# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Data engineering or Data analysis or Security or Design: 611 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Design: Interface, interaction, visual and brand design.

- [lark-base (Lark Base)](https://hebbmind.com/ja/skill/lark-base.md): [Skill] Official Lark (Feishu) skill for Lark Base: create tables, add fields, add and edit records, build views, forms and dashboards, or apply ready-made templates, good for sign-ups, asset registers and trackers. Needs lark-cli on a machine with Node.js, plus app setup and authorization.
- [lark-whiteboard](https://hebbmind.com/ja/skill/lark-whiteboard.md): [Skill] Official Lark (Feishu) skill to view, export and edit whiteboards in Lark docs: write Mermaid, PlantUML or SVG into a board for flowcharts or org charts, or export boards as images or SVG. New boards are created with lark-doc. Needs lark-cli, Node.js and auth; install with lark-shared.
- [lark-sheets (Lark Sheets)](https://hebbmind.com/ja/skill/lark-sheets.md): [Skill] Official Lark (Feishu) skill to create and edit Lark Sheets: formulas, charts and pivot tables, conditional formatting and filters, plus import and export of local Excel/CSV, for summaries, budgets and reports. Needs lark-cli on a machine with Node.js, plus app setup and authorization.
- [ImageMagick](https://hebbmind.com/ja/cli/imagemagick.md): [CLI] Veteran image processing CLI suite that converts, resizes, crops, composites and batch-processes JPEG, PNG, GIF, TIFF, PDF and many more formats, handy for agents handling images in scripts.
- [GSAP AI Skills](https://hebbmind.com/ja/skill/gsap-skills.md): [Skill] GSAP's official animation skills: teach agents to use the core API, timelines, ScrollTrigger and plugins correctly, including React, Vue and Svelte integration and animation performance. Maintained by GreenSock; all plugins are free.
- [Semgrep](https://hebbmind.com/ja/cli/semgrep.md): [CLI] Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.
- [Semgrep MCP](https://hebbmind.com/ja/mcp/semgrep-mcp.md): [MCP] Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN.
- [DataX](https://hebbmind.com/ja/cli/datax.md): [CLI] Alibaba's open-source offline data sync tool: JSON job configs batch-sync between heterogeneous sources like MySQL, Oracle, PostgreSQL, Hive, HDFS and MaxCompute, run with python datax.py. Needs JDK 1.8+ and Python; download and unpack the official toolkit.
- [Framelink MCP for Figma](https://hebbmind.com/ja/mcp/figma-context.md): [MCP] Simplifies Figma designs into layout and style data for coding agents, so UIs built from the design are more accurate than working from screenshots. Requires a Figma personal access token.
- [ms-swift](https://hebbmind.com/ja/cli/ms-swift.md): [CLI] ModelScope's official training framework for LLMs and multimodal models: the swift command covers pretraining, fine-tuning, RL, inference, evaluation, quantization and deployment for 600+ text and 400+ multimodal models, with Megatron parallelism and a web UI. Usually needs a GPU.
- [DVC](https://hebbmind.com/ja/cli/dvc.md): [CLI] Version datasets and models the way Git versions code: data lives in remote storage like S3 or GCS while versions are tracked in your Git repo. Also offers reproducible pipelines and local experiment tracking, rerunning only the steps affected by a change.
- [monolith](https://hebbmind.com/ja/cli/monolith.md): [CLI] Bundles a whole web page with its CSS, images, fonts and scripts into a single HTML file that opens offline exactly as it looked, good for archiving pages or handing them to an agent for offline analysis. It does not run JavaScript, so pre-render dynamic pages with a headless browser.
- [F5-TTS](https://hebbmind.com/ja/cli/f5-tts.md): [CLI] Open-source zero-shot TTS via f5-tts_infer-cli: from a few seconds of reference audio it reads Chinese or English text in the same voice, handy for lessons and videos. Needs Python, PyTorch and FFmpeg, ideally a GPU. Pretrained models are non-commercial; get consent before cloning a voice.
- [Prompt Master](https://hebbmind.com/ja/skill/prompt-master.md): [Skill] Writes precise prompts for a specific AI tool: identifies the target tool, extracts your intent, asks at most three questions if details are missing, then outputs a lean, paste-ready prompt. Covers dozens of tools including ChatGPT, Claude Code, Cursor, Midjourney and Sora.
- [Skill Seekers](https://hebbmind.com/ja/cli/skill-seekers.md): [CLI] Turns 18 kinds of sources, including doc sites, GitHub repos, PDFs and videos, into skill packages for Claude and other platforms, or exports RAG chunks and vector store data. Optional MCP server, and it can call a local agent like Claude Code to enrich content. Needs Python 3.10+.
- [Prowler](https://hebbmind.com/ja/cli/prowler.md): [CLI] Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.
- [Apify MCP Server](https://hebbmind.com/ja/mcp/apify-mcp-server.md): [MCP] Lets agents call thousands of ready-made scrapers and automation Actors from Apify Store to pull data from social media, search engines, maps, e-commerce sites and more. Maintained by Apify; needs an Apify account (OAuth) or API token.
