# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for QA or DevOps / SRE or ML / AI or Security or Operations: 699 items. > - QA: Functional testing, test automation and quality assurance. > - DevOps / SRE: Deployment, monitoring, cloud resources and reliability. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Operations: Content, campaign, community, user and e-commerce operations, plus performance reviews. - [Qlib](https://hebbmind.com/ja/cli/qlib.md): [CLI] Microsoft's open-source AI quant investment research platform: the qrun command runs dataset building, model training, backtesting and evaluation from a YAML config, with many benchmark models. The official dataset is paused, so prepare market data per the README first. - [Terraform](https://hebbmind.com/ja/cli/terraform.md): [CLI] HashiCorp's infrastructure-as-code tool: manage multi-cloud and SaaS resources with declarative config, previewing changes with plan before running apply. Providers cover all major clouds. Licensed under BSL 1.1. - [Agentic Awesome Skills](https://hebbmind.com/ja/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills. - [Bruno CLI](https://hebbmind.com/ja/cli/bruno-cli.md): [CLI] Official CLI (bru) for the open-source API client Bruno: runs collections stored as plain text in your repo, switches environments, outputs JSON results and imports collections from OpenAPI, making API tests easy to run in CI. - [Terraform](https://hebbmind.com/ja/plugin/terraform.md): [Plugin] HashiCorp's official Terraform plugin: runs the Terraform MCP Server in Docker against the Terraform Registry and HCP Terraform API to look up provider and module docs and help write IaC. Needs Docker; TFE_TOKEN is optional. - [Session Report](https://hebbmind.com/ja/plugin/session-report.md): [Plugin] Official Anthropic plugin that reads local session logs in ~/.claude/projects and generates an interactive HTML usage report covering tokens, cache hit rate, subagents, skills and the most expensive prompts, with optimization tips. Needs Node.js. - [Security Guidance](https://hebbmind.com/ja/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [Playwright](https://hebbmind.com/ja/plugin/playwright.md): [Plugin] Wraps Microsoft's Playwright MCP so agents can drive a real browser to navigate, click, fill forms and take screenshots for end-to-end tests and page checks. In Anthropic's official marketplace; needs Node.js. - [MCP Server Dev](https://hebbmind.com/ja/plugin/mcp-server-dev.md): [Plugin] Designs and builds MCP servers: first picks a deployment model among remote HTTP, MCPB bundles and local stdio, then guides tool design, auth and in-chat interactive components. Maintained by Anthropic. - [Go LSP (gopls)](https://hebbmind.com/ja/plugin/gopls-lsp.md): [Plugin] Connects Claude Code to gopls, Go's official language server, for code intelligence, refactoring and analysis. Install gopls with go install and add Go's bin directory to PATH first. Official Anthropic plugin. - [GitHub](https://hebbmind.com/ja/plugin/github.md): [Plugin] Connects GitHub's official remote MCP server to manage issues and PRs, review code, search repos and call the GitHub API from Claude Code. Requires GITHUB_PERSONAL_ACCESS_TOKEN. - [GitLab](https://hebbmind.com/ja/plugin/gitlab.md): [Plugin] Connects GitLab's official remote MCP server (beta) so Claude can work with repos, merge requests, CI/CD pipelines, issues and wikis on GitLab.com. MCP access must be enabled on the top-level group, with browser OAuth. In Anthropic's official plugin marketplace. - [Skill Creator](https://hebbmind.com/ja/plugin/skill-creator.md): [Plugin] Creates or improves Agent Skills from scratch: writes eval cases to test them, runs benchmarks with variance analysis, and tunes descriptions for more accurate triggering. Maintained by Anthropic. - [Claude Code Setup](https://hebbmind.com/ja/plugin/claude-code-setup.md): [Plugin] Scans your codebase and recommends the best hooks, skills, MCP servers, subagents and slash commands by category. Analysis only, no file changes; a quick way to set up Claude Code for a project. Official Anthropic plugin. - [Asana](https://hebbmind.com/ja/plugin/asana.md): [Plugin] Official Asana plugin in Claude's plugin marketplace: connects Claude Code to the Asana V2 MCP server to create and