ツール

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Product management skills collection: 69 skills and 42 chained workflows for discovery, strategy, PRDs, roadmaps, go-to-market and growth analytics. Installing it as a Claude Code plugin also adds commands such as /write-prd.

Plugin marketplace for product managers: 9 plugins, 60+ skills and 40+ chained workflows covering product discovery, strategy, PRDs and roadmaps, market research, go-to-market and growth. Installs in both Claude Code and Codex.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need.

Distills a colleague, friend or public figure's chats, documents and public material into a persona profile packaged as a callable skill, for handoffs and preserving know-how. Collects material from Lark, DingTalk, Slack and more. Mind privacy and consent when using others' data.

Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi.

Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control.

Open-source SEO tool (a Semrush/Ahrefs alternative) with built-in MCP for keyword research, rank tracking, competitor and backlink analysis, site audits and AI search visibility checks. The hosted version has a free trial; self-hosting needs a pay-as-you-go DataForSEO key.

Open-source Zapier alternative with a built-in MCP server: agents can build and test automations in plain language, manage tables, or call hundreds of apps like email, spreadsheets and chat. Use the cloud or self-host, enable the MCP server in settings and connect via OAuth.

Community-maintained modern replacement for ls (successor to exa) with colored output, tree view, Git status and file icons, plus .gitignore filtering for quickly scanning directory structures.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

SEO audit plugin covering technical SEO, E-E-A-T content quality, Schema markup, Core Web Vitals, local and e-commerce SEO, and GEO for AI search. Parallel subagents audit and return a prioritized action list. Needs Python 3.10+; Playwright optional for SPA rendering and screenshots.

Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.

Google's official GKE basics skill: creating clusters, choosing Autopilot or Standard, getting kubectl credentials, configuring Workload Identity and deploying workloads, plus a list of common gotchas. Needs gcloud and a GCP project.

Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.

Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch.

AI2's tool for converting PDFs and scans to Markdown with a vision LLM, handling equations, tables, handwriting and multi-column layouts, suited to bulk digitizing papers and archives. Local runs need an NVIDIA GPU with 12GB+ VRAM; otherwise use a paid OpenAI-compatible remote endpoint.

Turns a project directory or website URL into a roughly 20-second launch video: gathers copy, colors and real UI from the code or live site, storyboards it, and builds visuals, music and the render with tools already on the machine, delivering an MP4, poster frame and share copy.

Turns the current project into a 15-25 second shareable launch video: reads the code, plans a concept and storyboard, hands a composition brief to Hyperframes to render with music and sound effects, and writes share copy. Supports tone, format and duration options plus optional Kokoro voiceover.

Browser control from the browser-use team: an editable CDP connection lets agents drive the Chrome you are already using, writing missing helper functions as they go and keeping them for reuse. Also offers an MCP server. Allow remote debugging in Chrome on first use.

Sealos's Kubernetes lifecycle CLI: one sealos run deploys a highly available cluster across multiple servers, and cluster images install databases, middleware and other apps, with offline delivery support. Linux only.

Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform.

Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems.