ツール

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Plugin marketplace for AI research with nearly 100 skills in 23 categories, from ideation, fine-tuning and post-training to distributed training, inference serving, evaluation and paper writing, coordinated end to end by the autoresearch skill.

Command-line framework for warehouse modeling and ELT transformations: write models in SQL and let dbt handle dependencies, data tests and documentation. v2 is rewritten in Rust as a single binary. Maintained by dbt Labs; needs a data warehouse connection.

Nearly 100 skills spanning the AI research workflow: ideation and literature review, fine-tuning and post-training, distributed training, inference serving, evaluation, interpretability and paper writing, tied together by an autoresearch orchestration skill.

Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test.

MiniMax's official Excel skill: read, analyze, create, edit and validate xlsx files and fix broken formulas. Edits existing files at the XML level to keep formatting, formulas and pivot tables; writes results as formulas with finance-style color coding. Needs Python (pandas); LibreOffice optional.

Codex-native version of Academic Research Skills: one skill chains topic selection and literature review, drafting, simulated peer review, revision guidance and experiment planning, with citation verification and integrity checks. For grad students and faculty. Needs Codex; CC BY-NC 4.0 license.

PostgreSQL command-line client with smart autocompletion and syntax highlighting. Compatible with psql environment variables, and -c runs a statement and exits, so agents can query databases non-interactively.

Rewrites an article or script as narration, then builds a click-through 16:9 web presentation you can screen-record into an explainer video, with optional synthesized voiceover. Good for lessons, YouTube tutorials and product walkthroughs. Needs Node.js; voiceover needs a MiniMax or OpenAI key.

ConardLi's skill collection: turn articles or scripts into web presentations you can screen-record as videos (23 themes, optional voiceover), lay out material as shareable long-form web pages, search local knowledge base folders, web design, and GPT-Image-2 image generation with 79 templates.

Turns Markdown outlines into interactive HTML mind maps you can collapse and zoom, with inlined assets for offline use and a watch mode that refreshes live. Good for mapping requirements, lesson planning and organizing knowledge.

Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.

curl for gRPC: call any gRPC method with JSON, including bidirectional streaming, browse service definitions via server reflection, proto source files or protosets, with TLS and mutual TLS support.

Simon Willison's LLM CLI and Python library: call OpenAI, Claude, Gemini and local models from the terminal, with conversations logged to SQLite automatically, plus embeddings, structured extraction, tool calling and a plugin system.

Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available.

A du replacement written in Rust that shows disk usage as a directory tree with proportion bars, making large files and folders easy to spot. Filter by depth, count or regex, and output JSON with -j for agents to parse.

Converts text to speech with Microsoft Edge's online TTS service and can generate subtitle files at the same time. No API key needed, with voices for many languages. Not an official Microsoft project and depends on that online service staying available.

ByteDance's open-source, general software engineering agent: trae-cli edits files and runs commands from natural language, supports multiple model providers and MCP, and records full execution trajectories. Transparent design suits agent research and customization. Needs your own model API key.

Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP).

Connects to the Arize Phoenix observability platform so agents can query LLM traces and sessions, manage prompts, browse datasets and read experiment evaluation results. Maintained by Arize; needs a self-hosted or cloud Phoenix instance.

MySQL terminal client with smart autocompletion and syntax highlighting, also compatible with MariaDB and TiDB. Supports --execute and batch mode with CSV or table output, so agents can run SQL directly.

Publishes SQLite databases as browsable, queryable web pages and JSON APIs, with SQL queries, metadata and plugins, and deploys to Cloud Run and other platforms with datasette publish. Great for data exploration and data journalism. Needs Python 3.10+.

Open-source AI presentation generator that builds slides from a topic or uploaded documents and exports PPTX or PDF, with a built-in MCP endpoint for agents. Good for lesson decks and reports. Self-host with Docker and configure an LLM API key, then have an admin create an MCP key.

Google's official dependency vulnerability scanner: parses project lockfiles and container images, checks them against the OSV.dev database to find affected dependencies, and can suggest upgrade fixes (experimental).