ツール

Open-source font editor: fontforge -script runs Python scripts headlessly to batch-edit glyphs, convert between OTF, TTF, UFO and other formats, and generate fonts, for type design and font processing. Homebrew installs the CLI version; install the desktop app for the GUI.

Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.

Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key.

Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.

Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.

Trail of Bits plugin for Culture Index assessments: profiles individual traits, checks team balance (gas, brake, glue), compares people with job profiles to flag burnout and attrition risk, and helps draft hiring profiles. Needs your own reports (JSON or PDF); PDFs need uv.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.

77 product management skills built on JTBD, opportunity solution trees, RICE, Working Backwards and other proven methods: user interviews, PRDs, roadmaps, prioritization, competitive intel, market sizing and sunsetting, explaining the frameworks as they go. CC BY-NC-SA licensed.

Plugin marketplace of 77 product management skills based on JTBD, opportunity solution trees, RICE and other proven methods, covering user interviews, PRDs, roadmaps, prioritization, market sizing and product sunsets. A Codex skill pack is also available.

Has the agent build a local Next.js editor that turns app screenshots into App Store and Google Play marketing images: real device frames, bold headlines, 18 visual styles, multiple languages and RTL layouts, with one-click export of every required size. Needs Node.js.

Scrapes web pages into Markdown or structured data, with full-site crawling, sitemaps, web search and interaction with dynamic pages. Maintained by Firecrawl; the cloud needs an API key (self-hosting is possible), and the keyless hosted endpoint only offers scrape, search and parse.

Prepares meetings using past notes, requirements and decisions in Notion: picks a template by meeting type, drafts the agenda and pre-reads, and adds research. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP.

Canva's official skill (OpenAI plugin directory): translates all text in a Canva design into another language and saves a copy, leaving the original intact. Useful for multilingual marketing. Needs a Canva account and the Canva MCP; longer text may need layout tweaks.

OpenAI's official Codex plugin for adding the OpenAI Ads measurement pixel and optional Conversions API (CAPI) to a website, with local validation scripts plus key and deduplication guidance. Needs the site's source and an OpenAI Ads account; review manually before launch.

Builds, refactors and debugs ChatGPT apps with the OpenAI Apps SDK: plans tools, scaffolds the MCP server and UI widgets, and checks the work against official docs. Maintained by OpenAI; formerly chatgpt-apps in openai/skills.

Tests and debugs a locally running frontend with Codex's Browser plugin or Playwright: checks blank pages, framework and console errors, captures screenshots, re-verifies after fixes and writes a QA report. Maintained by OpenAI; formerly playwright-interactive in openai/skills.

OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install.

OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues.

Adobe's official Codex plugin, listed in OpenAI's plugin marketplace: batch-edit and retouch photos by chat, build social graphics from Express templates, reformat landscape video into vertical shorts and search Creative Cloud assets. Try it as a guest; sign in for more features.

Granola's official plugin in OpenAI's Codex marketplace: search past Granola meeting notes by topic, person, company or date, and cite the discussions and decisions when writing proposals, reports or analyses. Codex only; needs a Granola account already recording meetings.

OpenAI's official Codex plugin for building frontend apps and generating visual assets, testing and debugging in a browser, plus best-practice skills for React, shadcn/ui, Stripe payments and Supabase databases. Codex only.