ツール

Static site generator written in Go that builds Markdown content into docs sites, blogs or landing pages in seconds, with a local preview server and an asset pipeline for images, CSS and JS.

Modern markup-based typesetting system, a LaTeX alternative for papers, reports and resumes. Fast incremental compilation; typst compile outputs a PDF in one command and watch mode recompiles automatically.

QGIS command-line wrapper from HKU's CLI-Anything project: create and edit .qgz projects, add GeoPackage layers and features, build print layouts and export PDF or images, and call QGIS processing algorithms, with JSON results. Needs QGIS desktop and a Python that can import PyQGIS.

Universal document converter between dozens of formats including Markdown, Word, HTML, LaTeX and EPUB, with templates, citations and Lua filters. PDF output uses LaTeX by default, which you install separately.

Turns common prompts such as summarizing, extracting insights and rewriting into reusable patterns you pipe text, web pages or YouTube transcripts through, using many model providers or local Ollama. Can also run as a REST API. Run fabric --setup first to configure models.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Open-source e-book manager whose command-line tools (ebook-convert, ebook-meta, calibredb) batch-convert between EPUB, MOBI, AZW3, PDF, DOCX and more and manage library metadata. The install command is Linux-only; on macOS and Windows use the installer.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

From Firecrawl: converts Word, PowerPoint, Excel, PDF, EPUB, RTF and more into clean Markdown locally in milliseconds, keeping headings, tables, footnotes and formulas so agents can read attachments. Needs Node.js; optional Firecrawl cloud OCR for scans uploads the whole file.

Compiles Markdown chapters into an online book with a table of contents, full-text search and themes, good for manuals, lecture notes and course material; agents can edit chapter files and rebuild to preview. Maintained by the Rust team; install a prebuilt binary or via cargo.

Scripts terminal sessions in .tape files and records them to GIF, MP4 or WebM, great for CLI demos and docs; text snapshot output also enables terminal integration tests. By Charm; requires ttyd and ffmpeg.

Unofficial Python library and CLI for driving Google NotebookLM (now Gemini Notebook): bulk-import sources, ask cited questions, and generate and download podcasts, videos, slides, quizzes and flashcards. Ships an agent skill. Relies on undocumented APIs and needs a Google sign-in.

Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.

Automattic's offline English grammar checker: checks spelling, grammar and word choice locally in milliseconds without sending your text anywhere. Homebrew installs harper-cli for batch-checking files (still experimental) and harper-ls for editors. English only.

Bundles a whole web page with its CSS, images, fonts and scripts into a single HTML file that opens offline exactly as it looked, good for archiving pages or handing them to an agent for offline analysis. It does not run JavaScript, so pre-render dynamic pages with a headless browser.

Open-source grammar, spelling and style checker for 20+ languages including English, German, French, Spanish and Portuguese. Proofread drafts in bulk from the CLI or run a local HTTP checking server for agents. For writers, translators and language teachers. Needs Java 17 (Homebrew includes it).

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test.