ツール

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.

Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI.

One CLI for Gmail, Drive, Calendar, Docs, Sheets and other Google Workspace APIs, with commands generated from the Discovery service, JSON output and 100+ Agent Skills. From the googleworkspace org but not officially supported; needs OAuth via a Google Cloud project.

Generates zero-dependency, animated HTML slide decks: previews several visual styles to choose from first, and can convert PowerPoint decks to web slides. Made for non-designers who don't write CSS.

Official web auditing tool from the Google Chrome team: score pages on performance, accessibility, best practices and SEO from the command line and get HTML, JSON or CSV reports, so agents can iterate on a page. Needs Node 22+ and Chrome.

Gives coding agents IDE-like symbol-level code search, editing and refactoring via language servers (LSP) across 40+ languages, with cross-session memory. An optional paid JetBrains plugin backend adds breakpoint debugging. Install with uv first.

Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension.

Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.

Browser Use's video editing skill: put raw footage in a folder and chat with Claude Code or Codex to get a finished cut, with filler words and pauses removed, color grading, burned-in subtitles, animations and per-cut self-checks. Needs ffmpeg, Python (uv) and an ElevenLabs API key.

Packs a whole repository into a single AI-friendly file (XML, Markdown, JSON or plain text) with per-file token counts, automatically excludes files containing secrets, and can compress code with Tree-sitter or pack remote GitHub repos directly.

Status line plugin for Claude Code showing the model, Git branch, context usage and rate limits live below the input, optionally with running tools, active subagents and todo progress.

Large multi-domain plugin marketplace: 99 plugins bundle hundreds of skills, agents and slash commands covering engineering, marketing, product, project management, regulatory and quality, finance and C-level advisory. Also offers install options for Codex, Gemini CLI and others.

A collection of 380+ skills across engineering, product, marketing, compliance, finance and executive advisory roles, with many standard-library Python scripts. Claude Code can install them by domain as plugins; works with Codex, Gemini CLI and a dozen other agents.

For SaaS customer success teams: three standard-library Python scripts turn customer data into health scores, churn-risk tiers and ranked expansion opportunities, with reproducible results. Needs Python and customer data in the sample JSON format. Part of the claude-skills collection.

Marketing team plugin with 40+ skills for copy and content, SEO and AI search optimization, conversion optimization, email and social, paid ads, growth strategy and competitor analysis, plus Python analysis scripts. Most need no account; a few, like YouTube transcripts, need API keys.

Generates single-file HTML slide decks with horizontal paging and two built-in visual systems (editorial magazine and Swiss International style), plus presenter mode with speaker notes. Can also make slide illustrations and covers for various platforms. By Guizang.

Terminal coding agent from Charm: switch models mid-session while keeping context, manage multiple sessions per project, pull code context via LSP, and extend with MCP and any OpenAI- or Anthropic-compatible API.

Open-source terminal coding agent from Alibaba's Qwen team with subagents, auto memory, skills and MCP. Works with Qwen, OpenAI, Anthropic, Gemini and other APIs or local models, with IDE plugins and a headless mode (qwen -p).

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Helps turn a fuzzy intention into a concrete, measurable goal before work starts: outcome, verification evidence, success threshold, scope and stop conditions, then creates it with the goal tool (get_goal, create_goal). From OpenAI's official skills repo.

Graph-based task tracker CLI (bd) for coding agents: replaces Markdown plans with a dependency-aware task graph that gives long tasks persistent memory. Stored in Dolt and syncable across machines; bd init hooks it into Claude Code and Codex automatically.