# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Security or Customer support or HR: 383 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Customer support: Tickets, customer questions, knowledge-base upkeep and service quality.
> - HR: Screening, interviews, onboarding, training and employee relations.

- [CowAgent](https://hebbmind.com/ja/cli/cowagent.md): [CLI] Open-source personal AI assistant and agent harness, formerly chatgpt-on-wechat: plans tasks, runs tools and skills, self-evolving memory and knowledge, multi-agent teams. Channels: WeChat, WeCom, Feishu, DingTalk, QQ, Telegram, Slack; any major model provider. One-line install and web console.
- [Security Guidance](https://hebbmind.com/ja/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.
- [Skill Creator](https://hebbmind.com/ja/plugin/skill-creator.md): [Plugin] Creates or improves Agent Skills from scratch: writes eval cases to test them, runs benchmarks with variance analysis, and tunes descriptions for more accurate triggering. Maintained by Anthropic.
- [Pyright LSP](https://hebbmind.com/ja/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin.
- [Session Report](https://hebbmind.com/ja/plugin/session-report.md): [Plugin] Official Anthropic plugin that reads local session logs in ~/.claude/projects and generates an interactive HTML usage report covering tokens, cache hit rate, subagents, skills and the most expensive prompts, with optimization tips. Needs Node.js.
- [MCP Server Dev](https://hebbmind.com/ja/plugin/mcp-server-dev.md): [Plugin] Designs and builds MCP servers: first picks a deployment model among remote HTTP, MCPB bundles and local stdio, then guides tool design, auth and in-chat interactive components. Maintained by Anthropic.
- [Reactive Resume MCP](https://hebbmind.com/ja/mcp/reactive-resume.md): [MCP] Official remote MCP for the open-source resume builder Reactive Resume: agents draft and edit resumes and cover letters, export PDFs and track applications; job-based scoring and tailoring need an AI provider set in the app. Needs a free rxresu.me account or a self-hosted instance.
- [aria2](https://hebbmind.com/ja/cli/aria2.md): [CLI] Lightweight multi-protocol command-line downloader that fetches in parallel segments from multiple sources over HTTP(S), FTP, SFTP, BitTorrent and Metalink. Resumes downloads, reads URLs in bulk from text files and offers a JSON-RPC interface for scripts or agents.
- [HR Legal Compliance](https://hebbmind.com/ja/plugin/hr-legal-compliance.md): [Plugin] HR and compliance plugin with HR and legal advisor subagents plus employment contract and GDPR skills, for drafting hiring materials, onboarding, offboarding and performance policies, employment contracts, privacy policies, terms of service and DPAs. Mainly US and EU rules.
- [Security Scanning](https://hebbmind.com/ja/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees.
- [team-composition-analysis](https://hebbmind.com/ja/skill/team-composition-analysis.md): [Skill] Plans teams for seed to Series A startups: which roles to hire at each stage and in what order, org structure, plus salary, equity ranges and headcount budget. Compensation benchmarks are 2024 US market data; adjust for your market and have finance and legal review the plan.
- [LLM Application Dev](https://hebbmind.com/ja/plugin/llm-application-dev.md): [Plugin] Plugin for building LLM apps: LangGraph agents with memory and tool use, hybrid-search RAG, vector index tuning, prompt optimization and LLM evaluation. Includes 3 subagents and 8 skills.
- [Customer Sales Automation](https://hebbmind.com/ja/plugin/customer-sales-automation.md): [Plugin] Support and sales plugin with two subagents: one handles support replies, ticket triage and help docs; the other writes cold email sequences, follow-up cadences, quote templates and objection handling. Prompts only; no direct CRM connection.
- [GDPR Data Handling](https://hebbmind.com/ja/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions.
- [wshobson/agents](https://hebbmind.com/ja/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content.
- [Quantitative Trading](https://hebbmind.com/ja/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice.
