ツール

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.

A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.

Lets agents read and write Figma: extract variables, components and styles, create and edit screens, FigJam boards and slides on the canvas, and run accessibility checks and design-system audits. Needs a Figma personal access token, the Figma desktop app, Node.js and the companion plugin.

Gives agents a live local Excalidraw canvas: add, edit and delete elements to draw architecture diagrams and flowcharts, take screenshots to check the result, convert Mermaid and export .excalidraw files. Runs locally with no API key; also ships a CLI and an agent skill.

Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.

Reviews mobile and desktop app designs against Apple's Human Interface Guidelines, bundled as 123 pages from developer.apple.com, citing the exact guideline through five review lenses, and flags generic, templated choices. Works on screenshots, mockups or code for SwiftUI, Flutter or Electron.

65 skills built on methods from business, marketing and design bestsellers like Influence, StoryBrand and The Lean Startup: positioning, copywriting, conversion optimization, sales negotiation, UX review, plus step-by-step startup and site-building guides. Prompt-only, no API key needed.

Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.

Turns a paper's method description (text or PDF) or data files into publication-ready diagrams and plots, with several AI reviewer roles refining each figure. Needs an OpenAI or Gemini API key (billed per image), Python and uv. A community reimplementation, not by the original paper's authors.

MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription.

TypeUI's design fundamentals skill: general UI and interaction principles covering visual hierarchy, spacing, typography, 30 laws of interaction and WCAG accessibility. Needs Node.js to install; the TypeUI design-system library needs its hosted MCP and sign-in.

Builds editable Figma designs on the canvas from screens, modals or sidebars in your code, or from a text description, reusing components and variables from the file's published design system first. Maintained by Figma; needs the remote Figma MCP server and the figma-use skill.

Figma's official skill: the agent writes Mermaid, then uses the Figma MCP to build flowcharts and sequence, state, Gantt and ER diagrams in FigJam for you to tweak by hand. Unsupported types like pie charts and mind maps are flagged upfront. Needs a Figma account and the remote MCP server.

Figma's official skill for building FigJam boards through the Figma MCP: sticky notes, sections, connectors, shapes and tables for brainstorms, retros and meetings. Needs a Figma account, the remote MCP server and the figma-use skill; canvas writes are free in beta; usage pricing is planned.

Figma's official plugin: connects the remote Figma MCP server and bundles skills for design-to-code, Code Connect, and generating designs and libraries, letting agents read design context and write to the canvas. Needs a Figma account; Starter plans and View/Collab seats get 6 calls a month.

Turns Figma designs into production code in your project, using the design screenshot as the visual target and reusing existing components, design tokens and Code Connect mappings first. Maintained by Figma; needs the Figma MCP server (free plans get only 6 calls a month).

Figma's official skill collection: implement designs as code, map components with Code Connect, generate design-system libraries from code, and build screens and FigJam diagrams on the canvas. Needs the Figma MCP server; canvas writes are in beta and currently free.

Figma's official skill that teaches agents to run Plugin API scripts via use_figma, creating and editing nodes, components, variables and auto layout directly on the canvas. Load it before any use_figma call. Needs a Figma account and the remote MCP server.

The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.

Self-hostable long-term memory for agents, offering MCP, a REST API and a web dashboard: semantic search, knowledge graph and automatic memory consolidation. Embeddings are computed locally; choose SQLite, Cloudflare or Milvus as the backend.

Breaks reference UIs you like (screenshots, images or URLs) into a structured design DNA JSON covering design tokens, overall style and visual effects, then builds new pages from your content in that style. Installing needs Node.js; no API key required.

Command-line tool for inspecting, compressing and optimizing glTF/GLB 3D models, with Draco and Meshopt mesh compression, texture resizing and WebP/KTX2 compression; a single optimize command handles it all.

SDK and CLI for reading, editing and optimizing glTF 2.0 3D models: one optimize command does it all, or run Draco and Meshopt geometry compression, texture resizing and WebP or KTX2 compression separately. Suits game and web 3D assets.

Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.