# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for DevOps / SRE or ML / AI or Data engineering or Security or Design: 669 items. > - DevOps / SRE: Deployment, monitoring, cloud resources and reliability. > - ML / AI: Model training, evaluation and LLM application development. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Design: Interface, interaction, visual and brand design. - [Vercel Optimize](https://hebbmind.com/ja/skill/vercel-optimize.md): [Skill] Vercel's official cost and performance skill: gathers production metrics, usage and project config, investigates only the routes and files the metrics point to, and returns ranked, doc-backed recommendations. Supports Next.js, SvelteKit and Nuxt; needs Vercel CLI v53+ logged in and linked. - [Deploy to Vercel](https://hebbmind.com/ja/skill/deploy-to-vercel.md): [Skill] Vercel's official deployment skill: checks the git remote, project link and CLI login, then deploys a preview (default) or production via git push or vercel deploy. When login isn't possible in a sandbox, it can create a claimable preview link. - [Podman](https://hebbmind.com/ja/cli/podman.md): [CLI] Daemonless, rootless container and pod manager with a Docker-compatible CLI for building, running and pushing OCI images. On macOS and Windows it runs inside a podman machine VM. - [Context Mode](https://hebbmind.com/ja/plugin/context-mode.md): [Plugin] Processes large tool outputs in a sandbox and returns only the results to context; logs session events in SQLite with FTS5 so work continues after context compaction. Supports Claude Code, Codex and a dozen other clients. ELv2 licensed. - [Cognee MCP](https://hebbmind.com/ja/mcp/cognee-mcp.md): [MCP] Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud. - [Nuclei](https://hebbmind.com/ja/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test. - [Graphiti MCP Server](https://hebbmind.com/ja/mcp/getzep-mcp-server.md): [MCP] Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key. - [Grafana k6](https://hebbmind.com/ja/cli/k6.md): [CLI] Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI. - [OpenTofu](https://hebbmind.com/ja/cli/opentofu.md): [CLI] Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0. - [Gitleaks](https://hebbmind.com/ja/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks. - [Helm](https://hebbmind.com/ja/cli/helm.md): [CLI] Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster. - [TruffleHog](https://hebbmind.com/ja/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives. - [DESIGN.md](https://hebbmind.com/ja/cli/design-md.md): [CLI] Google Labs' DESIGN.md format and CLI: designers capture colors, typography and spacing in a file for agents; lint checks broken references and WCAG contrast, diff compares versions and export outputs design tokens for Tailwind and more. Needs Node.js; the format is in alpha. - [Huashu Design](https://hebbmind.com/ja/skill/huashu-design.md): [Skill] Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed. - [baoyu-skills](https://hebbmind.com/ja/plugin/baoyu-skills.md): [Plugin] Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key. - [promptfoo](https://hebbmind.com/ja/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT. - [Awesome Claude Code Subagents](https://hebbmind.com/ja/plugin/awesome-claude-code-subagents.md): [Plugin] 160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need. - [Pulumi](https://hebbmind.com/ja/cli/pulumi.md): [CLI] Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi. - [D2](https://hebbmind.com/ja/cli/d2.md): [CLI] Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control. - [Pascal Agent Skills](https://hebbmind.com/ja/plugin/pascalorg-skills.md): [Plugin] Official plugin for Pascal, an open-source 3D architecture editor: lets agents create, edit and validate 3D models of rooms and floors over MCP and check furniture placement for collisions or blocked doors. Local use needs the Pascal CLI (Node.js 22.13+); hosted projects need an API key. - [Rembg](https://hebbmind.com/ja/cli/rembg.md): [CLI] Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally. - [radare2](https://hebbmind.com/ja/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript. - [eza](https://hebbmind.com/ja/cli/eza.md): [CLI] Community-maintained modern replacement for ls (successor to exa) with colored output, tree view, Git status and file icons, plus .gitignore filtering for quickly scanning directory structures. - [SOPS](https://hebbmind.com/ja/cli/sops.md): [CLI] Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project. - [SVGO](https://hebbmind.com/ja/cli/svgo.md): [CLI] SVG optimizer CLI and Node.js library: shrinks SVGs by removing editor metadata, comments, hidden elements and redundant attributes, processes whole directories recursively, and gives fine control through plugin config. - [Video2X](https://hebbmind.com/ja/cli/video2x.md): [CLI] ML-based video upscaling and frame interpolation using Real-ESRGAN, Real-CUGAN, RIFE and other models to upscale old low-res video or raise frame rates; video2x handles one video per run and is scriptable. Needs a Vulkan GPU; Windows, Linux and Docker builds, no native macOS. - [Google Agent Skills](https://hebbmind.com/ja/skill/google-google-skills.md): [Skill] Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics. - [Google Skills](https://hebbmind.com/ja/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others. - [BigQuery Basics](https://hebbmind.com/ja/skill/bigquery-basics.md): [Skill] Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project. - [GKE Basics & Critical