# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Security or Design or Hardware engineering: 321 items. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Design: Interface, interaction, visual and brand design. > - Hardware engineering: Part and assembly modeling, schematics and PCB review, simulation, and BOM and production files. - [Frontend Design](https://hebbmind.com/ja/skill/frontend-design.md): [Skill] Has the agent commit to a visual direction before building or redesigning an interface, making deliberate choices on color, type and layout instead of generic, templated AI UI. Official Anthropic skill. - [Frontend Design](https://hebbmind.com/ja/plugin/frontend-design.md): [Plugin] Has the agent settle on a clear aesthetic direction first, then write distinctive, production-ready frontend interfaces that avoid the generic AI look. Official Anthropic plugin. - [Claude Security](https://hebbmind.com/ja/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [MCP for Blender](https://hebbmind.com/ja/mcp/mcp-for-blender.md): [MCP] Lets agents model, lay out scenes, tweak materials and run Python in Blender, and import Poly Haven, Sketchfab and AI-generated 3D assets. Requires uv and the companion Blender add-on. - [Trail of Bits Skills](https://hebbmind.com/ja/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace. - [Figma MCP Server](https://hebbmind.com/ja/mcp/mcp-server-guide.md): [MCP] Figma's official remote MCP: hands components, variables and layout from your designs to the agent to generate code, and can create and edit designs on the canvas. Needs Figma sign-in; Starter plans and View or Collab seats get only 6 read calls a month. - [ECC](https://hebbmind.com/ja/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [Theme Factory](https://hebbmind.com/ja/skill/theme-factory.md): [Skill] Ten built-in color and font themes to apply to slides, documents, reports and HTML landing pages, or generate a new theme on demand. Official Anthropic skill. - [Canvas Design](https://hebbmind.com/ja/skill/canvas-design.md): [Skill] Develops a design philosophy first, then draws posters, illustrations and other static visuals in code, exporting PNG or PDF. Emphasizes original work rather than copying existing artists. Official Anthropic skill. - [Slack GIF Creator](https://hebbmind.com/ja/skill/slack-gif-creator.md): [Skill] Makes GIFs that follow Slack's recommended size, frame rate, color and length for emoji (128x128) and message GIFs (480x480), with animation tips and tools to assemble and validate them. Built on Python and Pillow. Official Anthropic skill. - [Algorithmic Art](https://hebbmind.com/ja/skill/algorithmic-art.md): [Skill] Creates generative art such as flow fields and particle systems with p5.js and seeded randomness: first writes an algorithmic design philosophy, then outputs an interactive HTML viewer with tunable parameters. Official Anthropic skill. - [UI UX Pro Max](https://hebbmind.com/ja/plugin/ui-ux-pro-max-skill.md): [Plugin] UI/UX design knowledge base plugin with searchable UI styles, color palettes, font pairings, charts and guidelines for 20+ tech stacks; generates complete design system recommendations by product type. Needs Python 3 installed locally. - [UI UX Pro Max](https://hebbmind.com/ja/skill/ui-ux-pro-max-skill.md): [Skill] UI design knowledge base skill: looks up UI styles, palettes, font pairings, charts and UX guidelines by product type and generates a full design system, covering 22 stacks including React, SwiftUI and Flutter. Needs Python 3 locally. - [Image Gen](https://hebbmind.com/ja/skill/imagegen.md): [Skill] Generates or edits images: photos, illustrations, textures, game sprites, product mockups and transparent assets. A built-in Codex system skill using the image_gen tool, no install needed; with approval it can use a bundled CLI script that needs OPENAI_API_KEY. By OpenAI. - [shadcn/ui](https://hebbmind.com/ja/skill/shadcn.md): [Skill] Official shadcn/ui skill: uses the shadcn CLI to read project config and component docs, then adds, searches, composes and fixes components following styling, form and accessibility rules. Can also start new projects from presets. - [Taste Skill](https://hebbmind.com/ja/skill/taste-skill.md): [Skill] Helps agents build frontends that don't look templated: picks a design direction first, then tunes layout variance, motion intensity and information density. Also includes redesign audits, minimalist and brutalist styles, and design reference generation. - [OpenDesign](https://hebbmind.com/ja/mcp/open-design.md): [MCP] Open-source local design workbench and Claude Design alternative: builds web and mobile prototypes, slides, images and motion videos from a DESIGN.md system, exporting HTML, PDF, PPTX or MP4. MCP lets Claude Code and Codex use it. Needs the macOS or Windows app; Linux from source. - [Impeccable](https://hebbmind.com/ja/skill/impeccable.md): [Skill] Frontend design polish skill: one skill with 24 commands such as polish, audit, critique and typeset, plus 61 deterministic rules that catch typical AI-generated UI problems, with live iteration in the browser. Works with Claude Code, Codex, Cursor and others. - [Impeccable](https://hebbmind.com/ja/plugin/impeccable.md): [Plugin] Frontend design quality plugin: one skill plus 24 commands (audit, critique, polish and more) and 61 built-in deterministic rules that find common design flaws in AI-generated interfaces and fix them one by one. - [HyperFrames](https://hebbmind.com/ja/cli/hyperframes.md): [CLI] Write videos in HTML, CSS and frame-seekable animations, preview them from the CLI and render deterministic MP4s. Comes with agent skills for product launch videos, captions and talking-head re-edits. Maintained by HeyGen; needs Node.js 22+ and FFmpeg. - [HyperFrames Skills](https://hebbmind.com/ja/skill/heygen-com-skills.md): [Skill] HeyGen's official HyperFrames skill set: lets agents write deterministic MP4 videos in HTML, CSS and animation, with workflows for promo videos, explainers, captions and beat-synced