# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Backend or ML / AI, Tagged `code-quality`: 34 items.

> - Backend: Designing and building APIs, databases and middleware.
> - ML / AI: Model training, evaluation and LLM application development.

- [Verification Before Completion](https://hebbmind.com/ko/skill/verification-before-completion.md): [Skill] Requires the agent to run the full verification commands and read the output before claiming work is done, fixed or passing, backing claims with evidence and ruling out unverified success reports. From the Superpowers workflow.
- [Karpathy-Inspired Claude Code Guidelines](https://hebbmind.com/ko/skill/andrej-karpathy-skills.md): [Skill] Behavior guidelines drawn from Karpathy's observations of how LLMs go wrong when coding: think before acting, keep it simple, make surgical changes only, and drive work by verifiable goals. Can also be used directly as a CLAUDE.md.
- [Karpathy-Inspired Claude Code Guidelines](https://hebbmind.com/ko/plugin/andrej-karpathy-skills.md): [Plugin] Four guidelines based on Karpathy's observations of common LLM coding mistakes: think before coding, prefer simplicity, make only necessary changes, and work toward verifiable goals. Ships as a plugin skill or works as a CLAUDE.md. Community-made, not by Karpathy.
- [Ponytail](https://hebbmind.com/ko/plugin/ponytail.md): [Plugin] 'Laziest senior engineer' mode: checks whether the work is needed and whether existing code, the standard library or platform features cover it, then writes the minimum code while keeping validation, error handling and security. For Claude Code and Codex; its hook needs Node.js.
- [Ponytail](https://hebbmind.com/ko/skill/ponytail.md): [Skill] Has the agent follow a 'don't write it if you can avoid it' ladder: ask if it's needed, then reuse existing code, the standard library, platform features and installed dependencies, writing only the minimum while keeping validation, error handling, security and accessibility.
- [Hookify](https://hebbmind.com/ko/plugin/hookify.md): [Plugin] Generates hook rules from a one-line description or by analyzing recent conversations. Rules are Markdown files with match conditions that block or warn on dangerous commands and unwanted patterns, and take effect without a restart. Official Anthropic plugin.
- [PR Review Toolkit](https://hebbmind.com/ko/plugin/pr-review-toolkit.md): [Plugin] Six specialized review subagents that check comment accuracy, test coverage, silent failures, type design, code style and simplification opportunities. Run them individually or all at once. Official Anthropic plugin.
- [Code Review and Quality](https://hebbmind.com/ko/skill/code-review-and-quality.md): [Skill] Reviews code changes before merge across five axes: correctness, readability, architecture, security and performance. Works on code and PRs from you, other agents or other people, judged by whether they improve overall code health. Part of Addy Osmani's agent-skills.
- [Ruff](https://hebbmind.com/ko/cli/ruff.md): [CLI] Astral's extremely fast Python linter and formatter written in Rust, replacing Flake8, isort and Black, with 900+ built-in rules and auto-fix.
- [Open Code Review](https://hebbmind.com/ko/plugin/open-code-review.md): [Plugin] Alibaba's open-source AI code review tool: reads the Git diff, groups changed files for parallel review by subagents and returns line-level comments; the plugin adds review and delegated review commands. Install the ocr CLI and configure a model first; delegated mode needs no API key.
- [Open Code Review](https://hebbmind.com/ko/cli/open-code-review.md): [CLI] Alibaba's open-source AI code review CLI (ocr): a deterministic pass filters and groups files and matches rules, then an agent reads the context and writes line-level comments; ocr scan reviews a whole directory. Needs an LLM endpoint, or delegate mode to hand off to your coding agent.
- [Open Code Review](https://hebbmind.com/ko/skill/open-code-review.md): [Skill] Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba.
- [PHP LSP](https://hebbmind.com/ko/plugin/php-lsp.md): [Plugin] Connects Claude Code to the Intelephense PHP language server for code intelligence and diagnostics. Install intelephense globally with npm first. Official Anthropic plugin.
- [C# LSP](https://hebbmind.com/ko/plugin/csharp-lsp.md): [Plugin] Connects Claude Code to the C# language server csharp-ls for code intelligence and diagnostics. Needs .NET SDK 6.0+; install csharp-ls first via dotnet tool or Homebrew. Official Anthropic plugin.
- [Code Simplifier](https://hebbmind.com/ko/plugin/code-simplifier.md): [Plugin] Simplifies and tidies recently changed code without changing behavior: reduces nesting and redundancy, improves naming and follows the project conventions in CLAUDE.md. Official Anthropic plugin.
