# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for ML / AI or Security or Design or Hardware engineering: 472 items. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Design: Interface, interaction, visual and brand design. > - Hardware engineering: Part and assembly modeling, schematics and PCB review, simulation, and BOM and production files. - [OSV-Scanner](https://hebbmind.com/ja/cli/osv-scanner.md): [CLI] Google's official dependency vulnerability scanner: parses project lockfiles and container images, checks them against the OSV.dev database to find affected dependencies, and can suggest upgrade fixes (experimental). - [H3 Prompt Writing](https://hebbmind.com/ja/skill/h3-prompt-writing.md): [Skill] MiniMax's official prompt skill for the Hailuo H3 video model: rewrites video ideas into H3's structured prompt format for text-to-video, first/last frame and full-reference modes, covering visuals, sound effects and music. Docs only; generate videos on Hailuo web, the MiniMax API or a local model. - [Codex Security](https://hebbmind.com/ja/cli/codex-security.md): [CLI] OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key. - [Hugging Face LLM Trainer](https://hebbmind.com/ja/skill/huggingface-llm-trainer.md): [Skill] Lets agents fine-tune language and vision models with TRL or Unsloth on Hugging Face Jobs cloud GPUs, supporting SFT, DPO, GRPO and reward models, and convert results to GGUF for local use. Requires an HF Pro or higher paid plan. Maintained by Hugging Face. - [Hugging Face Skills](https://hebbmind.com/ja/plugin/huggingface-skills.md): [Plugin] Lets agents work with the Hugging Face Hub through the hf CLI: search and download models and datasets, manage repos and Spaces, and run training and evaluation jobs on cloud GPUs, with more workflow skills installable as needed. Maintained by Hugging Face. - [Hugging Face CLI (hf-cli)](https://hebbmind.com/ja/skill/hf-cli.md): [Skill] Teaches agents the Hugging Face Hub CLI hf: search and download models, manage datasets, Spaces, Buckets and repos, and run Jobs and inference endpoints. The skill content is generated from your local CLI, so install hf first. Maintained by Hugging Face. - [Hugging Face Skills](https://hebbmind.com/ja/skill/huggingface-skills.md): [Skill] Hugging Face's official skills: manage Hub models and datasets with the hf CLI, fine-tune language and vision models, run model evaluations, and build Gradio apps deployed to Spaces. Needs an HF account; cloud training on HF Jobs requires a paid plan. - [MCP Inspector](https://hebbmind.com/ja/cli/inspector.md): [CLI] The official MCP debugging tool: connect to any MCP server through a web UI, CLI or terminal UI to list and call its tools, resources and prompts. CLI mode outputs JSON, suited to scripts and CI smoke tests. - [Scroll World](https://hebbmind.com/ja/skill/scroll-world.md): [Skill] Builds a scroll-scrubbed fly-through 3D world landing page for any brand: generates scene stills with Higgsfield and seamless camera clips via Monid (Seedance 2.0, paid per clip) or Higgsfield credits, then wires a vanilla JS scrub engine. Needs Higgsfield CLI and ffmpeg. - [Manga Image Translator](https://hebbmind.com/ja/cli/manga-image-translator.md): [CLI] Batch-translates text in manga, posters and screenshots with one command: detects text, runs OCR, erases the original and typesets the translation back into the image. Japanese-focused, with 20+ languages supported. Install from source (Python 3.10+); offline models, DeepL or LLM APIs. - [UI Skills](https://hebbmind.com/ja/skill/ui-skills.md): [Skill] UI skills for design engineers: clean up spacing and hierarchy in AI-generated interfaces, fix accessibility and page metadata, debug janky animations, build DESIGN.md from an existing product or site, and run read-only UI reviews with fix plans. Use with a local frontend project in a coding agent. - [Jakub Krehel Skills](https://hebbmind.com/ja/skill/jakubkrehel-skills.md): [Skill] Design engineer Jakub Krehel's 11 UI skills: targeted fixes for typography, color, layout, accessibility and UI copy, plus full interface reviews, animation teardowns, component state stress tests and multi-variant generation. Works on web project code; installing