# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Data engineering or Security or Design: 515 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Design: Interface, interaction, visual and brand design.

- [Tesseract OCR](https://hebbmind.com/ja/cli/tesseract.md): [CLI] Classic open-source OCR engine and CLI that reads text from images and outputs plain text, hOCR, searchable PDF or TSV. Supports 100+ languages; install the language data for each language you need.
- [LlamaFactory](https://hebbmind.com/ja/cli/llamafactory.md): [CLI] All-in-one LLM fine-tuning framework: llamafactory-cli handles pretraining, SFT, PPO/DPO alignment and LoRA/QLoRA training, plus chat inference, weight merging and export, and OpenAI-style API serving for 100+ open models. Has a Web UI; training usually needs a GPU.
- [HyperFrames](https://hebbmind.com/ja/cli/hyperframes.md): [CLI] Write videos in HTML, CSS and frame-seekable animations, preview them from the CLI and render deterministic MP4s. Comes with agent skills for product launch videos, captions and talking-head re-edits. Maintained by HeyGen; needs Node.js 22+ and FFmpeg.
- [HyperFrames Skills](https://hebbmind.com/ja/skill/heygen-com-skills.md): [Skill] HeyGen's official HyperFrames skill set: lets agents write deterministic MP4 videos in HTML, CSS and animation, with workflows for promo videos, explainers, captions and beat-synced music. Needs Node.js 22+ and FFmpeg.
- [Docling](https://hebbmind.com/ja/cli/docling.md): [CLI] Parses PDF, DOCX, PPTX, XLSX, HTML, images and audio, recovering layout, reading order, tables and formulas, and exports Markdown, HTML or lossless JSON. Started by IBM Research, now hosted by the LF AI & Data Foundation; runs fully locally.
- [FFmpeg](https://hebbmind.com/ja/cli/ffmpeg.md): [CLI] Command-line toolkit for transcoding, cutting, joining, frame extraction and streaming of audio and video, including ffmpeg, ffprobe and ffplay. A core dependency for agents handling media. The GitHub repo is the official mirror.
- [Diagram Design](https://hebbmind.com/ja/skill/diagram-design.md): [Skill] Generates self-contained HTML+SVG diagrams in an editorial style: architecture, flowcharts, sequence, swimlane, Gantt and dozens more types. Can match brand colors from a website and redraw imported Mermaid, draw.io and Excalidraw sources.
- [Penpot MCP Server](https://hebbmind.com/ja/mcp/penpot-mcp.md): [MCP] Official MCP for the open-source design tool Penpot: through the Penpot plugin API, agents can query, modify and generate designs, supporting design-to-code and code-to-design. Run npx -y @penpot/mcp@latest first and load the MCP plugin in Penpot to connect.
- [rclone](https://hebbmind.com/ja/cli/rclone.md): [CLI] 'rsync for cloud storage': sync and copy files across dozens of providers such as S3, Google Drive, OneDrive and Alibaba Cloud OSS, with encryption and mounting. Set up remotes with rclone config before use.
- [CLI-Anything](https://hebbmind.com/ja/cli/cli-anything.md): [CLI] From HKU's Data Intelligence Lab: plugins or skills for Claude Code, Codex and other agents generate agent-callable CLIs for apps like GIMP, Blender and LibreOffice, and the cli-hub package manager finds and installs ready-made community CLIs. Needs Python 3.10+.
- [Conversion Rate Optimization (CRO)](https://hebbmind.com/ja/skill/cro.md): [Skill] Conversion rate optimization skill from the marketingskills collection: give it a homepage, landing page, pricing page or form and it diagnoses value proposition, headlines, CTAs, trust signals and friction, returning quick wins, high-impact changes, A/B test ideas and alternative copy.
- [Freqtrade](https://hebbmind.com/ja/cli/freqtrade.md): [CLI] Open-source crypto trading framework: download market data, backtest and optimize strategies, and paper trade from the CLI while agents iterate on strategies. Docker recommended; strategies need Python and live trading needs exchange API keys. Backtests don't guarantee returns.
