ツール

Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.

Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.

Has the agent build a local Next.js editor that turns app screenshots into App Store and Google Play marketing images: real device frames, bold headlines, 18 visual styles, multiple languages and RTL layouts, with one-click export of every required size. Needs Node.js.

Scrapes web pages into Markdown or structured data, with full-site crawling, sitemaps, web search and interaction with dynamic pages. Maintained by Firecrawl; the cloud needs an API key (self-hosting is possible), and the keyless hosted endpoint only offers scrape, search and parse.

OpenAI's official Codex plugin for Outlook Calendar: summarizes your day, compares availability across people, preps meetings, explains busy and tentative states, and creates, reschedules or cancels meetings. Requires Codex with a ChatGPT sign-in and a Microsoft account.

OpenAI's official Codex plugin for Google Calendar: summarize today's schedule, compare availability across people, prep for meetings, and create, edit or delete events. Requires signing in to Codex with ChatGPT and authorizing your Google account.

Turns conversations and notes into structured Notion pages such as team wikis, how-to guides, decision records and FAQs, linked to related pages. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP.

Prepares meetings using past notes, requirements and decisions in Notion: picks a template by meeting type, drafts the agenda and pre-reads, and adds research. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP.

Searches multiple pages in your Notion workspace and turns them into briefs, research summaries, comparisons or full reports with citations, written back to Notion. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP.

OpenAI's official Codex plugin for adding the OpenAI Ads measurement pixel and optional Conversions API (CAPI) to a website, with local validation scripts plus key and deduplication guidance. Needs the site's source and an OpenAI Ads account; review manually before launch.

OpenAI's official Codex plugin for Microsoft Teams: summarizes chats and channel messages, pulls out action items, and drafts channel replies or meeting follow-ups. Requires signing in to Codex with ChatGPT and authorizing a Microsoft account.

Builds, refactors and debugs ChatGPT apps with the OpenAI Apps SDK: plans tools, scaffolds the MCP server and UI widgets, and checks the work against official docs. Maintained by OpenAI; formerly chatgpt-apps in openai/skills.

Tests and debugs a locally running frontend with Codex's Browser plugin or Playwright: checks blank pages, framework and console errors, captures screenshots, re-verifies after fixes and writes a QA report. Maintained by OpenAI; formerly playwright-interactive in openai/skills.

OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install.

Reproduces issues on the Android emulator: installs builds, drives the UI with adb, dumps the UI tree, takes screenshots, captures logcat, and gathers performance evidence with Simpleperf and Perfetto. OpenAI's official Codex plugin; needs the Android SDK.

Granola's official plugin in OpenAI's Codex marketplace: search past Granola meeting notes by topic, person, company or date, and cite the discussions and decisions when writing proposals, reports or analyses. Codex only; needs a Granola account already recording meetings.

OpenAI's official Codex plugin for Outlook mail: triages your inbox, summarizes threads, extracts action items, and drafts replies or forwards, for people who handle heavy email loads. Requires Codex with a ChatGPT sign-in and an authorized Microsoft account.

OpenAI's official Codex plugin for building frontend apps and generating visual assets, testing and debugging in a browser, plus best-practice skills for React, shadcn/ui, Stripe payments and Supabase databases. Codex only.

OpenAI's official Codex plugin for macOS apps: building and running, SwiftUI scenes and AppKit interop, testing and troubleshooting, signing, notarization and packaging, and logging instrumentation. Requires macOS and Xcode; Codex only.

Figma's Codex plugin in OpenAI's official marketplace: implements UI from designs, generates Code Connect mappings, and creates or updates pages, component libraries, FigJam diagrams and slides in Figma. Needs a connected Figma account.