ツール

Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.

Adobe's official Codex plugin, listed in OpenAI's plugin marketplace: batch-edit and retouch photos by chat, build social graphics from Express templates, reformat landscape video into vertical shorts and search Creative Cloud assets. Try it as a guest; sign in for more features.

OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues.

Canva's official skill (OpenAI plugin directory): translates all text in a Canva design into another language and saves a copy, leaving the original intact. Useful for multilingual marketing. Needs a Canva account and the Canva MCP; longer text may need layout tweaks.

OpenAI's official Codex plugin that starts from a brief, product shots or references to generate marketing concepts, mood boards, product scenes, ad directions and social assets, compared and iterated on a reviewable board. Works with Figma and Canva.

Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.

Figma's Codex plugin in OpenAI's official marketplace: implements UI from designs, generates Code Connect mappings, and creates or updates pages, component libraries, FigJam diagrams and slides in Figma. Needs a connected Figma account.

Has the agent build a local Next.js editor that turns app screenshots into App Store and Google Play marketing images: real device frames, bold headlines, 18 visual styles, multiple languages and RTL layouts, with one-click export of every required size. Needs Node.js.

Lets agents operate Home Assistant: control devices, query state and history, create and debug automations and edit dashboards, with 80+ tools. Community-maintained (unofficial); requires your own Home Assistant instance, and running via uvx needs a long-lived access token.

Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.

Manage Kubernetes clusters in natural language: translates intent into kubectl operations and runs them, and can serve as an MCP server for other agents. Uses Gemini by default (API key required) and also supports OpenAI and local models. Maintained by Google Cloud.

Adds a lightweight interactive WebGL globe with the cobe library: canvas sizing for device pixel ratio, location markers, rotation in onRender, resize handling and teardown, for plain pages or React/Next.js hero sections.

Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference.

Helps the agent add or debug web animations with GSAP: tweens, timelines and position parameters, easing, stagger and ScrollTrigger pin and scrub, plus fixes for jank, cleanup with gsap.context() in React and refreshing after images load.

Gives the agent three exact Tailwind arbitrary-value shadow utilities (sm, md, lg) for layered, neutral elevation on cards, controls, popovers and hero media, with rules against mixing them with default shadows, tinting or stacking.

Adds scroll-reveal animations that fire when elements enter the viewport, using an IntersectionObserver snippet plus keyframes and a Tailwind arbitrary animation class; tune threshold, rootMargin, duration, delay and play-once behavior.

Reveals headings and short copy word by word through an overflow mask as they scroll into view, using GSAP ScrollTrigger and a split helper that avoids the paid SplitText plugin, with aria-label, reduced-motion support and React cleanup.

Converts raster images like JPG and PNG to SVG, handling color tracing, black-and-white line art and unevenly lit scans, for vectorizing logos, illustrations and old drawings. The CLI is a 1.0 preview installed with cargo (needs Rust); a desktop app is also available.

General guidance for building UI with Tailwind CSS: responsive and state variants, dark mode, sparing arbitrary values, components before @apply, and pitfalls such as dynamically built class names missing in production, with button and hero examples.

Turns a theme, a line, an article or photos into a minimal, whitespace-heavy indie-zine portrait poster, and can distill reusable style rules and prompts from reference images, with built-in quality checks. Needs host image generation (e.g. Codex); otherwise outputs prompts only.

Builds seamless infinite marquees for logos, testimonials, screenshots or tags by duplicating the item sequence and translating the track from 0 to -50%, with stable widths, faded edges, optional hover pause and reduced-motion handling.

Adds thin vertical guide lines at the content container edges plus small corner squares for a measured, structured layout, with CSS tokens and pseudo-element code that keeps guides behind content and out of pointer events.

Builds cinematic, scroll-driven product storytelling with GSAP ScrollTrigger: pinned scenes, scrubbed timelines, progressive UI reveals and section handoffs, with cleanup in React, simpler choreography on small screens and readable copy and CTAs.

Designs or rewrites a high-converting SaaS pricing page: gathers plans, limits, upgrade triggers and objections, then structures a value headline, monthly/annual toggle, tiered plans, comparison, FAQ and trust sections with copy templates.