# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Mobile & desktop or ML / AI or Data engineering or Security: 376 items.

> - Mobile & desktop: Building and shipping iOS, Android and desktop apps.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [Defending Code Reference Harness](https://hebbmind.com/ja/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.
- [OpenCompass](https://hebbmind.com/ja/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference.
- [Jupytext](https://hebbmind.com/ja/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip.
- [arxiv-latex-cleaner](https://hebbmind.com/ja/cli/arxiv-latex-cleaner.md): [CLI] Cleans a LaTeX project before arXiv submission: removes comments, auxiliary files and unused .tex files and images, and can compress images, so internal notes are not published with the source. From Google Research; installable with Homebrew on macOS.
- [Trafilatura](https://hebbmind.com/ja/cli/trafilatura.md): [CLI] Python library and CLI for extracting main web content: fetches pages, crawls via sitemaps and RSS feeds, strips headers, footers and other noise, and outputs TXT, Markdown, JSON, XML and more with metadata. Also processes downloaded HTML offline.
- [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/ja/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.
- [zizmor](https://hebbmind.com/ja/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.
- [MobileBuildMCP](https://hebbmind.com/ja/mcp/mobilebuildmcp.md): [MCP] Lets agents build, run, test and debug iOS and macOS projects and control simulators and physical devices, with a CLI mode too. Formerly XcodeBuildMCP, now maintained by Sentry; macOS only, requires Xcode 16 or later.
- [SwiftUI Pro](https://hebbmind.com/ja/skill/swiftui-pro.md): [Skill] SwiftUI skill by Paul Hudson of Hacking with Swift: reviews and improves SwiftUI code, covering modern vs deprecated APIs, performance, navigation and layout, state management and VoiceOver accessibility, targeting iOS 26 and Swift 6.2.
- [csvkit](https://hebbmind.com/ja/cli/csvkit.md): [CLI] Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files.
- [Google Agents CLI Skills](https://hebbmind.com/ja/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.
- [Ghidra MCP Server](https://hebbmind.com/ja/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.
- [Claude Scholar](https://hebbmind.com/ja/skill/claude-scholar.md): [Skill] Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin.
- [Claude Scholar](https://hebbmind.com/ja/plugin/claude-scholar.md): [Plugin] Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist.
- [.NET Agent Skills](https://hebbmind.com/ja/skill/dotnet-skills.md): [Skill] The .NET team's official skill collection, grouped into plugins: ASP.NET Core, Blazor, MAUI, EF Core data access, MSBuild troubleshooting, performance diagnostics, testing, and framework upgrades and migrations. Maintained by Microsoft; install via the Claude Code or Codex plugin marketplace.
- [Peekaboo](https://hebbmind.com/ja/mcp/peekaboo.md): [MCP] macOS screen capture, accessibility-tree inspection and native UI automation, served over MCP so agents can see the screen and click, type and operate menus. Requires macOS 15+ with Screen Recording and Accessibility permissions granted.
- [Peekaboo](https://hebbmind.com/ja/cli/peekaboo.md): [CLI] macOS screenshot and UI automation CLI: capture the screen, read the accessibility tree for structured UI elements, then click, type, and switch windows and menus. Also runs as an MCP server for Claude Code and Codex. Needs macOS 15+ with Screen Recording and Accessibility permissions.
- [Lingo.dev CLI](https://hebbmind.com/ja/cli/lingo-dev.md): [CLI] Lingo.dev's official CLI: lingo push sends JSON, YAML, Markdown, PO, XLIFF, Android/Xcode strings and other files from your repo to its LLM localization engine, and lingo pull brings translations back; CI-ready. Needs a Lingo.dev account; usage-based pricing with a free sandbox.
- [LM Studio CLI (lms)](https://hebbmind.com/ja/cli/lms.md): [CLI] LM Studio's official CLI: list, load and unload local models, start and stop the local API server, and check status and logs; ls, ps and other commands support --json output for scripts and agents. Requires the LM Studio desktop app.
- [PySceneDetect](https://hebbmind.com/ja/cli/pyscenedetect.md): [CLI] Detects shot changes in video and splits long footage into scenes, exporting cut lists and per-scene thumbnails, useful for shot analysis, organizing footage and finding edit points. Runs locally; needs Python 3.10+, plus FFmpeg or mkvmerge for splitting.