needs Node.js. - [Feynman](https://hebbmind.com/ja/cli/feynman.md): [CLI] Open-source research agent: one command runs literature reviews, deep research, paper reviews, paper-code consistency checks and replication plans, searching arXiv, PubMed and more with sources recorded. Good for grad students writing reviews. Run feynman setup to sign in to a model provider. - [Privacy Legal](https://hebbmind.com/ja/plugin/privacy-legal.md): [Plugin] Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic. - [AI Governance Legal](https://hebbmind.com/ja/plugin/ai-governance-legal.md): [Plugin] Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice. - [garak](https://hebbmind.com/ja/cli/garak.md): [CLI] NVIDIA's open-source LLM vulnerability scanner that probes for prompt injection, jailbreaks, data leakage, hallucination and harmful content, supporting OpenAI, Hugging Face, Bedrock and most REST-accessible models. Scanning cloud models needs their API keys. - [PaperQA2](https://hebbmind.com/ja/cli/paper-qa.md): [CLI] High-accuracy retrieval-augmented Q&A over paper PDFs, text and Office documents, filling in citation metadata, checking retractions and attaching traceable sources to answers. Provides the pqa CLI and a Python library. Needs an LLM API key by default; local models can be configured. - [Harness](https://hebbmind.com/ja/plugin/harness.md): [Plugin] Say build a harness for this project and it designs a domain-specific agent team, generating subagent definitions, companion skills and orchestration, validates them and keeps evolving them from feedback. Supports workflow orchestration, persistent agent teams and subagent delegation. - [Checkov](https://hebbmind.com/ja/cli/checkov.md): [CLI] Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud. - [Stitch Design Skills](https://hebbmind.com/ja/skill/stitch-skills.md): [Skill] Companion skills for Google Stitch: generate UIs from text or images, extract DESIGN.md from code, and turn designs into React or React Native components. From Google Labs but not an officially supported Google product; set up the Stitch MCP first. - [MLX-Audio](https://hebbmind.com/ja/cli/mlx-audio.md): [CLI] Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg. - [BackgroundRemover](https://hebbmind.com/ja/cli/backgroundremover.md): [CLI] Removes backgrounds from images and videos with one AI command: batch whole folders, use a portrait model, refine edges or swap in a solid color, and output transparent MOV or composite video onto a new background. Runs locally; install PyTorch and ffmpeg first. Models download on first run. - [FontForge](https://hebbmind.com/ja/cli/fontforge.md): [CLI] Open-source font editor: fontforge -script runs Python scripts headlessly to batch-edit glyphs, convert between OTF, TTF, UFO and other formats, and generate fonts, for type design and font processing. Homebrew installs the CLI version; install the desktop app for the GUI. - [Research Paper Writing Skills](https://hebbmind.com/ja/skill/research-paper-writing-skills.md): [Skill] Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key. - [Steampipe](https://hebbmind.com/ja/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in. - [Differential Review](https://hebbmind.com/ja/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [Supply Chain Risk Auditor](https://hebbmind.com/ja/skill/supply-chain-risk-auditor.md): [Skill] Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended. - [Agentic Actions Auditor](https://hebbmind.com/ja/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks. - [Trail of Bits Skills](https://hebbmind.com/ja/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [Static Analysis](https://hebbmind.com/ja/skill/static-analysis.md): [Skill] Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally. - [Variant Analysis](https://hebbmind.com/ja/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity. - [stable-diffusion.cpp](https://hebbmind.com/ja/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source. - [App Store & Google Play Screenshots Generator](https://hebbmind.com/ja/skill/app-store-screenshots.md): [Skill] Has the agent build a local Next.js editor that turns app screenshots into App Store and Google Play marketing