ツール

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.

Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.

WhatsApp CLI: pair as a linked device, sync messages to local SQLite, search offline, send text and files, and manage groups, with --json output for agents. Built on the unofficial WhatsApp Web protocol.

Python library with a built-in MCP server for US SEC EDGAR data: search 10-K, 10-Q, 8-K and other filings and read XBRL-standardized financial statements, Form 4 insider trades and 13F holdings. Free with no API key; just set an EDGAR_IDENTITY.

Open-source local video editor with a multi-track timeline. Claude Code or Codex can rough-cut by chat, cut flubs and pauses from the transcript, and add subtitles, transitions and music as drafts you approve. Needs the desktop app with a project open; AI features need your own API keys.

Distills 20+ full articles by one author into six layers of rules (word choice, structure, topics, sources, mental frameworks, visuals and layout) in a Writing-DNA.md the agent reads before writing, to reproduce that style. For capturing your own or your team's voice, not impersonating others.

Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.

A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.

Blog writing and SEO skill suite: /blog commands for strategy, outlines, drafting, rewrites, quality audits, multilingual publishing and refreshing old posts; drafts scoring under 90/100 are reworked. Get the review subagents and scripts via the plugin or install script; needs Python 3.11+.

An end-to-end blogging plugin: topic research, outlines, drafting, rewrites, fact-checking, SEO and AI-citation optimization, plus multilingual publishing. Each post is scored on a 100-point rubric and reworked if under 90. Needs Python 3.11+; optional images and voiceover use a Gemini API key.

Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use.

Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.

Apify's official skill collection: picks from 130+ curated Actors to scrape public data from social networks, maps, e-commerce sites and more, and can also build, package and deploy Actors. Needs an Apify account; a free tier is available.

Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.

A Chinese-first editing skill that also works on English: strips boilerplate, padded lead-ins and stiff phrasing while keeping numbers, conditions, commitments and the author's voice. Can flag issues without rewriting. It doesn't detect AI text or promise to evade detectors.

Open-source video editing API and MCP server: add video, audio, subtitles, stickers, effects and keyframe animation, then generate drafts you can open and keep editing in CapCut or JianYing. Requires running the Python service locally and installing FFmpeg.

App Store Optimization and app marketing skills: keyword research, title and description optimization, competitor tracking, review management, launch and ad planning. Works from general knowledge alone; add an Appeeky API key or MCP for real App Store data (free accounts get 100 credits a month).

MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription.

A CLI and Python library by Simon Willison: imports JSON and CSV straight into SQLite with automatic table creation, runs in-memory SQL queries over files, and supports full-text search and table transformations.

The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.

Unofficial Intercom CLI built with Printing Press, covering the full REST API: sync conversations and contacts for offline search, bulk-tag conversations about one incident, see customer overviews and SLA reports, and pull or push help articles. US, EU and AU regions; needs an access token.

Unofficial Gorgias CLI built with Printing Press for e-commerce support: lets AI list, reply to and update tickets, look up customers, find stale or incomplete tickets, and sync data locally for full-text search and SQL. Includes a skill and MCP server. Needs a Gorgias account and API key.

Connects Google Search Console so agents can analyze queries, clicks and rankings, compare periods, check URL indexing status and manage sitemaps. Not an official Google project; you need your own Google Cloud OAuth credentials or a service account.