# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for QA or ML / AI or Data analysis or Security or Hardware engineering: 460 items. > - QA: Functional testing, test automation and quality assurance. > - ML / AI: Model training, evaluation and LLM application development. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Hardware engineering: Part and assembly modeling, schematics and PCB review, simulation, and BOM and production files. - [agent-device](https://hebbmind.com/ja/mcp/agent-device.md): [MCP] From Callstack: lets coding agents inspect, operate and verify apps on iOS, Android and HarmonyOS simulators and real devices, reading accessibility snapshots, taking screenshots and recordings, and capturing logs and performance data. Ships both a CLI and a built-in MCP server. - [agent-device](https://hebbmind.com/ja/cli/agent-device.md): [CLI] From Callstack: lets coding agents drive and verify iOS, Android, HarmonyOS and desktop apps through accessibility snapshots, with taps, form filling, screenshots, logs and performance sampling, plus a built-in MCP server. Requires Node.js 22.12+. - [MCPorter](https://hebbmind.com/ja/cli/mcporter.md): [CLI] CLI and TypeScript runtime for discovering and calling MCP servers from the terminal and scripts: list tool signatures and call tools directly, or generate a standalone CLI or typed client from a server. Auto-imports existing MCP configs from Claude Code, Codex and others. - [Unlighthouse](https://hebbmind.com/ja/cli/unlighthouse.md): [CLI] Runs Google Lighthouse across an entire site (sampling similar pages smartly) and summarizes SEO, performance and accessibility scores page by page in a local web UI; unlighthouse-ci writes reports directly for agents to read. Great for site-wide SEO checkups. Needs Node.js 22.18+. - [YouPlot](https://hebbmind.com/ja/cli/youplot.md): [CLI] Draws bar charts, histograms, line charts, scatter plots and box plots in the terminal from CSV/TSV on stdin, so you can glance at data distributions at the end of a shell pipeline. The command is uplot. - [Auto-Empirical Research Skills (AERS)](https://hebbmind.com/ja/skill/auto-empirical-research-skills.md): [Skill] Empirical social science skills from Stanford REAP and CoPaper.AI, bundling 77 in-house and third-party collections: topic selection, literature reviews, DID/RD/IV identification, regression tables in Python, Stata or R, robustness audits and paper writing. Stata flows need Stata installed. - [AntV MCP Server Chart](https://hebbmind.com/ja/mcp/mcp-server-chart.md): [MCP] Generates 26+ chart types with AntV, including line, bar, Sankey, word cloud, mind map and pivot table, returning image links. Officially maintained by Ant Group's AntV team; uses a public rendering service by default and can be self-hosted. - [Gemini API Dev](https://hebbmind.com/ja/skill/gemini-api-dev.md): [Skill] Teaches agents to code against the latest Gemini API and Python/TypeScript SDKs: multi-turn chat, function calling, structured output, and image and speech generation, while avoiding deprecated older models. Maintained by Google's Gemini team. - [Gemini Skills](https://hebbmind.com/ja/skill/gemini-skills.md): [Skill] Gemini API development skills: gemini-api-dev (core API and SDKs), gemini-live-api-dev (real-time bidirectional audio/video streaming) and gemini-omni-flash-api (Omni video generation and editing), filling in APIs released after model training cutoffs. Maintained by Google's Gemini team. - [diff-pdf](https://hebbmind.com/ja/cli/diff-pdf.md): [CLI] Visually compares two PDFs page by page: reports differences via exit code, writes a PDF with differences highlighted, or opens a GUI for side-by-side review. Useful for checking contract or generated-document revisions. No longer actively developed. - [Excel MCP Server](https://hebbmind.com/ja/mcp/excel-mcp-server.md): [MCP] Create, read and modify xlsx workbooks without Microsoft Excel installed: formulas, formatting and conditional formatting, charts, pivot tables and tables. Runs locally over stdio or as a remote HTTP service. - [Nali](https://hebbmind.com/ja/cli/nali.md): [CLI] Terminal tool for offline IP geolocation and CDN provider lookup, supporting QQwry, GeoIP2, ip2region and other databases. Pipe output from dig, nslookup and similar commands through it to annotate IPs automatically. - [NotFair Plugin](https://hebbmind.com/ja/plugin/notfair-plugin.md): [Plugin] Open-source marketing plugin with 48 skills: SEO and AI search optimization (GEO), GA4 and Search Console analysis, ad diagnostics for Google, Meta, X, LinkedIn, Reddit and TikTok, and WordPress upkeep. Some SEO skills need only a URL; live data requires NotFair OAuth and linked accounts. - [lychee](https://hebbmind.com/ja/cli/lychee.md): [CLI] Fast async link checker written in Rust that scans websites and