manage tasks, search projects, change assignees and track progress. Create your own Asana OAuth app first, then run /asana-setup after installing. - [Claude Plugins Official](https://hebbmind.com/ja/plugin/claude-plugins-official.md): [Plugin] Anthropic's official plugin marketplace, built into Claude Code by default, with 300+ official and partner plugins for development, security, design and office collaboration. Browse and install with /plugin. - [Pyright LSP](https://hebbmind.com/ja/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin. - [fd](https://hebbmind.com/ja/cli/fd.md): [CLI] Simple, fast alternative to find with intuitive syntax and regex and glob matching, skipping hidden and .gitignored paths by default. Can run commands on results in parallel; handy for agents locating files quickly. - [aria2](https://hebbmind.com/ja/cli/aria2.md): [CLI] Lightweight multi-protocol command-line downloader that fetches in parallel segments from multiple sources over HTTP(S), FTP, SFTP, BitTorrent and Metalink. Resumes downloads, reads URLs in bulk from text files and offers a JSON-RPC interface for scripts or agents. - [curl](https://hebbmind.com/ja/cli/curl.md): [CLI] Command-line tool for transferring data by URL over 20+ protocols including HTTP(S), FTP, SFTP, WebSocket and MQTT; a staple for agents calling APIs and downloading files. Preinstalled on macOS and most Linux distributions. - [wshobson/agents](https://hebbmind.com/ja/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [TDD Workflows](https://hebbmind.com/ja/plugin/tdd-workflows.md): [Plugin] Test-driven development plugin: /tdd-workflows:tdd-cycle and related commands move through red-green-refactor phases with a checkpoint for approval at each, plus TDD orchestrator and code reviewer subagents. Part of the wshobson/agents marketplace. - [Machine Learning Ops](https://hebbmind.com/ja/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills. - [LLM Application Dev](https://hebbmind.com/ja/plugin/llm-application-dev.md): [Plugin] Plugin for building LLM apps: LangGraph agents with memory and tool use, hybrid-search RAG, vector index tuning, prompt optimization and LLM evaluation. Includes 3 subagents and 8 skills. - [Business Analytics](https://hebbmind.com/ja/plugin/business-analytics.md): [Plugin] Business analytics plugin from the wshobson/agents marketplace: KPI dashboard design and data storytelling skills plus a business analyst subagent to choose metrics, plan dashboard layouts and turn data into reports executives or investors understand. Methods and templates only; no data connections. - [Quantitative Trading](https://hebbmind.com/ja/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice. - [Security Scanning](https://hebbmind.com/ja/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [Accessibility Compliance](https://hebbmind.com/ja/plugin/accessibility-compliance.md): [Plugin] Accessibility review plugin with an audit command, a UI validation subagent, and WCAG 2.2 and screen reader testing skills. Before design reviews or launch, the agent checks contrast, keyboard use and screen reader support and suggests fixes. For Claude Code; automated checks need Node.js. - [GDPR Data Handling](https://hebbmind.com/ja/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions. - [Kubernetes Operations](https://hebbmind.com/ja/plugin/kubernetes-operations.md): [Plugin] Kubernetes operations plugin from the wshobson/agents marketplace: a kubernetes-architect subagent plus four skills for manifest generation, Helm chart scaffolding, GitOps workflows and security policies. Community-maintained. - [Agent Teams](https://hebbmind.com/ja/plugin/agent-teams.md): [Plugin] Orchestrates multi-agent teams using Claude Code's experimental Agent Teams feature: parallel multi-angle code review, competing-hypothesis debugging and feature work split by file ownership. Enable CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS first. - [wshobson/agents](https://hebbmind.com/ja/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands. - [fastlane](https://hebbmind.com/ja/cli/fastlane.md): [CLI] Release automation for iOS and Android: lanes orchestrate builds, code signing management, screenshot generation and uploads to the App Store and Google Play, and agents can call a project's