ツール

Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin.

Anthropic's role-based skill collection covering sales, finance, legal, HR, support, marketing, product, design, operations and data analysis: over a hundred skills you can install one at a time. Works best with CRM, data warehouse and other connectors.

Anthropic's knowledge-work plugin marketplace, bundling skills, commands and connectors by role: sales, support, product, marketing, legal, finance, HR, data and more, plus many partner plugins. Built mainly for Cowork; also works in Claude Code.

Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.

A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support.

Resolves subscription billing issues: checks customer and subscription state, separates duplicate purchases, team seats and failed payments, restores self-serve before refunding, and drafts the reply. Needs Stripe or similar tools connected; refunds move real money, so review them.

When answering questions about using Claude and its products, attaches a matching course, tutorial or case study from the Claude Academy catalog. Recommends only strong matches and never invents courses. Official Anthropic skill.

Local job search workbench: evaluates role fit and spots fake listings, generates tailored resume and cover letter PDFs, and tracks applications without ever applying for you. Run npx @santifer/career-ops init first, then open Claude Code or Codex in the created folder.

Helps subscription products reduce churn: designs cancellation flows, save offers and exit surveys, spots churn risk signals, and plans dunning and win-back emails after failed payments. For customer success, lifecycle and growth teams; billing platforms like Stripe need setup on your side.

Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills.

Open-source personal AI assistant and agent harness, formerly chatgpt-on-wechat: plans tasks, runs tools and skills, self-evolving memory and knowledge, multi-agent teams. Channels: WeChat, WeCom, Feishu, DingTalk, QQ, Telegram, Slack; any major model provider. One-line install and web console.

Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.

Official remote MCP for the open-source resume builder Reactive Resume: agents draft and edit resumes and cover letters, export PDFs and track applications; job-based scoring and tailoring need an AI provider set in the app. Needs a free rxresu.me account or a self-hosted instance.

HR and compliance plugin with HR and legal advisor subagents plus employment contract and GDPR skills, for drafting hiring materials, onboarding, offboarding and performance policies, employment contracts, privacy policies, terms of service and DPAs. Mainly US and EU rules.

Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees.

Plans teams for seed to Series A startups: which roles to hire at each stage and in what order, org structure, plus salary, equity ranges and headcount budget. Compensation benchmarks are 2024 US market data; adjust for your market and have finance and legal review the plan.

Support and sales plugin with two subagents: one handles support replies, ticket triage and help docs; the other writes cold email sequences, follow-up cadences, quote templates and objection handling. Prompts only; no direct CRM connection.

EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions.

Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content.

Templates and drafting guidance for offer letters, employment agreements and handbook policies, helping HR and legal produce consistent employment documents. Written for US employment rules; adapt them for other jurisdictions and have a lawyer review final drafts. No account or API key.

The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands.

Drafts self-reviews, peer reviews, 360 and upward feedback in STAR structure with concrete examples instead of filler, as Markdown drafts it never submits. With Microsoft WorkIQ it gathers your contributions from Microsoft 365 mail and meetings; otherwise it works from your notes.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.