music. Needs Node.js 22+ and FFmpeg. - [Diagram Design](https://hebbmind.com/ja/skill/diagram-design.md): [Skill] Generates self-contained HTML+SVG diagrams in an editorial style: architecture, flowcharts, sequence, swimlane, Gantt and dozens more types. Can match brand colors from a website and redraw imported Mermaid, draw.io and Excalidraw sources. - [Penpot MCP Server](https://hebbmind.com/ja/mcp/penpot-mcp.md): [MCP] Official MCP for the open-source design tool Penpot: through the Penpot plugin API, agents can query, modify and generate designs, supporting design-to-code and code-to-design. Run npx -y @penpot/mcp@latest first and load the MCP plugin in Penpot to connect. - [Conversion Rate Optimization (CRO)](https://hebbmind.com/ja/skill/cro.md): [Skill] Conversion rate optimization skill from the marketingskills collection: give it a homepage, landing page, pricing page or form and it diagnoses value proposition, headlines, CTAs, trust signals and friction, returning quick wins, high-impact changes, A/B test ideas and alternative copy. - [Skills For Designers and Engineers](https://hebbmind.com/ja/skill/emilkowalski-skills.md): [Skill] Design engineering skills by Emil Kowalski, author of Sonner and Vaul: choose animation easing and durations, review and improve motion, apply Apple design principles, make web apps feel native on phones, and help pick UI libraries and prototype multiple versions. - [Agentic Awesome Skills](https://hebbmind.com/ja/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills. - [Security Guidance](https://hebbmind.com/ja/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [Playground](https://hebbmind.com/ja/plugin/playground.md): [Plugin] Has the agent build single-file HTML interactive playgrounds: visual controls on one side, live preview on the other, and a prompt to copy back into Claude. Templates for design tuning, data exploration, concept maps, doc annotation, code review and architecture diagrams. By Anthropic. - [daisyUI Colors](https://hebbmind.com/ja/skill/daisyui-colors.md): [Skill] Color rules for daisyUI 5: explains semantic names such as primary, base-100 and error with their -content foregrounds, says to prefer them over fixed Tailwind colors and never add dark: to them, and shows how to enable, create and override themes. Part of the official daisyUI skill. - [Accessibility Compliance](https://hebbmind.com/ja/plugin/accessibility-compliance.md): [Plugin] Accessibility review plugin with an audit command, a UI validation subagent, and WCAG 2.2 and screen reader testing skills. Before design reviews or launch, the agent checks contrast, keyboard use and screen reader support and suggests fixes. For Claude Code; automated checks need Node.js. - [Security Scanning](https://hebbmind.com/ja/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [GDPR Data Handling](https://hebbmind.com/ja/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions. - [UI Design](https://hebbmind.com/ja/plugin/ui-design.md): [Plugin] UI/UX design plugin from the wshobson/agents marketplace with 3 subagents, 9 skills and commands for design review, component creation and accessibility audits, covering design tokens, WCAG 2.2, responsive layout, iOS HIG and Material Design 3 for in-code UI design and review. - [wshobson/agents](https://hebbmind.com/ja/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [wshobson/agents](https://hebbmind.com/ja/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands. - [Trivy](https://hebbmind.com/ja/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security. - [Vault](https://hebbmind.com/ja/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server. - [Anthropic Cybersecurity Skills](https://hebbmind.com/ja/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only. - [synthesize-research](https://hebbmind.com/ja/skill/synthesize-research.md): [Skill] Synthesizes user feedback from interview notes, surveys and support tickets into themes ranked by frequency and impact, and outputs structured insights and roadmap recommendations. Can pull data from knowledge bases or meeting transcripts. From Anthropic's official product-management plugin. - [Design](https://hebbmind.com/ja/plugin/design.md): [Plugin] Plugin for design teams: design critiques, design system audits, UX copy, accessibility checks, user research synthesis and developer handoff notes. Official from Anthropic; works best with Figma connected. - [Compliance Tracking](https://hebbmind.com/ja/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review. - [Web Design Guidelines](https://hebbmind.com/ja/skill/web-design-guidelines.md): [Skill] Reviews UI code against Vercel's Web Interface Guidelines, covering accessibility, focus, forms, animation, typography, dark mode and more, listing issues as file:line. Fetches the latest rules before each review. Maintained by Vercel. - [Nuclei](https://hebbmind.com/ja/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test. - [Gitleaks](https://hebbmind.com/ja/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks. - [TruffleHog](https://hebbmind.com/ja/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives. - [DESIGN.md](https://hebbmind.com/ja/cli/design-md.md): [CLI] Google Labs' DESIGN.md format and CLI: designers capture colors, typography and spacing in a file for agents; lint checks broken references and WCAG contrast, diff compares versions and export outputs design tokens for Tailwind and more. Needs Node.js; the format is in alpha. - [Huashu Design](https://hebbmind.com/ja/skill/huashu-design.md): [Skill] Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed. - [baoyu-skills](https://hebbmind.com/ja/plugin/baoyu-skills.md): [Plugin] Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key. - [promptfoo](https://hebbmind.com/ja/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT. - [Rembg](https://hebbmind.com/ja/cli/rembg.md): [CLI] Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally. Next page: https://hebbmind.com/ja/tools.md?page=2&profession=security%2Cdesign%2Chardware