading framework: download market data, backtest and optimize strategies, and paper trade from the CLI while agents iterate on strategies. Docker recommended; strategies need Python and live trading needs exchange API keys. Backtests don't guarantee returns.
- [goose](https://hebbmind.com/ja/cli/goose.md): [CLI] General-purpose AI agent that runs on your machine, with a desktop app, CLI and API. Written in Rust, works with 15+ model providers and connects to 70+ extensions via MCP. Originally from Block, now part of the Linux Foundation's AAIF.
- [Scanpy Single-Cell Analysis](https://hebbmind.com/ja/skill/scanpy.md): [Skill] Teaches agents standard single-cell RNA-seq analysis with Scanpy: QC, normalization, PCA/UMAP, clustering, differential expression and plots, with ready-to-run pipeline scripts and guidance on converting Seurat and other R objects to h5ad. Needs Python 3.12+; by K-Dense.
- [Database Lookup](https://hebbmind.com/ja/skill/database-lookup.md): [Skill] Unified database lookup skill from K-Dense's scientific collection: reproducibly queries about 80 public database APIs such as PubChem, UniProt, ChEMBL, ClinicalTrials.gov and FRED, returning traceable results with endpoints, parameters and count checks. Some need API keys.
- [Statistical Analysis](https://hebbmind.com/ja/skill/statistical-analysis.md): [Skill] Guides agents to the right statistical method for research data: t-tests, ANOVA, chi-square, regression and Bayesian analysis, checking assumptions, computing effect sizes and power, and reporting results in APA format. Python-based (pingouin, statsmodels); by K-Dense.
- [whisper.cpp](https://hebbmind.com/ja/cli/whisper-cpp.md): [CLI] C/C++ port of OpenAI's Whisper speech recognition model that transcribes audio offline and outputs subtitles. Runs on CPU, with Apple Silicon and various GPU acceleration. Download a ggml-format model first.
- [Chrome DevTools MCP](https://hebbmind.com/ja/mcp/chrome-devtools-mcp.md): [MCP] Lets agents control and inspect a real Chrome: read the console and network requests, take screenshots, and record performance traces with optimization suggestions. Maintained by the Chrome DevTools team.
- [Chrome DevTools MCP](https://hebbmind.com/ja/plugin/chrome-devtools-mcp.md): [Plugin] Official Chrome plugin bundling the Chrome DevTools MCP with debugging skills for accessibility, LCP and memory leaks: lets agents drive and inspect a real Chrome and analyze network requests, console logs and performance traces. Collects usage stats by default; can be disabled.
- [Chrome DevTools](https://hebbmind.com/ja/skill/chrome-devtools.md): [Skill] Teaches agents to use the Chrome DevTools MCP efficiently: snapshot first to get element uids, screenshot only when needed, paginate and filter large output, inspect CSS and test browser extensions. Needs chrome-devtools-mcp configured; maintained by the Chrome DevTools team.
- [Ruff](https://hebbmind.com/ja/cli/ruff.md): [CLI] Astral's extremely fast Python linter and formatter written in Rust, replacing Flake8, isort and Black, with 900+ built-in rules and auto-fix.
- [tmux](https://hebbmind.com/ja/cli/tmux.md): [CLI] Terminal multiplexer: run multiple sessions and panes in one terminal, with processes surviving disconnects. Agents use it to host long-running tasks and drive interactive programs, and many parallel multi-agent session tools build on it.
- [Qlib](https://hebbmind.com/ja/cli/qlib.md): [CLI] Microsoft's open-source AI quant investment research platform: the qrun command runs dataset building, model training, backtesting and evaluation from a YAML config, with many benchmark models. The official dataset is paused, so prepare market data per the README first.
- [Open Code Review](https://hebbmind.com/ja/skill/open-code-review.md): [Skill] Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba.
- [Agentic Awesome Skills](https://hebbmind.com/ja/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills.
- [Bruno CLI](https://hebbmind.com/ja/cli/bruno-cli.md): [CLI] Official CLI (bru) for the open-source API client Bruno: runs collections stored as plain text in your repo, switches environments, outputs JSON results and imports collections from OpenAPI, making API tests easy to run in CI.
- [Playwright](https://hebbmind.com/ja/plugin/playwright.md): [Plugin] Wraps Microsoft's Playwright MCP so agents can drive a real browser to navigate, click, fill forms and take screenshots for end-to-end tests and page checks. In Anthropic's official marketplace; needs Node.js.
- [Security Guidance](https://hebbmind.com/ja/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.
- [MCP Server Dev](https://hebbmind.com/ja/plugin/mcp-server-dev.md): [Plugin] Designs and builds MCP servers: first picks a deployment model among remote HTTP, MCPB bundles and local stdio, then guides tool design, auth and in-chat interactive components. Maintained by Anthropic.
- [Session Report](https://hebbmind.com/ja/plugin/session-report.md): [Plugin] Official Anthropic plugin that reads local session logs in ~/.claude/projects and generates an interactive HTML usage report covering tokens, cache hit rate, subagents, skills and the most expensive prompts, with optimization tips. Needs Node.js.
- [Pyright LSP](https://hebbmind.com/ja/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin.
- [Skill Creator](https://hebbmind.com/ja/plugin/skill-creator.md): [Plugin] Creates or improves Agent Skills from scratch: writes eval cases to test them, runs benchmarks with variance analysis, and tunes descriptions for more accurate triggering. Maintained by Anthropic.
- [agent-browser](https://hebbmind.com/ja/skill/agent-browser.md): [Skill] Companion skill for the agent-browser CLI: has the agent load usage matching the installed version to navigate, fill forms, take screenshots and run exploratory tests, and can also drive Electron desktop apps. Install the agent-browser CLI first; from Vercel Labs.