- [ExifTool](https://hebbmind.com/ja/cli/exiftool.md): [CLI] Classic CLI for reading and writing metadata in hundreds of file types including images, video, audio and PDF, covering EXIF, GPS, IPTC, XMP and camera makers' proprietary tags, with batch editing, stripping and conversion. Requires Perl.
- [agent-device](https://hebbmind.com/ja/cli/agent-device.md): [CLI] From Callstack: lets coding agents drive and verify iOS, Android, HarmonyOS and desktop apps through accessibility snapshots, with taps, form filling, screenshots, logs and performance sampling, plus a built-in MCP server. Requires Node.js 22.12+.
- [agent-device](https://hebbmind.com/ja/mcp/agent-device.md): [MCP] From Callstack: lets coding agents inspect, operate and verify apps on iOS, Android and HarmonyOS simulators and real devices, reading accessibility snapshots, taking screenshots and recordings, and capturing logs and performance data. Ships both a CLI and a built-in MCP server.
- [MCPorter](https://hebbmind.com/ja/cli/mcporter.md): [CLI] CLI and TypeScript runtime for discovering and calling MCP servers from the terminal and scripts: list tool signatures and call tools directly, or generate a standalone CLI or typed client from a server. Auto-imports existing MCP configs from Claude Code, Codex and others.
- [YouPlot](https://hebbmind.com/ja/cli/youplot.md): [CLI] Draws bar charts, histograms, line charts, scatter plots and box plots in the terminal from CSV/TSV on stdin, so you can glance at data distributions at the end of a shell pipeline. The command is uplot.
- [Style Dictionary](https://hebbmind.com/ja/cli/style-dictionary.md): [CLI] Design token build tool: define colors, font sizes, spacing and other design specs in one JSON source, then style-dictionary build generates CSS, SCSS, iOS, Android and other platform code, keeping the design system and implementations in sync. Needs Node.js and a config.json.
- [Firebase CLI](https://hebbmind.com/ja/cli/firebase-tools.md): [CLI] Firebase's official CLI: deploy Hosting, Cloud Functions and security rules, run local emulators, read and write databases and import or export users. The same repo also provides the official Firebase MCP server. Requires a Firebase sign-in.
- [Firebase MCP Server](https://hebbmind.com/ja/mcp/firebase-mcp.md): [MCP] Lets agents manage Firebase projects: read and write Firestore and Realtime Database, manage Auth users, validate security rules, and check Crashlytics crashes and function logs. Maintained by Firebase; sign in to the Firebase CLI first.
- [Gemini API Dev](https://hebbmind.com/ja/skill/gemini-api-dev.md): [Skill] Teaches agents to code against the latest Gemini API and Python/TypeScript SDKs: multi-turn chat, function calling, structured output, and image and speech generation, while avoiding deprecated older models. Maintained by Google's Gemini team.
- [Gemini Skills](https://hebbmind.com/ja/skill/gemini-skills.md): [Skill] Gemini API development skills: gemini-api-dev (core API and SDKs), gemini-live-api-dev (real-time bidirectional audio/video streaming) and gemini-omni-flash-api (Omni video generation and editing), filling in APIs released after model training cutoffs. Maintained by Google's Gemini team.
- [Nali](https://hebbmind.com/ja/cli/nali.md): [CLI] Terminal tool for offline IP geolocation and CDN provider lookup, supporting QQwry, GeoIP2, ip2region and other databases. Pipe output from dig, nslookup and similar commands through it to annotate IPs automatically.
- [Expo](https://hebbmind.com/ja/plugin/expo.md): [Plugin] Expo's official plugin covering Expo Router navigation, native UI, data fetching and SDK upgrades, plus EAS builds, OTA updates and app store submission. Some service-related skills rely on paid EAS.
- [Hugging Face CLI](https://hebbmind.com/ja/cli/huggingface-hub.md): [CLI] Hugging Face's official hf CLI: search, download and upload models and datasets, manage repos and storage buckets, and run jobs on Hugging Face's cloud. Output adapts automatically for agents, and hf skills add installs companion skills. Uploads and similar actions need a login.