- [goose](https://hebbmind.com/ja/cli/goose.md): [CLI] General-purpose AI agent that runs on your machine, with a desktop app, CLI and API. Written in Rust, works with 15+ model providers and connects to 70+ extensions via MCP. Originally from Block, now part of the Linux Foundation's AAIF.
- [whisper.cpp](https://hebbmind.com/ja/cli/whisper-cpp.md): [CLI] C/C++ port of OpenAI's Whisper speech recognition model that transcribes audio offline and outputs subtitles. Runs on CPU, with Apple Silicon and various GPU acceleration. Download a ggml-format model first.
- [Skills For Designers and Engineers](https://hebbmind.com/ja/skill/emilkowalski-skills.md): [Skill] Design engineering skills by Emil Kowalski, author of Sonner and Vaul: choose animation easing and durations, review and improve motion, apply Apple design principles, make web apps feel native on phones, and help pick UI libraries and prototype multiple versions.
- [Ruff](https://hebbmind.com/ja/cli/ruff.md): [CLI] Astral's extremely fast Python linter and formatter written in Rust, replacing Flake8, isort and Black, with 900+ built-in rules and auto-fix.
- [tmux](https://hebbmind.com/ja/cli/tmux.md): [CLI] Terminal multiplexer: run multiple sessions and panes in one terminal, with processes surviving disconnects. Agents use it to host long-running tasks and drive interactive programs, and many parallel multi-agent session tools build on it.
- [Qlib](https://hebbmind.com/ja/cli/qlib.md): [CLI] Microsoft's open-source AI quant investment research platform: the qrun command runs dataset building, model training, backtesting and evaluation from a YAML config, with many benchmark models. The official dataset is paused, so prepare market data per the README first.
- [Agentic Awesome Skills](https://hebbmind.com/ja/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills.
- [Playground](https://hebbmind.com/ja/plugin/playground.md): [Plugin] Has the agent build single-file HTML interactive playgrounds: visual controls on one side, live preview on the other, and a prompt to copy back into Claude. Templates for design tuning, data exploration, concept maps, doc annotation, code review and architecture diagrams. By Anthropic.
- [Security Guidance](https://hebbmind.com/ja/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.
- [MCP Server Dev](https://hebbmind.com/ja/plugin/mcp-server-dev.md): [Plugin] Designs and builds MCP servers: first picks a deployment model among remote HTTP, MCPB bundles and local stdio, then guides tool design, auth and in-chat interactive components. Maintained by Anthropic.
- [Session Report](https://hebbmind.com/ja/plugin/session-report.md): [Plugin] Official Anthropic plugin that reads local session logs in ~/.claude/projects and generates an interactive HTML usage report covering tokens, cache hit rate, subagents, skills and the most expensive prompts, with optimization tips. Needs Node.js.
- [Pyright LSP](https://hebbmind.com/ja/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin.
- [Skill Creator](https://hebbmind.com/ja/plugin/skill-creator.md): [Plugin] Creates or improves Agent Skills from scratch: writes eval cases to test them, runs benchmarks with variance analysis, and tunes descriptions for more accurate triggering. Maintained by Anthropic.
- [aria2](https://hebbmind.com/ja/cli/aria2.md): [CLI] Lightweight multi-protocol command-line downloader that fetches in parallel segments from multiple sources over HTTP(S), FTP, SFTP, BitTorrent and Metalink. Resumes downloads, reads URLs in bulk from text files and offers a JSON-RPC interface for scripts or agents.
- [daisyUI Colors](https://hebbmind.com/ja/skill/daisyui-colors.md): [Skill] Color rules for daisyUI 5: explains semantic names such as primary, base-100 and error with their -content foregrounds, says to prefer them over fixed Tailwind colors and never add dark: to them, and shows how to enable, create and override themes. Part of the official daisyUI skill.
