ツール

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.

Support persona skill for the gws CLI: triages support-labeled Gmail, turns emails into tasks, logs tickets in Google Sheets, escalates urgent issues to Chat and books follow-ups. Needs gws authorized via your own Google Cloud project plus its companion skills; not officially supported by Google.

Built-in gws CLI skill: lets agents create Google Forms, add or edit questions in bulk, publish and read responses, handy for sign-ups, surveys and class feedback. Needs gws with a Google account authorized via your own Google Cloud project; not an officially supported Google product.

Skill collection for the gws CLI: one skill per Workspace API plus recipes for common Gmail, Drive, Docs, Calendar and Sheets workflows. Install gws and authorize your Google account first; not an officially supported Google product.

One CLI for Gmail, Drive, Calendar, Docs, Sheets and other Google Workspace APIs, with commands generated from the Discovery service, JSON output and 100+ Agent Skills. From the googleworkspace org but not officially supported; needs OAuth via a Google Cloud project.

Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Browser Use's video editing skill: put raw footage in a folder and chat with Claude Code or Codex to get a finished cut, with filler words and pauses removed, color grading, burned-in subtitles, animations and per-cut self-checks. Needs ffmpeg, Python (uv) and an ElevenLabs API key.

For SaaS customer success teams: three standard-library Python scripts turn customer data into health scores, churn-risk tiers and ranked expansion opportunities, with reproducible results. Needs Python and customer data in the sample JSON format. Part of the claude-skills collection.

Marketing team plugin with 40+ skills for copy and content, SEO and AI search optimization, conversion optimization, email and social, paid ads, growth strategy and competitor analysis, plus Python analysis scripts. Most need no account; a few, like YouTube transcripts, need API keys.

Generates single-file HTML slide decks with horizontal paging and two built-in visual systems (editorial magazine and Swiss International style), plus presenter mode with speaker notes. Can also make slide illustrations and covers for various platforms. By Guizang.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Turns an article or Markdown into a set of slide images: drafts an outline and style first, then generates each page, and can merge them into PPTX or PDF. Comes with over ten visual presets. Needs a working image generation backend.

Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key.

Baoyu's (JimLiu) content creation skills: infographics, covers, article illustrations, slide decks, comics and translation, plus Xiaohongshu cards and publishing to WeChat, Weibo and X. Needs Node.js, bun and an image model API key; some skills rely on Chrome automation or unofficial APIs.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

Open-source Zapier alternative with a built-in MCP server: agents can build and test automations in plain language, manage tables, or call hundreds of apps like email, spreadsheets and chat. Use the cloud or self-host, enable the MCP server in settings and connect via OAuth.

Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally.

Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript.

SEO analysis skill pack: 26 sub-skills and 19 subagents run full-site audits in parallel, covering technical SEO, E-E-A-T content quality, Schema, AI search optimization (GEO) and local SEO. Full features require installing it as a plugin and running /seo setup.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

SEO audit plugin covering technical SEO, E-E-A-T content quality, Schema markup, Core Web Vitals, local and e-commerce SEO, and GEO for AI search. Parallel subagents audit and return a prioritized action list. Needs Python 3.10+; Playwright optional for SPA rendering and screenshots.

Skyvern's official MCP: drives a browser with vision LLMs to complete multi-step tasks like filling forms, downloading files and web research. Connect to Skyvern Cloud (OAuth or API key), or self-host Skyvern and run it as a local process.