도구

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

Terminal multiplexer written in Rust, an alternative to tmux, with layout files, floating and stacked panes, WebAssembly plugins and a built-in web client. Handy for running several agent sessions at once.

Helps in-house legal score and rank risks in contracts, deals and disputes on a severity-by-likelihood matrix, write risk memos, and know when to escalate to senior or outside counsel. No other tools needed. From Anthropic's legal plugin; not legal advice, have a lawyer review.

Drafts common legal replies from templates: data subject requests, litigation hold notices, vendor legal inquiries, NDA requests and subpoenas, first checking for regulatory or litigation issues that templates should not handle. From Anthropic's legal plugin; have a lawyer review.

Runs compliance checks on planned features, marketing campaigns or business initiatives: identifies applicable regulations such as GDPR and CCPA, required approvals and risks, and concludes go, go with conditions, or needs further review. From Anthropic's legal plugin; not legal advice.

Three kinds of briefs for legal teams: daily briefs of to-dos and deadlines from email, calendar and contracts; topic briefs on a legal question; and incident briefs for breaches, litigation threats or regulator inquiries. Needs email and calendar tools. From Anthropic; not legal advice.

Reviews contracts clause by clause against your organization's negotiation playbook, flags deviations, proposes redlines and analyzes business impact. A skill from Anthropic's official legal plugin; conclusions need review by a legal professional.

Anthropic's official plugin that opens PDFs in a local interactive viewer where Claude proposes highlights, comments and approval stamps in batches, walks you through form filling, places signature images and exports an annotated copy. Needs Node.js 18+; signatures are not digital certificates.

Prepares structured briefs for meetings with legal stakes, such as contract negotiations, board meetings, compliance reviews or litigation: attendees and agenda, related agreements and open issues, negotiation points, and post-meeting action items. From Anthropic's legal plugin; verify the brief.

Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic.

Gathers all agreements with a vendor from your CLM, CRM, email and drive, lists signed and missing MSAs, DPAs and SOWs, and flags upcoming expirations, auto-renewal notice windows and surviving obligations. Needs those connectors. From Anthropic's legal plugin; verify against originals.

Methodology reference for US SOX 404 internal control audits: scoping significant accounts, sampling methods, workpaper and evidence standards, and classifying deficiencies, significant deficiencies and material weaknesses. Not audit or legal advice; needs professional review. By Anthropic.

Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.

Plugin for in-house legal: reviews contracts clause by clause against your negotiation playbook with suggested redlines, triages NDAs green/yellow/red, handles compliance and privacy questions, assesses legal risk and writes briefs. Official from Anthropic; default playbook assumes US law.

Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.

For internal auditors running SOX tests: lists key controls by area (revenue, procure-to-pay, payroll, close, ITGC) and period, sets sample sizes, samples from your population, and generates test workpaper templates and deficiency assessments. Needs professional review. Official from Anthropic.

Pre-signature check for final contracts: open redlines, missing exhibits, party names and signature blocks, then sets up sequential or parallel signing. Sends via DocuSign or similar e-signature services when connected, otherwise writes signing instructions. From Anthropic's legal plugin.

Everyday software engineering plugin: standup summaries, code review, structured debugging, architecture decision records, incident response and pre-deploy checks. Official from Anthropic, built mainly for Cowork but also usable in Claude Code.

Quickly pre-screens incoming NDAs and sorts them green, yellow or red into standard approval, legal review or full review, focusing on non-competes, non-solicitation and missing carve-outs. Part of Anthropic's official legal plugin.

Adds a searchable, copyable text layer to scanned PDFs, with automatic deskew, rotation and size optimization, outputting PDF/A by default. Built on Tesseract, supports 100+ languages and runs fully locally.

Calls Codex from Claude Code for read-only or adversarial code reviews, or delegates tasks to Codex to run in the background. Maintained by OpenAI; needs a ChatGPT account (the free tier works) or an API key.

Processes large tool outputs in a sandbox and returns only the results to context; logs session events in SQLite with FTS5 so work continues after context compaction. Supports Claude Code, Codex and a dozen other clients. ELv2 licensed.

Vercel's official deployment skill: checks the git remote, project link and CLI login, then deploys a preview (default) or production via git push or vercel deploy. When login isn't possible in a sandbox, it can create a claimable preview link.

React and Next.js performance rules from Vercel's engineering team: 70 rules ranked by impact covering request waterfalls, bundle size, server performance and re-renders, for writing, reviewing and refactoring. Maintained by Vercel.