- [Security Scanning](https://hebbmind.com/ja/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees.
- [wshobson/agents](https://hebbmind.com/ja/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands.
- [Quantitative Trading](https://hebbmind.com/ja/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice.
- [UI Design](https://hebbmind.com/ja/plugin/ui-design.md): [Plugin] UI/UX design plugin from the wshobson/agents marketplace with 3 subagents, 9 skills and commands for design review, component creation and accessibility audits, covering design tokens, WCAG 2.2, responsive layout, iOS HIG and Material Design 3 for in-code UI design and review.
- [wshobson/agents](https://hebbmind.com/ja/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content.
- [GDPR Data Handling](https://hebbmind.com/ja/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions.
- [Accessibility Compliance](https://hebbmind.com/ja/plugin/accessibility-compliance.md): [Plugin] Accessibility review plugin with an audit command, a UI validation subagent, and WCAG 2.2 and screen reader testing skills. Before design reviews or launch, the agent checks contrast, keyboard use and screen reader support and suggests fixes. For Claude Code; automated checks need Node.js.
- [Data Engineering](https://hebbmind.com/ja/plugin/data-engineering.md): [Plugin] Data engineering plugin from the wshobson/agents marketplace: a data engineer subagent, a data pipeline command, and skills for Airflow DAGs, dbt transformations, Spark tuning and data quality, to help build ETL and data warehouses.
- [Machine Learning Ops](https://hebbmind.com/ja/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills.
- [LLM Application Dev](https://hebbmind.com/ja/plugin/llm-application-dev.md): [Plugin] Plugin for building LLM apps: LangGraph agents with memory and tool use, hybrid-search RAG, vector index tuning, prompt optimization and LLM evaluation. Includes 3 subagents and 8 skills.
- [Nushell](https://hebbmind.com/ja/cli/nushell.md): [CLI] Cross-platform shell built around structured data: pipelines pass tables instead of plain text, and you can open and query JSON, CSV, TOML and more directly. Default builds include nu --mcp, which serves it to agents as an MCP server.
- [Marker](https://hebbmind.com/ja/cli/marker.md): [CLI] Converts PDFs, images, PPTX, DOCX, XLSX, EPUB and more into Markdown, JSON or HTML, preserving tables, formulas and layout, with optional LLM help for higher accuracy. Needs Python 3.10+ and PyTorch; large-scale commercial use of the model weights needs a paid license.
- [Agent TARS CLI](https://hebbmind.com/ja/cli/ui-tars-desktop.md): [CLI] ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key.
- [@agent-infra/mcp-server-browser](https://hebbmind.com/ja/mcp/browser.md): [MCP] Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP.
- [Trivy](https://hebbmind.com/ja/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.
- [llmfit](https://hebbmind.com/ja/cli/llmfit.md): [CLI] Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.
- [Claude Code Router](https://hebbmind.com/ja/cli/claude-code-router.md): [CLI] Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.
- [Lightpanda Browser](https://hebbmind.com/ja/cli/browser.md): [CLI] Headless browser written from scratch in Zig for AI agents and automation, using less memory and running faster than headless Chrome in official benchmarks. fetch turns pages into Markdown, and it can serve CDP or MCP. Telemetry is on by default (an env var disables it); Windows needs WSL.
- [Find Skills](https://hebbmind.com/ja/skill/find-skills.md): [Skill] When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo.
- [Vibe-Trading](https://hebbmind.com/ja/mcp/vibe-trading.md): [MCP] Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.
- [skills](https://hebbmind.com/ja/cli/skills.md): [CLI] Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.
- [Vault](https://hebbmind.com/ja/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.
- [jq](https://hebbmind.com/ja/cli/jq.md): [CLI] Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.

Next page: https://hebbmind.com/ja/tools.md?page=3&profession=algorithm%2Cdata-engineering%2Csecurity%2Cdesign