- [AI Research Skills](https://hebbmind.com/ja/skill/ai-research-skills.md): [Skill] Nearly 100 skills spanning the AI research workflow: ideation and literature review, fine-tuning and post-training, distributed training, inference serving, evaluation, interpretability and paper writing, tied together by an autoresearch orchestration skill.
- [AI Research Skills](https://hebbmind.com/ja/plugin/ai-research-skills.md): [Plugin] Plugin marketplace for AI research with nearly 100 skills in 23 categories, from ideation, fine-tuning and post-training to distributed training, inference serving, evaluation and paper writing, coordinated end to end by the autoresearch skill.
- [dbt](https://hebbmind.com/ja/cli/dbt.md): [CLI] Command-line framework for warehouse modeling and ELT transformations: write models in SQL and let dbt handle dependencies, data tests and documentation. v2 is rewritten in Rust as a single binary. Maintained by dbt Labs; needs a data warehouse connection.
- [Nmap](https://hebbmind.com/ja/cli/nmap.md): [CLI] Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test.
- [Landing Page Design](https://hebbmind.com/ja/skill/landing-page-design.md): [Skill] Builds landing pages in two halves: intake questions, page structure, layout choice, conversion copy and SEO first, then a strict visual system for fonts, Tailwind type scale, spacing, radius, backgrounds, icons and motion. The rules are opinionated, e.g. no Inter font and no background gradients.
- [minimax-xlsx](https://hebbmind.com/ja/skill/minimax-xlsx.md): [Skill] MiniMax's official Excel skill: read, analyze, create, edit and validate xlsx files and fix broken formulas. Edits existing files at the XML level to keep formatting, formulas and pivot tables; writes results as formulas with finance-style color coding. Needs Python (pandas); LibreOffice optional.
- [Garden Skills](https://hebbmind.com/ja/skill/garden-skills.md): [Skill] ConardLi's skill collection: turn articles or scripts into web presentations you can screen-record as videos (23 themes, optional voiceover), lay out material as shareable long-form web pages, search local knowledge base folders, web design, and GPT-Image-2 image generation with 79 templates.
- [pgcli](https://hebbmind.com/ja/cli/pgcli.md): [CLI] PostgreSQL command-line client with smart autocompletion and syntax highlighting. Compatible with psql environment variables, and -c runs a statement and exits, so agents can query databases non-interactively.
- [HexStrike AI](https://hebbmind.com/ja/mcp/hexstrike-ai.md): [MCP] Wraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only.
- [IDA Pro MCP](https://hebbmind.com/ja/mcp/ida-pro-mcp.md): [MCP] Lets agents decompile, disassemble and query cross-references in IDA Pro, and rename variables, change types and add comments, including headless idalib mode. Requires IDA Pro 8.3+ (IDA Free is not supported); the author now recommends Hex-Rays' official IDA MCP instead.
- [Grype](https://hebbmind.com/ja/cli/grype.md): [CLI] Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.
- [LLM](https://hebbmind.com/ja/cli/llm.md): [CLI] Simon Willison's LLM CLI and Python library: call OpenAI, Claude, Gemini and local models from the terminal, with conversations logged to SQLite automatically, plus embeddings, structured extraction, tool calling and a plugin system.
- [Kami](https://hebbmind.com/ja/skill/kami.md): [Skill] Document layout skill by tw93 with eight templates (resume, one-pager, long doc, formal letter, portfolio, slides, research report and more) that render polished PDF, PNG or editable PPT and check layout and content gaps. Supports English, Chinese, Japanese and Korean. Needs Python (WeasyPrint).
- [Trae Agent](https://hebbmind.com/ja/cli/trae-agent.md): [CLI] ByteDance's open-source, general software engineering agent: trae-cli edits files and runs commands from natural language, supports multiple model providers and MCP, and records full execution trajectories. Transparent design suits agent research and customization. Needs your own model API key.
- [Arize Phoenix MCP Server](https://hebbmind.com/ja/mcp/phoenix-mcp.md): [MCP] Connects to the Arize Phoenix observability platform so agents can query LLM traces and sessions, manage prompts, browse datasets and read experiment evaluation results. Maintained by Arize; needs a self-hosted or cloud Phoenix instance.
- [mycli](https://hebbmind.com/ja/cli/mycli.md): [CLI] MySQL terminal client with smart autocompletion and syntax highlighting, also compatible with MariaDB and TiDB. Supports --execute and batch mode with CSV or table output, so agents can run SQL directly.
- [libvips](https://hebbmind.com/ja/cli/libvips.md): [CLI] Fast, memory-efficient image processing library with a vips CLI for batch resizing, cropping, rotating, format conversion (WebP, AVIF, HEIC, TIFF and more) and thumbnails, handling very large images smoothly. Good for design and media teams processing assets in bulk. Install with Homebrew on macOS.
- [Presidio CLI](https://hebbmind.com/ja/cli/presidio.md): [CLI] Scans files and directories for personal data such as names, emails and credit card numbers using Presidio Analyzer, with configurable entity types, confidence thresholds and ignore rules. Needs Python 3.10+ and a spaCy language model.
