ツール

ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.

Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.

When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo.

Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.

Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.

Headless browser written from scratch in Zig for AI agents and automation, using less memory and running faster than headless Chrome in official benchmarks. fetch turns pages into Markdown, and it can serve CDP or MCP. Telemetry is on by default (an env var disables it); Windows needs WSL.

HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.

Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.

Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

Adds a searchable, copyable text layer to scanned PDFs, with automatic deskew, rotation and size optimization, outputting PDF/A by default. Built on Tesseract, supports 100+ languages and runs fully locally.

All-in-one plugin for small business owners: 44 skills covering cash flow and bookkeeping, collections and taxes, customer acquisition and marketing, customer feedback, inventory, hiring and contract review. Anything touching money or customers needs your approval. Official from Anthropic.

For internal auditors running SOX tests: lists key controls by area (revenue, procure-to-pay, payroll, close, ITGC) and period, sets sample sizes, samples from your population, and generates test workpaper templates and deficiency assessments. Needs professional review. Official from Anthropic.

30/60/90-day cash flow forecasts for small businesses: reads receivables, payables and collections from your accounting system, PayPal or Stripe (or an uploaded CSV), gives a forecast with ranges and risk flags, and exports to Excel. Have an accountant review. Official from Anthropic.

Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic.

Tax prep for US small business owners: estimates quarterly taxes from QuickBooks, Xero or an uploaded P&L, and at year end lists contractors paid over $600 for 1099-NEC, flagging missing W-9s, for your accountant. US federal only; books must be closed. Not tax advice. From Anthropic.

Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.

Breaks budget-versus-actual, year-over-year and month-over-month variances into volume, price and mix drivers, filters by materiality thresholds, writes variance commentary and provides waterfall breakdowns for monthly business reviews. From Anthropic's official finance plugin.

Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.

Methodology reference for US SOX 404 internal control audits: scoping significant accounts, sampling methods, workpaper and evidence standards, and classifying deficiencies, significant deficiencies and material weaknesses. Not audit or legal advice; needs professional review. By Anthropic.

Anthropic's official small-business skill for bills: reads vendor, amount and due date from email, PDFs or photos, dedupes, codes to accounts, matches POs and drafts a payment plan. Posting and paying each need approval; it never auto-pays. Works with QuickBooks, Xero, NetSuite or file export.

Reorder planning for small merchants: reads sales and stock from Shopify, Square, NetSuite or CSV, projects stockout dates from 7- and 28-day velocity, sizes reorders from 60-day usage plus lead time, drafts POs and supplier emails, and flags dead stock. Nothing is sent unapproved. By Anthropic.