existing lanes directly. - [Lightpanda Browser](https://hebbmind.com/ja/cli/browser.md): [CLI] Headless browser written from scratch in Zig for AI agents and automation, using less memory and running faster than headless Chrome in official benchmarks. fetch turns pages into Markdown, and it can serve CDP or MCP. Telemetry is on by default (an env var disables it); Windows needs WSL. - [Postiz](https://hebbmind.com/ja/mcp/postiz-app.md): [MCP] MCP built into the open-source social media scheduler Postiz: agents draft, schedule and publish posts and view analytics across 30+ platforms including X, LinkedIn, Instagram and YouTube. The cloud version uses browser OAuth, no API key (paid after a 7-day trial); self-hosting is free. - [Meeting Minutes](https://hebbmind.com/ja/skill/meeting-minutes.md): [Skill] Meeting minutes skill from GitHub's awesome-copilot: turns notes, transcripts or speech-to-text output into structured minutes with attendees, agenda, decisions and action items with owners and due dates, asking when details are missing. Best for internal meetings under an hour. - [Awesome Copilot Skills](https://hebbmind.com/ja/skill/github-skills.md): [Skill] Community skill collection in GitHub's official repo: 400+ skills following the Agent Skills spec, covering codebase onboarding, testing, cloud and DevOps, agent security and more. Install individual skills with gh skills install. - [Nushell](https://hebbmind.com/ja/cli/nushell.md): [CLI] Cross-platform shell built around structured data: pipelines pass tables instead of plain text, and you can open and query JSON, CSV, TOML and more directly. Default builds include nu --mcp, which serves it to agents as an MCP server. - [croc](https://hebbmind.com/ja/cli/croc.md): [CLI] Send files and folders between any two computers with one command: end-to-end encryption (PAKE), direct peer-to-peer with relay fallback, resumable transfers and proxy support, with no server setup or port forwarding. - [Marker](https://hebbmind.com/ja/cli/marker.md): [CLI] Converts PDFs, images, PPTX, DOCX, XLSX, EPUB and more into Markdown, JSON or HTML, preserving tables, formulas and layout, with optional LLM help for higher accuracy. Needs Python 3.10+ and PyTorch; large-scale commercial use of the model weights needs a paid license. - [PostHog MCP](https://hebbmind.com/ja/mcp/posthog-mcp.md): [MCP] PostHog's official hosted MCP: lets agents query product analytics with HogQL, manage feature flags and A/B experiments, and investigate errors and session replays. Sign in to PostHog to authorize; tool calls are free, though a few LLM-powered tools count toward AI usage. - [zoxide](https://hebbmind.com/ja/cli/zoxide.md): [CLI] A smarter cd that remembers your directories, ranking them by frequency and recency so you can jump with a fragment of the name. Add zoxide init to your shell config after installing. - [ShellCheck](https://hebbmind.com/ja/cli/shellcheck.md): [CLI] Static analysis for shell scripts: flags syntax errors and common bash/sh pitfalls such as quoting and variable expansion, with suggested fixes. Good for checking agent-generated scripts and easy to add to CI. - [@agent-infra/mcp-server-browser](https://hebbmind.com/ja/mcp/browser.md): [MCP] Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP. - [Agent TARS CLI](https://hebbmind.com/ja/cli/ui-tars-desktop.md): [CLI] ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key. - [Trivy](https://hebbmind.com/ja/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security. - [Find Skills](https://hebbmind.com/ja/skill/find-skills.md): [Skill] When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo. - [skills](https://hebbmind.com/ja/cli/skills.md): [CLI] Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs. - [llmfit](https://hebbmind.com/ja/cli/llmfit.md): [CLI] Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output. - [Docker Compose](https://hebbmind.com/ja/cli/compose.md): [CLI] Define multi-container apps in compose.yaml and bring up services, databases, caches and the rest with one docker compose up, handy for agents setting up local dev and test dependencies. Maintained by Docker; included with Docker Desktop on macOS. Next page: https://hebbmind.com/ja/tools.md?page=4&profession=qa%2Cdevops%2Calgorithm%2Csecurity%2Coperations