ツール

Free remote MCP service that turns any GitHub repo or GitHub Pages site into a docs endpoint, so agents can read up-to-date docs and search code on demand and hallucinate fewer APIs. No sign-up or install; self-hosting is also possible.

Spec-driven project management for software: guides brainstorming into a PRD, breaks it into epics and dependent tasks synced as GitHub Issues, answers standup, next-step and blocker questions, and can dispatch several agents to code in parallel. Needs Git, an authenticated gh CLI and a GitHub repo.

Open-source visual traceroute that shows IP geolocation, AS number and carrier for every hop, with continuous MTR probing and JSON output; the full edition can also be deployed as an MCP server.

HTTP client CLI that reimplements HTTPie's syntax in Rust with a focus on performance; key-value pairs on the command line are sent as JSON by default, making it quick to debug REST APIs.

Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg.

Removes backgrounds from images and videos with one AI command: batch whole folders, use a portrait model, refine edges or swap in a solid color, and output transparent MOV or composite video onto a new background. Runs locally; install PyTorch and ffmpeg first. Models download on first run.

asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key.

Moonshot AI's official terminal coding agent: reads and edits code, runs commands, searches files and fetches web pages, with video input, MCP, plugins, subagents and hooks, plus Zed and JetBrains integration via ACP. Needs a Kimi sign-in or Moonshot API key. Replaces the archived Kimi CLI.

Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.

Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.

Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.

From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.

Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.

Scrapes web pages into Markdown or structured data, with full-site crawling, sitemaps, web search and interaction with dynamic pages. Maintained by Firecrawl; the cloud needs an API key (self-hosting is possible), and the keyless hosted endpoint only offers scrape, search and parse.

Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.

Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.

OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime.

monday.com's official plugin in OpenAI's Codex marketplace: search boards, create and update items, assign owners, set timelines and post updates, for campaign schedules, approvals, project tracking and client management. Codex only; needs a monday.com account.

OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools.

OpenAI's official Codex plugin that makes Google Drive the single entry point to search, organize, share and export files, handing Docs, Sheets, Slides and comments to dedicated sub-skills for summaries, edits and new files. Authorize your Google account in Codex.

OpenAI's official Codex plugin for building frontend apps and generating visual assets, testing and debugging in a browser, plus best-practice skills for React, shadcn/ui, Stripe payments and Supabase databases. Codex only.