- [Ruby LSP](https://hebbmind.com/ko/plugin/ruby-lsp.md): [Plugin] Connects Claude Code to Shopify's Ruby LSP for code intelligence and analysis of .rb, .rake, .gemspec, .erb and other files. Needs Ruby 3.0+; run gem install ruby-lsp first. Official Anthropic plugin.
- [C/C++ LSP (clangd)](https://hebbmind.com/ko/plugin/clangd-lsp.md): [Plugin] Connects Claude Code to the clangd C/C++ language server for code intelligence, diagnostics and formatting. Install LLVM/clangd and add it to PATH first. Official Anthropic plugin.
- [TypeScript LSP](https://hebbmind.com/ko/plugin/typescript-lsp.md): [Plugin] Connects Claude Code to a TypeScript/JavaScript language server for go-to-definition, find references and live type error checking. Install typescript-language-server globally first. Official Anthropic plugin.
- [Go LSP (gopls)](https://hebbmind.com/ko/plugin/gopls-lsp.md): [Plugin] Connects Claude Code to gopls, Go's official language server, for code intelligence, refactoring and analysis. Install gopls with go install and add Go's bin directory to PATH first. Official Anthropic plugin.
- [Pyright LSP](https://hebbmind.com/ko/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin.
- [wshobson/agents](https://hebbmind.com/ko/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands.
- [Code Modernization](https://hebbmind.com/ko/plugin/code-modernization.md): [Plugin] Modernizes legacy codebases: assesses the current state, maps dependencies, extracts business rules and plans the migration, then upgrades or rewrites, running old and new code on the same inputs to prove identical behavior. Official Anthropic plugin.
- [ShellCheck](https://hebbmind.com/ko/cli/shellcheck.md): [CLI] Static analysis for shell scripts: flags syntax errors and common bash/sh pitfalls such as quoting and variable expansion, with suggested fixes. Good for checking agent-generated scripts and easy to add to CI.
- [Semgrep](https://hebbmind.com/ko/cli/semgrep.md): [CLI] Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.
- [Semgrep MCP](https://hebbmind.com/ko/mcp/semgrep-mcp.md): [MCP] Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN.
- [ast-grep](https://hebbmind.com/ko/cli/ast-grep.md): [CLI] AST-based structural code search, lint and bulk rewrite tool: matches code patterns rather than text, with $VAR wildcards for nodes, making it well suited to agents doing large cross-file refactors.
- [pre-commit](https://hebbmind.com/ko/cli/pre-commit.md): [CLI] Multi-language git hook manager: declare formatting, lint, secret scanning and other hooks in .pre-commit-config.yaml to run automatically before each commit, or have the agent self-check with pre-commit run --all-files before committing.
- [SQLFluff](https://hebbmind.com/ko/cli/sqlfluff.md): [CLI] Linter and formatter for 20+ SQL dialects that auto-fixes most issues and handles Jinja templating and dbt projects (dbt needs a plugin), suited to warehouse code review and CI.
- [improve](https://hebbmind.com/ko/plugin/improve.md): [Plugin] Uses a strong model to audit your codebase and list evidence-backed issues across correctness, security, performance and testing, writes a plan a cheaper model can execute, and reviews the results. It never edits code itself. By shadcn.
- [Static Analysis](https://hebbmind.com/ko/skill/static-analysis.md): [Skill] Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.
- [Sentry Skills](https://hebbmind.com/ko/skill/getsentry-skills.md): [Skill] Skills Sentry's engineering team uses itself: code review, bug finding, security review, writing commits and PRs, and iterating on a PR until CI passes. Maintained by Sentry; some skills follow its internal conventions.
- [SonarQube MCP Server](https://hebbmind.com/ko/mcp/sonarqube-mcp-server.md): [MCP] Official SonarSource server: connects to SonarQube Server or Cloud so agents can query code issues, quality gates, security hotspots and dependency risks, and analyze file contents directly. Needs a SonarQube token; Docker is the recommended way to run it.
- [Effect](https://hebbmind.com/ko/skill/effect.md): [Skill] Opinionated guide to production TypeScript with Effect v4: Effect.gen workflows, Context.Service and Layer services, Schema models and typed errors, Config, Schedule retries, Cache, Stream, HttpClient and deterministic tests, plus patterns to avoid. Requires Effect v4.
- [SonarQube](https://hebbmind.com/ko/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.