- [Datasette](https://hebbmind.com/ja/cli/datasette.md): [CLI] Publishes SQLite databases as browsable, queryable web pages and JSON APIs, with SQL queries, metadata and plugins, and deploys to Cloud Run and other platforms with datasette publish. Great for data exploration and data journalism. Needs Python 3.10+.
- [OSV-Scanner](https://hebbmind.com/ja/cli/osv-scanner.md): [CLI] Google's official dependency vulnerability scanner: parses project lockfiles and container images, checks them against the OSV.dev database to find affected dependencies, and can suggest upgrade fixes (experimental).
- [Codex Security](https://hebbmind.com/ja/cli/codex-security.md): [CLI] OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key.
- [Hugging Face LLM Trainer](https://hebbmind.com/ja/skill/huggingface-llm-trainer.md): [Skill] Lets agents fine-tune language and vision models with TRL or Unsloth on Hugging Face Jobs cloud GPUs, supporting SFT, DPO, GRPO and reward models, and convert results to GGUF for local use. Requires an HF Pro or higher paid plan. Maintained by Hugging Face.
- [Hugging Face Skills](https://hebbmind.com/ja/plugin/huggingface-skills.md): [Plugin] Lets agents work with the Hugging Face Hub through the hf CLI: search and download models and datasets, manage repos and Spaces, and run training and evaluation jobs on cloud GPUs, with more workflow skills installable as needed. Maintained by Hugging Face.
- [Hugging Face CLI (hf-cli)](https://hebbmind.com/ja/skill/hf-cli.md): [Skill] Teaches agents the Hugging Face Hub CLI hf: search and download models, manage datasets, Spaces, Buckets and repos, and run Jobs and inference endpoints. The skill content is generated from your local CLI, so install hf first. Maintained by Hugging Face.
- [Hugging Face Skills](https://hebbmind.com/ja/skill/huggingface-skills.md): [Skill] Hugging Face's official skills: manage Hub models and datasets with the hf CLI, fine-tune language and vision models, run model evaluations, and build Gradio apps deployed to Spaces. Needs an HF account; cloud training on HF Jobs requires a paid plan.
- [MCP Inspector](https://hebbmind.com/ja/cli/inspector.md): [CLI] The official MCP debugging tool: connect to any MCP server through a web UI, CLI or terminal UI to list and call its tools, resources and prompts. CLI mode outputs JSON, suited to scripts and CI smoke tests.
- [H3 Prompt Writing](https://hebbmind.com/ja/skill/h3-prompt-writing.md): [Skill] MiniMax's official prompt skill for the Hailuo H3 video model: rewrites video ideas into H3's structured prompt format for text-to-video, first/last frame and full-reference modes, covering visuals, sound effects and music. Docs only; generate videos on Hailuo web, the MiniMax API or a local model.
- [pdfplumber](https://hebbmind.com/ja/cli/pdfplumber.md): [CLI] Reads the exact position of every character, line and table cell in digital PDFs: the CLI exports layout-preserving text or CSV/JSON details, and the Python API extracts tables and form fields, ideal for invoices, statements and reports. Runs locally with Python; scans need OCR first.
- [Scroll World](https://hebbmind.com/ja/skill/scroll-world.md): [Skill] Builds a scroll-scrubbed fly-through 3D world landing page for any brand: generates scene stills with Higgsfield and seamless camera clips via Monid (Seedance 2.0, paid per clip) or Higgsfield credits, then wires a vanilla JS scrub engine. Needs Higgsfield CLI and ffmpeg.
- [Manga Image Translator](https://hebbmind.com/ja/cli/manga-image-translator.md): [CLI] Batch-translates text in manga, posters and screenshots with one command: detects text, runs OCR, erases the original and typesets the translation back into the image. Japanese-focused, with 20+ languages supported. Install from source (Python 3.10+); offline models, DeepL or LLM APIs.
- [UI Skills](https://hebbmind.com/ja/skill/ui-skills.md): [Skill] UI skills for design engineers: clean up spacing and hierarchy in AI-generated interfaces, fix accessibility and page metadata, debug janky animations, build DESIGN.md from an existing product or site, and run read-only UI reviews with fix plans. Use with a local frontend project in a coding agent.
- [Jakub Krehel Skills](https://hebbmind.com/ja/skill/jakubkrehel-skills.md): [Skill] Design engineer Jakub Krehel's 11 UI skills: targeted fixes for typography, color, layout, accessibility and UI copy, plus full interface reviews, animation teardowns, component state stress tests and multi-variant generation. Works on web project code; installing needs Node.js.
- [usql](https://hebbmind.com/ja/cli/usql.md): [CLI] Universal psql-style SQL command line: one tool to connect to PostgreSQL, MySQL, SQLite, SQL Server, Oracle and dozens of other SQL and NoSQL databases, with support for copying data between databases.

Next page: https://hebbmind.com/ja/tools.md?page=5&profession=algorithm%2Cdata-engineering%2Cdata%2Csecurity%2Cdesign