- [Employment Contract Templates](https://hebbmind.com/ja/skill/employment-contract-templates.md): [Skill] Templates and drafting guidance for offer letters, employment agreements and handbook policies, helping HR and legal produce consistent employment documents. Written for US employment rules; adapt them for other jurisdictions and have a lawyer review final drafts. No account or API key.
- [Machine Learning Ops](https://hebbmind.com/ja/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills.
- [wshobson/agents](https://hebbmind.com/ja/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands.
- [Lightpanda Browser](https://hebbmind.com/ja/cli/browser.md): [CLI] Headless browser written from scratch in Zig for AI agents and automation, using less memory and running faster than headless Chrome in official benchmarks. fetch turns pages into Markdown, and it can serve CDP or MCP. Telemetry is on by default (an env var disables it); Windows needs WSL.
- [performance-review-writer](https://hebbmind.com/ja/skill/performance-review-writer.md): [Skill] Drafts self-reviews, peer reviews, 360 and upward feedback in STAR structure with concrete examples instead of filler, as Markdown drafts it never submits. With Microsoft WorkIQ it gathers your contributions from Microsoft 365 mail and meetings; otherwise it works from your notes.
- [Marker](https://hebbmind.com/ja/cli/marker.md): [CLI] Converts PDFs, images, PPTX, DOCX, XLSX, EPUB and more into Markdown, JSON or HTML, preserving tables, formulas and layout, with optional LLM help for higher accuracy. Needs Python 3.10+ and PyTorch; large-scale commercial use of the model weights needs a paid license.
- [Agent TARS CLI](https://hebbmind.com/ja/cli/ui-tars-desktop.md): [CLI] ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key.
- [@agent-infra/mcp-server-browser](https://hebbmind.com/ja/mcp/browser.md): [MCP] Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP.
- [Trivy](https://hebbmind.com/ja/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.
- [llmfit](https://hebbmind.com/ja/cli/llmfit.md): [CLI] Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.
- [skills](https://hebbmind.com/ja/cli/skills.md): [CLI] Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.
- [Claude Code Router](https://hebbmind.com/ja/cli/claude-code-router.md): [CLI] Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.
- [Find Skills](https://hebbmind.com/ja/skill/find-skills.md): [Skill] When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo.
- [Vibe-Trading](https://hebbmind.com/ja/mcp/vibe-trading.md): [MCP] Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.
- [Vault](https://hebbmind.com/ja/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.
- [WeKnora CLI](https://hebbmind.com/ja/cli/tencent-cli.md): [CLI] Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.
- [Anthropic Cybersecurity Skills](https://hebbmind.com/ja/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.
- [Payroll Prep](https://hebbmind.com/ja/skill/payroll-prep.md): [Skill] Checks hours before payroll for US small businesses: totals regular time, overtime and PTO from Gusto, QuickBooks Payroll or timesheets, and flags missed punches, overtime anomalies, rate changes and mid-period hires or exits. Prepares only, never runs payroll. Official from Anthropic.
- [customer-research](https://hebbmind.com/ja/skill/customer-research.md): [Skill] Before replying to a customer, verifies answers across the knowledge base, past tickets, CRM and chat history, grades confidence and cites sources; can also find whether an issue was reported before or what a customer was told. From Anthropic's official customer-support plugin.
- [draft-offer](https://hebbmind.com/ja/skill/draft-offer.md): [Skill] Drafts offer letters from role, level, location and comp package, listing base salary, equity, signing bonus and first-year total, plus talking points for the hiring manager's negotiation. The template follows US company conventions; have legal review before sending. Official from Anthropic.
- [people-report](https://hebbmind.com/ja/skill/people-report.md): [Skill] Generates people analytics reports from employee data: headcount snapshots, voluntary and involuntary attrition, diversity metrics, spans of control and flight risk, with findings and recommendations for leadership. Needs an uploaded employee CSV or a connected HRIS. Official from Anthropic.
- [hiring-screener](https://hebbmind.com/ja/skill/hiring-screener.md): [Skill] Screens resumes against a role rubric into a cited shortlist, ignoring irrelevant details like name and age; drafts invite, hold or decline replies, schedules interviews and builds onboarding checklists. Gmail and Calendar are optional, sending only after you confirm. Official from Anthropic.
