# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Data analysis or Security or Writing / Content: 580 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Writing / Content: Writing and editing articles, books, technical docs and social content.

- [@agent-infra/mcp-server-browser](https://hebbmind.com/ja/mcp/browser.md): [MCP] Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP.
- [Trivy](https://hebbmind.com/ja/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.
- [llmfit](https://hebbmind.com/ja/cli/llmfit.md): [CLI] Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.
- [Claude Code Router](https://hebbmind.com/ja/cli/claude-code-router.md): [CLI] Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.
- [skills](https://hebbmind.com/ja/cli/skills.md): [CLI] Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.
- [Find Skills](https://hebbmind.com/ja/skill/find-skills.md): [Skill] When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo.
- [Vibe-Trading](https://hebbmind.com/ja/mcp/vibe-trading.md): [MCP] Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.
- [Nuwa Skill](https://hebbmind.com/ja/skill/nuwa-skill.md): [Skill] Give it a person's name or a vague need and it researches and distills their mental models, decision style and voice into a callable persona skill (e.g. Munger, Feynman, Jobs) to aid analysis and decisions. Works with Claude Code, Codex and other agents.
- [Vault](https://hebbmind.com/ja/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.
- [WeKnora CLI](https://hebbmind.com/ja/cli/tencent-cli.md): [CLI] Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.
- [Anthropic Cybersecurity Skills](https://hebbmind.com/ja/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.
- [SQL Queries](https://hebbmind.com/ja/skill/sql-queries.md): [Skill] Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.
- [Email Sequence](https://hebbmind.com/ja/skill/email-sequence.md): [Skill] Designs multi-email marketing sequences for onboarding, lead nurturing, win-back and launches, with full copy for each email, timing, branches and exit conditions, benchmarks and A/B test ideas. No email tool required. Part of Anthropic's official marketing plugin.
- [people-report](https://hebbmind.com/ja/skill/people-report.md): [Skill] Generates people analytics reports from employee data: headcount snapshots, voluntary and involuntary attrition, diversity metrics, spans of control and flight risk, with findings and recommendations for leadership. Needs an uploaded employee CSV or a connected HRIS. Official from Anthropic.
- [Marketing](https://hebbmind.com/ja/plugin/marketing.md): [Plugin] Marketing plugin: drafts blog, social, email and landing page content, plans campaigns, reviews copy against your brand voice, and produces competitive briefs, SEO audits and channel performance reports. Official from Anthropic.
- [Brand Voice](https://hebbmind.com/ja/plugin/brand-voice.md): [Plugin] Distills your brand voice from existing material in Notion, Confluence, Google Drive, Gong and more into actionable guidelines, then writes and checks AI copy against them. Built by Tribe AI and included in Anthropic's official plugin collection; connect at least one source or provide documents.
- [Performance Report](https://hebbmind.com/ja/skill/performance-report.md): [Skill] Turns campaign or channel data into weekly, monthly or quarterly marketing reports: executive summary, key metrics and period-over-period trends, wins and misses, and next-period priorities. Connect analytics tools or just paste tables or key numbers. From Anthropic's knowledge-work-plugins.
- [kb-article](https://hebbmind.com/ja/skill/kb-article.md): [Skill] Turns resolved tickets, common questions or workarounds into publish-ready knowledge base articles, structured as how-to guides, troubleshooting, FAQs or known issues, and optimized for search. From Anthropic's official customer-support plugin.
- [Bio Research](https://hebbmind.com/ja/plugin/bio-research.md): [Plugin] For preclinical life sciences research: bundles MCP connectors for PubMed, bioRxiv, ChEMBL, Open Targets, ClinicalTrials and more, plus analysis skills for single-cell RNA QC, scvi-tools and nf-core pipelines. Official from Anthropic; some data sources need accounts.
- [Data](https://hebbmind.com/ja/plugin/data.md): [Plugin] Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic.
- [Compliance Tracking](https://hebbmind.com/ja/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.
- [Writing Guidelines](https://hebbmind.com/ja/skill/writing-guidelines.md): [Skill] Vercel's official skill that pulls the 80+ rules of Vercel's writing handbook online to review docs and copy for voice, structure, content types, code examples and formatting, listing issues as file:line.
- [Cognee MCP](https://hebbmind.com/ja/mcp/cognee-mcp.md): [MCP] Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud.
- [Nuclei](https://hebbmind.com/ja/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.
- [Graphiti MCP Server](https://hebbmind.com/ja/mcp/getzep-mcp-server.md): [MCP] Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.
- [OpenCLI](https://hebbmind.com/ja/cli/opencli.md): [CLI] Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension.
- [Gitleaks](https://hebbmind.com/ja/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.
- [Marketing Team Skills](https://hebbmind.com/ja/plugin/marketing-skill.md): [Plugin] Marketing team plugin with 40+ skills for copy and content, SEO and AI search optimization, conversion optimization, email and social, paid ads, growth strategy and competitor analysis, plus Python analysis scripts. Most need no account; a few, like YouTube transcripts, need API keys.
- [TruffleHog](https://hebbmind.com/ja/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.
- [Grammar Check](https://hebbmind.com/ja/skill/grammar-check.md): [Skill] Proofreads drafts: once you explain the text's purpose, it finds grammar, logic and flow issues and gives located suggestions with reasons, without rewriting the whole piece or changing your voice. Rules and examples target English. Part of PM Skills; no extra account needed.
- [baoyu-translate](https://hebbmind.com/ja/skill/baoyu-translate.md): [Skill] Translation skill by Baoyu with quick, normal and refined modes, custom glossaries, and target audience and style settings. Translates local files or URLs; suited to long-form Chinese-English translation and localization. Needs bun or npx.
- [baoyu-slide-deck](https://hebbmind.com/ja/skill/baoyu-slide-deck.md): [Skill] Turns an article or Markdown into a set of slide images: drafts an outline and style first, then generates each page, and can merge them into PPTX or PDF. Comes with over ten visual presets. Needs a working image generation backend.
- [baoyu-skills](https://hebbmind.com/ja/skill/baoyu-skills.md): [Skill] Baoyu's (JimLiu) content creation skills: infographics, covers, article illustrations, slide decks, comics and translation, plus Xiaohongshu cards and publishing to WeChat, Weibo and X. Needs Node.js, bun and an image model API key; some skills rely on Chrome automation or unofficial APIs.
- [baoyu-skills](https://hebbmind.com/ja/plugin/baoyu-skills.md): [Plugin] Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key.
- [promptfoo](https://hebbmind.com/ja/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.
- [calibre](https://hebbmind.com/ja/cli/calibre.md): [CLI] Open-source e-book manager whose command-line tools (ebook-convert, ebook-meta, calibredb) batch-convert between EPUB, MOBI, AZW3, PDF, DOCX and more and manage library metadata. The install command is Linux-only; on macOS and Windows use the installer.
- [OpenSEO](https://hebbmind.com/ja/mcp/open-seo.md): [MCP] Open-source SEO tool (a Semrush/Ahrefs alternative) with built-in MCP for keyword research, rank tracking, competitor and backlink analysis, site audits and AI search visibility checks. The hosted version has a free trial; self-hosting needs a pay-as-you-go DataForSEO key.
- [radare2](https://hebbmind.com/ja/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript.
- [SOPS](https://hebbmind.com/ja/cli/sops.md): [CLI] Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.
- [anydoc](https://hebbmind.com/ja/cli/anydoc.md): [CLI] From Firecrawl: converts Word, PowerPoint, Excel, PDF, EPUB, RTF and more into clean Markdown locally in milliseconds, keeping headings, tables, footnotes and formulas so agents can read attachments. Needs Node.js; optional Firecrawl cloud OCR for scans uploads the whole file.
- [mdBook](https://hebbmind.com/ja/cli/mdbook.md): [CLI] Compiles Markdown chapters into an online book with a table of contents, full-text search and themes, good for manuals, lecture notes and course material; agents can edit chapter files and rebuild to preview. Maintained by the Rust team; install a prebuilt binary or via cargo.
- [Screenpipe MCP Server](https://hebbmind.com/ja/mcp/screenpipe-mcp.md): [MCP] Continuously records your screen and audio locally, extracting on-screen text and transcribing speech, so agents can search pages, docs and meetings you saw and summarize your day. Data stays local. Needs screenpipe running: source is free for personal use, desktop app is a subscription.
- [BigQuery Basics](https://hebbmind.com/ja/skill/bigquery-basics.md): [Skill] Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project.
- [Google Ads API Account Performance Diagnostics](https://hebbmind.com/ja/skill/google-ads-api-account-diagnostics.md): [Skill] Google's official skill that queries account data through the Google Ads MCP server to diagnose conversion drops, falling leads and impression share lost to bids, budgets or ad rank. Needs a Google Ads account, API credentials (developer token and OAuth) and Python 3.12.
- [Google Agent Skills](https://hebbmind.com/ja/skill/google-google-skills.md): [Skill] Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.
- [Google Skills](https://hebbmind.com/ja/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.
- [VHS](https://hebbmind.com/ja/cli/vhs.md): [CLI] Scripts terminal sessions in .tape files and records them to GIF, MP4 or WebM, great for CLI demos and docs; text snapshot output also enables terminal integration tests. By Charm; requires ttyd and ffmpeg.
- [FunASR MCP Server](https://hebbmind.com/ja/mcp/modelscope-mcp-server.md): [MCP] Official MCP from the FunASR project: transcribes audio files locally with the SenseVoice model, supporting Mandarin, Cantonese, English, Japanese and Korean, with optional segment timestamps. Local inference needs no API key and audio stays on your machine. Docker image available.
- [FunASR](https://hebbmind.com/ja/cli/funasr.md): [CLI] Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch.
- [notebooklm-py](https://hebbmind.com/ja/cli/notebooklm-py.md): [CLI] Unofficial Python library and CLI for driving Google NotebookLM (now Gemini Notebook): bulk-import sources, ask cited questions, and generate and download podcasts, videos, slides, quizzes and flashcards. Ships an agent skill. Relies on undocumented APIs and needs a Google sign-in.

Next page: https://hebbmind.com/ja/tools.md?page=4&profession=algorithm%2Cdata%2Csecurity%2Cwriting
