ツール

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

Define multi-container apps in compose.yaml and bring up services, databases, caches and the rest with one docker compose up, handy for agents setting up local dev and test dependencies. Maintained by Docker; included with Docker Desktop on macOS.

Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.

Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.

Headless browser written from scratch in Zig for AI agents and automation, using less memory and running faster than headless Chrome in official benchmarks. fetch turns pages into Markdown, and it can serve CDP or MCP. Telemetry is on by default (an env var disables it); Windows needs WSL.

Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.

Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.

When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo.

Command runner that saves and runs project commands in a justfile, with make-inspired but simpler syntax. Agents can use just --list to discover a project's build, test and deploy commands and run them directly.

Lets agents create and edit draw.io diagrams such as flowcharts and architecture diagrams in plain language, with live browser preview, version history and export to .drawio, PNG or SVG. Includes an embedded server; runs locally with no API key.

Claude Code plugin for Next AI Draw.io that starts its Draw.io MCP server via npx. Generate and edit flowcharts, architecture and sequence diagrams in plain language, with live browser preview, version history and .drawio export. Needs Node.js.

Distills technical books, doc folders or paper collections (PDF, EPUB, DOCX, Markdown and more) into an agent skill with a core framework, on-demand chapter files, glossary and cheat sheet for lookup while working. Extraction needs local Python; poppler or docling optional for PDFs.

Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.

Terminal multiplexer written in Rust, an alternative to tmux, with layout files, floating and stacked panes, WebAssembly plugins and a built-in web client. Handy for running several agent sessions at once.

Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.

Polyglot dev environment manager: declare Node, Python, Go and other tool versions, environment variables and project tasks in mise.toml; mise exec and mise run install tools on demand and run them, with one config shared by local and CI.

Calls Codex from Claude Code for read-only or adversarial code reviews, or delegates tasks to Codex to run in the background. Maintained by OpenAI; needs a ChatGPT account (the free tier works) or an API key.

Adds a workflow layer to OpenAI's Codex CLI: requirement clarification, plan review, persistent goals, parallel multi-agent teams and tmux session management, with project state in .omx/ and a bundled Codex plugin. Community project; needs a signed-in Codex CLI, macOS or Linux recommended.

Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.

Helps with headcount planning and org design: maps reporting lines and spans of control, sequences upcoming hires, estimates people costs, and flags structural issues like single points of failure or top-heavy management. Works in plain chat. Official from Anthropic.

Everyday software engineering plugin: standup summaries, code review, structured debugging, architecture decision records, incident response and pre-deploy checks. Official from Anthropic, built mainly for Cowork but also usable in Claude Code.

Tracks the hiring funnel through sourcing, screening, interviews, debrief and offer, watching stage time and conversion, source effectiveness, offer acceptance and time to hire. With an ATS connected it pulls candidate data and updates status. A brief skill from Anthropic's human-resources plugin.

Checks hours before payroll for US small businesses: totals regular time, overtime and PTO from Gusto, QuickBooks Payroll or timesheets, and flags missed punches, overtime anomalies, rate changes and mid-period hires or exits. Prepares only, never runs payroll. Official from Anthropic.

Compensation analysis for HR and managers: market pay percentiles by role, level and location, offer competitiveness checks and equity modeling; upload a pay sheet to find employees outside their band and flight risks. Without a comp data source it uses public web data, so verify. By Anthropic.