Markdown, HTML and other files for broken links and email addresses, with JSON output, config files and an official GitHub Action, often wired into docs CI. - [Hugging Face CLI](https://hebbmind.com/ja/cli/huggingface-hub.md): [CLI] Hugging Face's official hf CLI: search, download and upload models and datasets, manage repos and storage buckets, and run jobs on Hugging Face's cloud. Output adapts automatically for agents, and hf skills add installs companion skills. Uploads and similar actions need a login. - [AiPy](https://hebbmind.com/ja/cli/aipyapp.md): [CLI] Knownsec's open-source Python-use agent: describe a task in plain language and it writes and runs Python on your machine, e.g. tidying Excel files, summarizing attendance or screening resumes. Needs Python 3.11+ and a model API key such as DeepSeek; code runs locally, so back up important files. - [NVIDIA Agent Skills](https://hebbmind.com/ja/plugin/nvidia-skills.md): [Plugin] NVIDIA's official plugin that finds and installs the right skills from NVIDIA's catalog for your task, spanning CUDA acceleration, NIM inference, NeMo training, RAG blueprints, Omniverse simulation and robotics. Listed in both the Claude and Codex official marketplaces. - [Camelot](https://hebbmind.com/ja/cli/camelot.md): [CLI] Open-source PDF table extraction with a camelot CLI: exports tables from financial reports, bank statements and statistical reports to Excel, CSV or Markdown, with an accuracy score. Needs Python 3.10+; handles text-based PDFs by default, scans need the ml and ocr extras. Double-check results. - [NVIDIA Agent Skills](https://hebbmind.com/ja/skill/nvidia-skills.md): [Skill] NVIDIA's official, verified catalog of hundreds of skills covering CUDA-X libraries, NeMo training, NIM and Dynamo inference, RAG blueprints, Jetson, Omniverse and robotics simulation. The install adds only nvidia-skill-finder, which recommends other skills and installs them once you confirm. - [qsv](https://hebbmind.com/ja/cli/qsv.md): [CLI] Fast Rust toolkit for tabular data with nearly 80 subcommands for querying, stats, cleaning, validation, joins and format conversion on CSV and Excel. Also offers an MCP server and a Claude Cowork plugin. - [DBHub](https://hebbmind.com/ja/mcp/dbhub.md): [MCP] One server connecting PostgreSQL, MySQL, MariaDB, SQL Server, Oracle and SQLite, exposing just two tools by default to save context, with read-only mode and SSH tunneling. From Bytebase. - [Browserbase Skills](https://hebbmind.com/ja/skill/browserbase-skills.md): [Skill] Browserbase's official skills: drive a local or cloud browser with the browse CLI for web scraping and search, turning site traffic into an OpenAPI spec, adversarial UI testing and competitor research. Cloud features need a Browserbase account. - [Google Analytics MCP Server](https://hebbmind.com/ja/mcp/google-analytics-mcp.md): [MCP] Query Google Analytics 4 in natural language: read account and property info and run standard, funnel and realtime reports. Official from Google Analytics (experimental); requires Google Cloud Application Default Credentials. - [CTF Skills](https://hebbmind.com/ja/skill/ctf-skills.md): [Skill] Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills. - [Finance Skills](https://hebbmind.com/ja/plugin/finance-skills.md): [Plugin] Plugin marketplace for investment research: six plugin groups covering yfinance market data, earnings previews and recaps, DCF valuation, option payoff charts, ETF premiums, read-only news from X, Discord and other social sources, and TradingView data. Research only, not investment advice. - [Science Skills](https://hebbmind.com/ja/skill/science-skills.md): [Skill] About 40 research skills from Google DeepMind: search arXiv, PubMed and OpenAlex, query UniProt, PDB, ClinVar, ChEMBL and more, run AlphaGenome variant analysis and render structures in PyMOL. Requires uv; AlphaGenome needs an API key, and keys raise limits for OpenAlex, ClinVar and others. - [Agent Toolkit for AWS](https://hebbmind.com/ja/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials. - [SQLMesh](https://hebbmind.com/ja/cli/sqlmesh.md): [CLI] Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt. - [Playwright Skill](https://hebbmind.com/ja/skill/playwright-skill.md): [Skill] Lets agents write and run Playwright scripts on the fly for browser testing and automation, auto-detecting local dev servers, with screenshots, responsive checks, login flows and link checking. After installing, run npm run setup in the skill directory. - [Playwright Skill](https://hebbmind.com/ja/plugin/playwright-skill.md): [Plugin] Lets agents write and run Playwright scripts on the fly for browser automation: page tests, UX checks and multi-step flows, opening a visible browser by default and auto-detecting local dev servers. After installing the plugin, run npm