Gotchas](https://hebbmind.com/ja/skill/gke-basics.md): [Skill] Google's official GKE basics skill: creating clusters, choosing Autopilot or Standard, getting kubectl credentials, configuring Workload Identity and deploying workloads, plus a list of common gotchas. Needs gcloud and a GCP project. - [FunASR](https://hebbmind.com/ja/cli/funasr.md): [CLI] Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch. - [gallery-dl](https://hebbmind.com/ja/cli/gallery-dl.md): [CLI] Command-line tool for bulk-downloading galleries and posts from many image hosts and social platforms, with flexible file naming and config, and yt-dlp integration for video. Main development has moved to Codeberg; the GitHub repo stays in sync. - [olmOCR](https://hebbmind.com/ja/cli/olmocr.md): [CLI] AI2's tool for converting PDFs and scans to Markdown with a vision LLM, handling equations, tables, handwriting and multi-column layouts, suited to bulk digitizing papers and archives. Local runs need an NVIDIA GPU with 12GB+ VRAM; otherwise use a paid OpenAI-compatible remote endpoint. - [Browser Harness](https://hebbmind.com/ja/cli/browser-harness.md): [CLI] Browser control from the browser-use team: an editable CDP connection lets agents drive the Chrome you are already using, writing missing helper functions as they go and keeping them for reuse. Also offers an MCP server. Allow remote debugging in Chrome on first use. - [Sealos](https://hebbmind.com/ja/cli/sealos.md): [CLI] Sealos's Kubernetes lifecycle CLI: one sealos run deploys a highly available cluster across multiple servers, and cluster images install databases, middleware and other apps, with offline delivery support. Linux only. - [ARIS (Auto-claude-code-research-in-sleep)](https://hebbmind.com/ja/skill/auto-claude-code-research-in-sleep.md): [Skill] Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too. - [Agent Skills for Context Engineering](https://hebbmind.com/ja/skill/agent-skills-for-context-engineering.md): [Skill] Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform. - [Agent Skills for Context Engineering](https://hebbmind.com/ja/plugin/agent-skills-for-context-engineering.md): [Plugin] Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems. - [lark-whiteboard](https://hebbmind.com/ja/skill/lark-whiteboard.md): [Skill] Official Lark (Feishu) skill to view, export and edit whiteboards in Lark docs: write Mermaid, PlantUML or SVG into a board for flowcharts or org charts, or export boards as images or SVG. New boards are created with lark-doc. Needs lark-cli, Node.js and auth; install with lark-shared. - [ImageMagick](https://hebbmind.com/ja/cli/imagemagick.md): [CLI] Veteran image processing CLI suite that converts, resizes, crops, composites and batch-processes JPEG, PNG, GIF, TIFF, PDF and many more formats, handy for agents handling images in scripts. - [GSAP AI Skills](https://hebbmind.com/ja/skill/gsap-skills.md): [Skill] GSAP's official animation skills: teach agents to use the core API, timelines, ScrollTrigger and plugins correctly, including React, Vue and Svelte integration and animation performance. Maintained by GreenSock; all plugins are free. - [DataX](https://hebbmind.com/ja/cli/datax.md): [CLI] Alibaba's open-source offline data sync tool: JSON job configs batch-sync between heterogeneous sources like MySQL, Oracle, PostgreSQL, Hive, HDFS and MaxCompute, run with python datax.py. Needs JDK 1.8+ and Python; download and unpack the official toolkit. - [Semgrep MCP](https://hebbmind.com/ja/mcp/semgrep-mcp.md): [MCP] Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN. - [Semgrep](https://hebbmind.com/ja/cli/semgrep.md): [CLI] Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in. - [AWS CLI](https://hebbmind.com/ja/cli/aws-cli.md): [CLI] AWS's official unified CLI for managing EC2, S3, IAM and every other AWS service with one set of commands, with --query (JMESPath) filtering and JSON output that agents can use to inspect and change cloud resources. Run aws configure to set credentials first. - [Dagger](https://hebbmind.com/ja/cli/dagger.md): [CLI] Programmable software delivery engine: write build, test and release pipelines with SDKs in Go, Python, TypeScript and five other languages, all running in containers so local and CI behave the same, with built-in OpenTelemetry tracing. Needs a container runtime such as Docker. - [Vercel CLI](https://hebbmind.com/ja/cli/vercel-cli.md): [CLI] Vercel's official CLI: deploy frontend and full-stack projects with one command and manage preview environments, environment variables, domains and logs. Requires a Vercel account (free tier available). - [cloudflared](https://hebbmind.com/ja/cli/cloudflared.md): [CLI] Official Cloudflare Tunnel client: exposes local services to the internet without opening firewall ports and can proxy TCP access like SSH and RDP. Named tunnels need a Cloudflare account and domain; quick tunnels work without signing in. - [yq](https://hebbmind.com/ja/cli/yq.md): [CLI] Lightweight command-line processor with jq-like syntax for reading, modifying and converting YAML, JSON, XML, INI, CSV and more, including in-place config edits. A single dependency-free Go binary. - [Framelink MCP for Figma](https://hebbmind.com/ja/mcp/figma-context.md): [MCP] Simplifies Figma designs into layout and style data for coding agents, so UIs built from the design are more accurate than working from screenshots. Requires a Figma personal access token. Next page: https://hebbmind.com/ja/tools.md?page=5&profession=devops%2Calgorithm%2Cdata-engineering%2Csecurity%2Cdesign