- [agent-browser](https://hebbmind.com/ja/cli/agent-browser.md): [CLI] Browser automation CLI built for AI agents in native Rust: open pages, click and fill forms by refs from accessibility tree snapshots, read text and take screenshots, with compact snapshots and output limits to save context. From Vercel Labs; reuses local Chrome or installs one.
- [agent-browser](https://hebbmind.com/ja/plugin/agent-browser.md): [Plugin] Browser automation plugin from Vercel Labs: agents drive Chrome through accessibility tree snapshots and element refs to navigate, click, fill forms and take screenshots, for web testing and exploratory QA. Install the agent-browser CLI first (npm, Homebrew or Cargo).
- [curl](https://hebbmind.com/ja/cli/curl.md): [CLI] Command-line tool for transferring data by URL over 20+ protocols including HTTP(S), FTP, SFTP, WebSocket and MQTT; a staple for agents calling APIs and downloading files. Preinstalled on macOS and most Linux distributions.
- [aria2](https://hebbmind.com/ja/cli/aria2.md): [CLI] Lightweight multi-protocol command-line downloader that fetches in parallel segments from multiple sources over HTTP(S), FTP, SFTP, BitTorrent and Metalink. Resumes downloads, reads URLs in bulk from text files and offers a JSON-RPC interface for scripts or agents.
- [wshobson/agents](https://hebbmind.com/ja/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content.
- [GDPR Data Handling](https://hebbmind.com/ja/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions.
- [Accessibility Compliance](https://hebbmind.com/ja/plugin/accessibility-compliance.md): [Plugin] Accessibility review plugin with an audit command, a UI validation subagent, and WCAG 2.2 and screen reader testing skills. Before design reviews or launch, the agent checks contrast, keyboard use and screen reader support and suggests fixes. For Claude Code; automated checks need Node.js.
- [Business Analytics](https://hebbmind.com/ja/plugin/business-analytics.md): [Plugin] Business analytics plugin from the wshobson/agents marketplace: KPI dashboard design and data storytelling skills plus a business analyst subagent to choose metrics, plan dashboard layouts and turn data into reports executives or investors understand. Methods and templates only; no data connections.
- [Machine Learning Ops](https://hebbmind.com/ja/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills.
- [TDD Workflows](https://hebbmind.com/ja/plugin/tdd-workflows.md): [Plugin] Test-driven development plugin: /tdd-workflows:tdd-cycle and related commands move through red-green-refactor phases with a checkpoint for approval at each, plus TDD orchestrator and code reviewer subagents. Part of the wshobson/agents marketplace.
- [LLM Application Dev](https://hebbmind.com/ja/plugin/llm-application-dev.md): [Plugin] Plugin for building LLM apps: LangGraph agents with memory and tool use, hybrid-search RAG, vector index tuning, prompt optimization and LLM evaluation. Includes 3 subagents and 8 skills.
- [Agent Teams](https://hebbmind.com/ja/plugin/agent-teams.md): [Plugin] Orchestrates multi-agent teams using Claude Code's experimental Agent Teams feature: parallel multi-angle code review, competing-hypothesis debugging and feature work split by file ownership. Enable CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS first.
- [wshobson/agents](https://hebbmind.com/ja/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands.
- [Security Scanning](https://hebbmind.com/ja/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees.
- [Quantitative Trading](https://hebbmind.com/ja/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice.
- [clean-data-xls](https://hebbmind.com/ja/skill/clean-data-xls.md): [Skill] Official Anthropic skill for cleaning messy Excel exports: trims spaces, standardizes case and dates, converts text numbers, dedupes, and flags mixed types, garbled text and errors. Keeps originals via helper-column formulas and confirms each step. Works in Claude for Excel; local files need Python.
- [audit-xls](https://hebbmind.com/ja/skill/audit-xls.md): [Skill] Official Anthropic finance skill that checks Excel for formula errors like #REF!, numbers hardcoded in formulas, sum ranges that miss rows and mixed units; on full models it also checks the balance sheet balances and cash ties. Lists issues and fixes and asks before changing anything.
- [Nushell](https://hebbmind.com/ja/cli/nushell.md): [CLI] Cross-platform shell built around structured data: pipelines pass tables instead of plain text, and you can open and query JSON, CSV, TOML and more directly. Default builds include nu --mcp, which serves it to agents as an MCP server.
- [Marker](https://hebbmind.com/ja/cli/marker.md): [CLI] Converts PDFs, images, PPTX, DOCX, XLSX, EPUB and more into Markdown, JSON or HTML, preserving tables, formulas and layout, with optional LLM help for higher accuracy. Needs Python 3.10+ and PyTorch; large-scale commercial use of the model weights needs a paid license.
- [PostHog MCP](https://hebbmind.com/ja/mcp/posthog-mcp.md): [MCP] PostHog's official hosted MCP: lets agents query product analytics with HogQL, manage feature flags and A/B experiments, and investigate errors and session replays. Sign in to PostHog to authorize; tool calls are free, though a few LLM-powered tools count toward AI usage.
- [Agent TARS CLI](https://hebbmind.com/ja/cli/ui-tars-desktop.md): [CLI] ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key.
- [@agent-infra/mcp-server-browser](https://hebbmind.com/ja/mcp/browser.md): [MCP] Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP.
- [Trivy](https://hebbmind.com/ja/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

Next page: https://hebbmind.com/ja/tools.md?page=3&profession=qa%2Calgorithm%2Cdata%2Csecurity