run setup in the skill directory. - [Cloudflare Agents SDK](https://hebbmind.com/ja/skill/agents-sdk.md): [Skill] Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare. - [arXiv MCP Server](https://hebbmind.com/ja/mcp/arxiv-mcp-server.md): [MCP] Search and download arXiv papers and read the authors' LaTeX source section by section, export BibTeX and follow topic updates, with papers cached locally. No API key needed. - [Vue Testing Best Practices](https://hebbmind.com/ja/skill/vue-testing-best-practices.md): [Skill] Testing practices for Vue apps: Vitest and Vue Test Utils, black-box component tests, flushPromises for async code, helpers for testing composables, Pinia stores, async components and Teleport, avoiding snapshot-only tests, and Playwright for end-to-end testing. - [FreeCAD MCP](https://hebbmind.com/ja/mcp/freecad-mcp.md): [MCP] Lets agents drive the open-source CAD app FreeCAD: create and edit part models in natural language, run Python scripts, capture views and run FEM structural analysis for mechanical and product design. Needs FreeCAD with the addon and its RPC server, plus uv; engineers should verify results. - [Microsoft Agent Skills](https://hebbmind.com/ja/skill/microsoft-skills.md): [Skill] Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all. - [KiCAD MCP Server](https://hebbmind.com/ja/mcp/kicad-mcp-server.md): [MCP] Lets agents work in KiCad directly: draw schematics, place components and route boards (with Freerouting autorouting), create footprints and symbols, and search the JLCPCB parts library. Needs KiCad 9+, Node.js 18+ and Python; clone and build the repo, then register it. - [Awesome Finance Skills](https://hebbmind.com/ja/skill/awesome-finance-skills.md): [Skill] Finance skills for US, Hong Kong and China A-share markets: news from 10+ sources, quotes and fundamentals, sentiment analysis, time-series forecasts, signal tracking, impact-chain diagrams and reports. Needs Python; some skills download PyTorch models. Not investment advice. - [Rebiber](https://hebbmind.com/ja/cli/rebiber.md): [CLI] Replaces arXiv preprint entries in your .bib file with the official published versions from DBLP and ACL Anthology, keeping citation keys, to tidy references before camera-ready. Overwrites the file by default, so preview with --dry-run. Mainly covers CS venues; needs Python 3.10+. - [Web Quality Skills](https://hebbmind.com/ja/skill/web-quality-skills.md): [Skill] Measurement-first audits and optimization of web quality using Lighthouse, Chrome DevTools performance traces and CrUX data, covering Core Web Vitals, WCAG 2.2 accessibility, SEO and best practices, for any frontend framework. By Addy Osmani (not an official Google project). - [Paper Search MCP](https://hebbmind.com/ja/mcp/paper-search-mcp.md): [MCP] Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key. - [Rill](https://hebbmind.com/ja/cli/rill.md): [CLI] Open-source, agent-friendly BI: define metrics and dashboards in YAML and SQL, and rill init generates project instructions and MCP config for Claude Code so agents can build business dashboards and answer questions in natural language. Local use is free; publishing to Rill Cloud needs an account. - [JADX AI MCP](https://hebbmind.com/ja/mcp/jadx-ai-mcp.md): [MCP] A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv. - [EdgarTools](https://hebbmind.com/ja/mcp/edgartools.md): [MCP] Python library with a built-in MCP server for US SEC EDGAR data: search 10-K, 10-Q, 8-K and other filings and read XBRL-standardized financial statements, Form 4 insider trades and 13F holdings. Free with no API key; just set an EDGAR_IDENTITY. - [x64dbg MCP Server](https://hebbmind.com/ja/mcp/x64dbg-mcp-server.md): [MCP] A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token. - [Bright Data MCP](https://hebbmind.com/ja/mcp/brightdata-mcp.md): [MCP] Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month. - [ScanCode Toolkit](https://hebbmind.com/ja/cli/scancode-toolkit.md): [CLI] Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews. - [shot-scraper](https://hebbmind.com/ja/cli/shot-scraper.md): [CLI] Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use. - [MFLUX](https://hebbmind.com/ja/cli/mflux.md): [CLI] Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use. - [Apify Agent Skills](https://hebbmind.com/ja/skill/apify-agent-skills.md): [Skill] Apify's official skill collection: picks from 130+ curated Actors to scrape public data from social networks, maps, e-commerce sites and more, and can also build, package and deploy Actors. Needs an Apify account; a free tier is available. - [Tavily MCP Server](https://hebbmind.com/ja/mcp/tavily-mcp.md): [MCP] Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available. Next page: https://hebbmind.com/ja/tools.md?page=7&profession=qa%2Calgorithm%2Cdata%2Csecurity%2Chardware