- [SwiftUI UI Patterns](https://hebbmind.com/ja/skill/swiftui-ui-patterns.md): [Skill] Guides SwiftUI view building: choosing @State, @Binding, @Observable or @Environment by ownership, wiring TabView, NavigationStack and sheets, async loading with .task, small composed views and previews, plus anti-patterns and a component reference index.
- [Expo Skills](https://hebbmind.com/ja/skill/expo-skills.md): [Skill] Expo's official skills: Expo Router navigation, native-feeling UI, animations, native modules and SDK upgrades, plus EAS build and submit, OTA updates and CI workflows. EAS skills use Expo's paid services.
- [NVIDIA Agent Skills](https://hebbmind.com/ja/plugin/nvidia-skills.md): [Plugin] NVIDIA's official plugin that finds and installs the right skills from NVIDIA's catalog for your task, spanning CUDA acceleration, NIM inference, NeMo training, RAG blueprints, Omniverse simulation and robotics. Listed in both the Claude and Codex official marketplaces.
- [NVIDIA Agent Skills](https://hebbmind.com/ja/skill/nvidia-skills.md): [Skill] NVIDIA's official, verified catalog of hundreds of skills covering CUDA-X libraries, NeMo training, NIM and Dynamo inference, RAG blueprints, Jetson, Omniverse and robotics simulation. The install adds only nvidia-skill-finder, which recommends other skills and installs them once you confirm.
- [qsv](https://hebbmind.com/ja/cli/qsv.md): [CLI] Fast Rust toolkit for tabular data with nearly 80 subcommands for querying, stats, cleaning, validation, joins and format conversion on CSV and Excel. Also offers an MCP server and a Claude Cowork plugin.
- [CTF Skills](https://hebbmind.com/ja/skill/ctf-skills.md): [Skill] Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills.
- [Postgres MCP Pro](https://hebbmind.com/ja/mcp/postgres-mcp.md): [MCP] PostgreSQL MCP server with database health checks, index tuning, EXPLAIN plan analysis and hypothetical index simulation, plus safe read-only SQL execution in restricted mode.
- [Agent Toolkit for AWS](https://hebbmind.com/ja/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials.
- [SQLMesh](https://hebbmind.com/ja/cli/sqlmesh.md): [CLI] Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt.
- [Cloudflare Agents SDK](https://hebbmind.com/ja/skill/agents-sdk.md): [Skill] Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare.
- [arXiv MCP Server](https://hebbmind.com/ja/mcp/arxiv-mcp-server.md): [MCP] Search and download arXiv papers and read the authors' LaTeX source section by section, export BibTeX and follow topic updates, with papers cached locally. No API key needed.
- [Microsoft Agent Skills](https://hebbmind.com/ja/skill/microsoft-skills.md): [Skill] Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all.
- [Dart and Flutter](https://hebbmind.com/ja/plugin/flutter-agent-plugins.md): [Plugin] Official plugin from the Dart and Flutter teams that installs Flutter skills and the Dart MCP server together, covering layered architecture, responsive layouts, layout error fixes, widget and integration tests, routing and internationalization. Requires the Dart/Flutter SDK locally.
- [Flutter Agent Plugins](https://hebbmind.com/ja/skill/flutter-skills.md): [Skill] Agent skills maintained by the Flutter team: layered architecture, responsive layouts, fixing layout overflows, declarative routing, internationalization, JSON serialization, and widget and integration tests. Works alongside the Dart MCP server.
- [Rebiber](https://hebbmind.com/ja/cli/rebiber.md): [CLI] Replaces arXiv preprint entries in your .bib file with the official published versions from DBLP and ACL Anthology, keeping citation keys, to tidy references before camera-ready. Overwrites the file by default, so preview with --dry-run. Mainly covers CS venues; needs Python 3.10+.
- [Supabase Postgres Best Practices](https://hebbmind.com/ja/skill/supabase-postgres-best-practices.md): [Skill] Postgres rules ranked by impact: query optimization, indexing, connection pooling, RLS security, schema design and lock troubleshooting, with wrong-vs-right SQL examples, applicable to any Postgres. Maintained by Supabase.
- [Paper Search MCP](https://hebbmind.com/ja/mcp/paper-search-mcp.md): [MCP] Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.

Next page: https://hebbmind.com/ja/tools.md?page=6&profession=mobile%2Calgorithm%2Cdata-engineering%2Csecurity