images: real device frames, bold headlines, 18 visual styles, multiple languages and RTL layouts, with one-click export of every required size. Needs Node.js. - [Canva Translate Design](https://hebbmind.com/ja/skill/canva-translate-design.md): [Skill] Canva's official skill (OpenAI plugin directory): translates all text in a Canva design into another language and saves a copy, leaving the original intact. Useful for multilingual marketing. Needs a Canva account and the Canva MCP; longer text may need layout tweaks. - [Creative Production](https://hebbmind.com/ja/plugin/creative-production.md): [Plugin] OpenAI's official Codex plugin that starts from a brief, product shots or references to generate marketing concepts, mood boards, product scenes, ad directions and social assets, compared and iterated on a reviewable board. Works with Figma and Canva. - [OpenAI Codex Plugins](https://hebbmind.com/ja/plugin/openai-plugins.md): [Plugin] OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install. - [Adobe (Codex)](https://hebbmind.com/ja/plugin/adobe.md): [Plugin] Adobe's official Codex plugin, listed in OpenAI's plugin marketplace: batch-edit and retouch photos by chat, build social graphics from Express templates, reformat landscape video into vertical shorts and search Creative Cloud assets. Try it as a guest; sign in for more features. - [MagicPath (Codex)](https://hebbmind.com/ja/plugin/magicpath.md): [Plugin] MagicPath's official Codex plugin from OpenAI's plugin marketplace: search and install UI components from MagicPath canvases, apply team themes, and move interfaces from local code onto the canvas to keep iterating. Needs a MagicPath account and Node.js. - [Jupyter Notebooks](https://hebbmind.com/ja/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins. - [Figma (Codex)](https://hebbmind.com/ja/plugin/figma.md): [Plugin] Figma's Codex plugin in OpenAI's official marketplace: implements UI from designs, generates Code Connect mappings, and creates or updates pages, component libraries, FigJam diagrams and slides in Figma. Needs a connected Figma account. - [Product Design](https://hebbmind.com/ja/plugin/product-design.md): [Plugin] OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues. - [OpenAI Developers](https://hebbmind.com/ja/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only. - [Codex Security](https://hebbmind.com/ja/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. - [Defending Code Reference Harness](https://hebbmind.com/ja/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained. - [OpenCompass](https://hebbmind.com/ja/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference. - [GC Minimal Zine Poster](https://hebbmind.com/ja/skill/gc-minimal-zine-poster.md): [Skill] Turns a theme, a line, an article or photos into a minimal, whitespace-heavy indie-zine portrait poster, and can distill reusable style rules and prompts from reference images, with built-in quality checks. Needs host image generation (e.g. Codex); otherwise outputs prompts only. - [VTracer](https://hebbmind.com/ja/cli/vtracer.md): [CLI] Converts raster images like JPG and PNG to SVG, handling color tracing, black-and-white line art and unevenly lit scans, for vectorizing logos, illustrations and old drawings. The CLI is a 1.0 preview installed with cargo (needs Rust); a desktop app is also available. - [Jupytext](https://hebbmind.com/ja/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip. - [GSAP ScrollTrigger Storytelling](https://hebbmind.com/ja/skill/gsap-scrolltrigger-storytelling.md): [Skill] Builds cinematic, scroll-driven product storytelling with GSAP ScrollTrigger: pinned scenes, scrubbed timelines, progressive UI reveals and section handoffs, with cleanup in React, simpler choreography on small screens and readable copy and CTAs. - [Marquee Loop](https://hebbmind.com/ja/skill/marquee-loop.md): [Skill] Builds seamless infinite marquees for logos, testimonials, screenshots or tags by duplicating the item sequence and translating the track from 0 to -50%, with stable widths, faded edges, optional hover pause and reduced-motion handling. Next page: https://hebbmind.com/ja/tools.md?page=5&profession=algorithm%2Csecurity%2Cdesign%2Chardware