ツール

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.

Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI.

Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0.

Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.

Marketing team plugin with 40+ skills for copy and content, SEO and AI search optimization, conversion optimization, email and social, paid ads, growth strategy and competitor analysis, plus Python analysis scripts. Most need no account; a few, like YouTube transcripts, need API keys.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed.

Google Labs' DESIGN.md format and CLI: designers capture colors, typography and spacing in a file for agents; lint checks broken references and WCAG contrast, diff compares versions and export outputs design tokens for Tailwind and more. Needs Node.js; the format is in alpha.

Proofreads drafts: once you explain the text's purpose, it finds grammar, logic and flow issues and gives located suggestions with reasons, without rewriting the whole piece or changing your voice. Rules and examples target English. Part of PM Skills; no extra account needed.

Turns an article or Markdown into a set of slide images: drafts an outline and style first, then generates each page, and can merge them into PPTX or PDF. Comes with over ten visual presets. Needs a working image generation backend.

Baoyu's (JimLiu) content creation skills: infographics, covers, article illustrations, slide decks, comics and translation, plus Xiaohongshu cards and publishing to WeChat, Weibo and X. Needs Node.js, bun and an image model API key; some skills rely on Chrome automation or unofficial APIs.

Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key.

Translation skill by Baoyu with quick, normal and refined modes, custom glossaries, and target audience and style settings. Translates local files or URLs; suited to long-form Chinese-English translation and localization. Needs bun or npx.

Open-source SEO tool (a Semrush/Ahrefs alternative) with built-in MCP for keyword research, rank tracking, competitor and backlink analysis, site audits and AI search visibility checks. The hosted version has a free trial; self-hosting needs a pay-as-you-go DataForSEO key.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need.

Open-source e-book manager whose command-line tools (ebook-convert, ebook-meta, calibredb) batch-convert between EPUB, MOBI, AZW3, PDF, DOCX and more and manage library metadata. The install command is Linux-only; on macOS and Windows use the installer.

Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi.

Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control.

Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally.

Official plugin for Pascal, an open-source 3D architecture editor: lets agents create, edit and validate 3D models of rooms and floors over MCP and check furniture placement for collisions or blocked doors. Local use needs the Pascal CLI (Node.js 22.13+); hosted projects need an API key.