- [Enterprise Search](https://hebbmind.com/ja/plugin/enterprise-search.md): [Plugin] Anthropic's official knowledge work plugin: one question searches your connected chat, email, cloud docs, wiki and project tools at once and returns a sourced answer; can also produce daily or weekly digests. Preset MCP connectors for Slack, Notion, Atlassian, Asana and more, each needing auth.
- [interview-prep](https://hebbmind.com/ja/skill/interview-prep.md): [Skill] Builds structured interview kits for a role: behavioral and situational questions by competency, follow-up probes, a 1 to 4 scoring rubric and a debrief template, so interviewers assess candidates against the same bar. Part of Anthropic's official human-resources plugin.
- [kb-article](https://hebbmind.com/ja/skill/kb-article.md): [Skill] Turns resolved tickets, common questions or workarounds into publish-ready knowledge base articles, structured as how-to guides, troubleshooting, FAQs or known issues, and optimized for search. From Anthropic's official customer-support plugin.
- [onboarding](https://hebbmind.com/ja/skill/onboarding.md): [Skill] Builds onboarding plans for new hires: a pre-start checklist (accounts, equipment, buddy), day-one and first-week schedules, and 30/60/90-day goals. Works in plain chat; with an HRIS, knowledge base or calendar connected it pulls in team info and books day-one events. Official from Anthropic.
- [Review and Reputation](https://hebbmind.com/ja/skill/review-reputation.md): [Skill] Collects reviews and complaints from Google, Yelp, Facebook and more, groups them by theme with quotes, and drafts replies in the owner's voice that post only after approval; also finds lapsed customers and drafts win-back messages. Official Anthropic small-business plugin.
- [customer-escalation](https://hebbmind.com/ja/skill/customer-escalation.md): [Skill] Packages customer issues that need engineering, product or leadership into an escalation brief with scope, repro steps, business impact, asks and deadline, and decides who to escalate to. Support and CRM connectors add context automatically. Part of Anthropic's official customer-support plugin.
- [Compliance Tracking](https://hebbmind.com/ja/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.
- [comp-analysis](https://hebbmind.com/ja/skill/comp-analysis.md): [Skill] Compensation analysis for HR and managers: market pay percentiles by role, level and location, offer competitiveness checks and equity modeling; upload a pay sheet to find employees outside their band and flight risks. Without a comp data source it uses public web data, so verify. By Anthropic.
- [Customer Health](https://hebbmind.com/ja/skill/customer-health.md): [Skill] Account health checks for customer success managers: pulls CRM, email, calendar and call notes to score relationship, engagement, commercial (renewal and expansion), support and value delivery red/yellow/green, and can prep a QBR agenda. CRM preferred; uploads work. Official from Anthropic.
- [org-planning](https://hebbmind.com/ja/skill/org-planning.md): [Skill] Helps with headcount planning and org design: maps reporting lines and spans of control, sequences upcoming hires, estimates people costs, and flags structural issues like single points of failure or top-heavy management. Works in plain chat. Official from Anthropic.
- [Renewal Radar](https://hebbmind.com/ja/skill/renewal-radar.md): [Skill] Lists renewals coming up in the next few months, flags churn risk and expansion opportunities from signals like usage, key contact changes and open complaints, and checks for missing or wrong renewal opportunities in the CRM. Needs a CRM or uploaded contract exports. Official from Anthropic.
- [draft-response](https://hebbmind.com/ja/skill/draft-response.md): [Skill] Drafts customer-facing replies tuned to the situation and relationship: product questions, outage notices, bad news like delays or won't-fix, declined feature requests and billing disputes, with adjustable tone. From Anthropic's official customer-support plugin; review before sending.

Next page: https://hebbmind.com/ja/tools.md?page=3&profession=algorithm%2Csecurity%2Csupport%2Chr
