ツール

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.

Open-source meeting bot and real-time transcription platform: sends a bot into Google Meet, Teams or Zoom and transcribes live by speaker, with MCP so agents can dispatch bots and read transcripts. Use the hosted service (API key) or self-host.

Contract review plugin: five parallel subagents score contracts and flag risky clauses, compare versions, spot missing terms, explain legalese and draft counterproposals, NDAs, terms of service and privacy policies with GDPR/CCPA gap checks. No account needed; US-law focused; needs lawyer review.

Marketing work in Claude Code via /market commands: audits and scores a site's copy, conversion and SEO, and generates copy, email sequences, a 30-day social calendar, ad creative, launch plans and client proposals, with PDF reports. Install via the README script; PDF export needs Python.

A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.

Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.

Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.

The legal and risk department of headcount's company-style agent org: 8 skills for contracts and negotiation, governance, disputes and evidence, IP, privacy, compliance and a risk register; can vet other departments' work. Skills only, no account; laws vary by region, so have a lawyer review.

The HR department of headcount's company-style agent org: 12 skills for org design, hiring, pay and levels, performance, employee relations, compliance, benefits and leave, on/offboarding, payroll, workforce planning and training. No account needed; have HR or a lawyer check compliance.

65 skills built on methods from business, marketing and design bestsellers like Influence, StoryBrand and The Lean Startup: positioning, copywriting, conversion optimization, sales negotiation, UX review, plus step-by-step startup and site-building guides. Prompt-only, no API key needed.

Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.

App Store Optimization and app marketing skills: keyword research, title and description optimization, competitor tracking, review management, launch and ad planning. Works from general knowledge alone; add an Appeeky API key or MCP for real App Store data (free accounts get 100 credits a month).

MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription.

A CLI and Python library by Simon Willison: imports JSON and CSV straight into SQLite with automatic table creation, runs in-memory SQL queries over files, and supports full-text search and table transformations.

The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.

Self-hostable long-term memory for agents, offering MCP, a REST API and a web dashboard: semantic search, knowledge graph and automatic memory consolidation. Embeddings are computed locally; choose SQLite, Cloudflare or Milvus as the backend.

Stripe's official plugin: bundles the remote Stripe MCP with skills for integration best practices, Connect, Stripe Apps and API upgrades, plus commands that explain errors and list test card numbers. Available in the official Claude and Codex marketplaces.

Checks domain availability in bulk: combines your keywords with prefixes, suffixes and multiple TLDs, can list only available names, and spots domains listed for sale. Ships an MCP server; handy for naming a startup or picking a brand domain. No account needed.

Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.

Skills for solo founders: website SEO and AI search optimization (GEO), mining user needs from Reddit, X and GitHub, domain price comparison, Product Hunt search, and logo and banner generation. Some need API keys or tokens for Gemini, twitterapi.io, RequestHunt or Product Hunt.

Contract assistant for freelancers and small businesses: scores contracts and flags risks per clause, explains terms plainly, compares versions, and drafts NDAs, privacy policies and counterproposals. Installs via the repo script; US-law oriented; PDF export needs Python; have a lawyer review.

German-language HR plugin for German startups of about 100 people: employment contracts, DATEV payroll handoff, personnel files and data protection, AGG complaints, works councils, absences, benefits and dismissals under German labor law. German law only; have a lawyer or HR pro review.

Recommends daily papers from arXiv and Semantic Scholar by research interest, reads them and writes illustrated Obsidian notes and a paper graph; can also search venues like CVPR and NeurIPS. Needs Python 3, Obsidian, a vault path and an interests config; the web app needs an Anthropic API key.