도구

Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.

Generates template-driven charts as single-file HTML: picks a chart from real Lupi, Basics, Glance, Maps and Interactive gallery implementations based on data shape, or fills one of 12 Chinese and English report templates. Defaults to Mono grayscale with semantic color presets. Written in Chinese.

14 n8n workflow skills: expression syntax, MCP tool usage, node configuration, validation and troubleshooting, Code nodes, AI Agent workflows and self-hosted n8n deployment. Meant to be used with the n8n-mcp server.

14 skills plus a hook-based reminder layer for use with n8n-mcp: teaches agents to write correct n8n expressions, configure nodes, apply workflow patterns, fix validation errors and deploy self-hosted n8n. Requires n8n-mcp to be set up first.

Lets agents build, run, test and debug iOS and macOS projects and control simulators and physical devices, with a CLI mode too. Formerly XcodeBuildMCP, now maintained by Sentry; macOS only, requires Xcode 16 or later.

SwiftUI skill by Paul Hudson of Hacking with Swift: reviews and improves SwiftUI code, covering modern vs deprecated APIs, performance, navigation and layout, state management and VoiceOver accessibility, targeting iOS 26 and Swift 6.2.

Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files.

ScrapeCreators' official skills: mine public TikTok, Instagram, YouTube, Reddit and X data for viral content, customer voice in comments, competitor accounts and ad libraries, and creator vetting, with sourced reports. Needs a ScrapeCreators key (100 free credits, then pay as you go).

Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.

250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.

The .NET team's official skill collection, grouped into plugins: ASP.NET Core, Blazor, MAUI, EF Core data access, MSBuild troubleshooting, performance diagnostics, testing, and framework upgrades and migrations. Maintained by Microsoft; install via the Claude Code or Codex plugin marketplace.

Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin.

Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist.

Automatically cuts silent or static parts from video and audio based on loudness or motion, with adjustable margins and speed changes, and exports project files for Premiere, DaVinci Resolve, Final Cut Pro and other editors. The repo ships an agent skill.

Lossy PNG compression CLI: converts images to 8-bit PNGs that keep transparency, usually 60-80% smaller, with batch processing and a quality range setting. Handy for slimming down web assets, slides and article images. Install via Homebrew on macOS; no account.

High-quality GIF encoder built on pngquant: turns video frames or PNG sequences into animations, using cross-frame palettes and temporal dithering for thousands of colors per frame. Can take video piped straight from ffmpeg.

Audits and rewrites AI-sounding prose: detects stock phrases using 70+ pattern categories and a tiered replacement word list, with detect-only, rewrite and in-place edit modes and optional voice settings. Rules are calibrated for English.

macOS screen capture, accessibility-tree inspection and native UI automation, served over MCP so agents can see the screen and click, type and operate menus. Requires macOS 15+ with Screen Recording and Accessibility permissions granted.

macOS screenshot and UI automation CLI: capture the screen, read the accessibility tree for structured UI elements, then click, type, and switch windows and menus. Also runs as an MCP server for Claude Code and Codex. Needs macOS 15+ with Screen Recording and Accessibility permissions.

Local FFmpeg video editing skill: ask in plain language to cut and join clips, remove silence, reframe to vertical, add subtitles, normalize loudness and export to TikTok, Reels or YouTube specs, fully offline with no API key. Needs ffmpeg and Python 3; also usable as an MCP.

Detects shot changes in video and splits long footage into scenes, exporting cut lists and per-scene thumbnails, useful for shot analysis, organizing footage and finding edit points. Runs locally; needs Python 3.10+, plus FFmpeg or mkvmerge for splitting.

LM Studio's official CLI: list, load and unload local models, start and stop the local API server, and check status and logs; ls, ps and other commands support --json output for scripts and agents. Requires the LM Studio desktop app.

Lingo.dev's official CLI: lingo push sends JSON, YAML, Markdown, PO, XLIFF, Android/Xcode strings and other files from your repo to its LLM localization engine, and lingo pull brings translations back; CI-ready. Needs a Lingo.dev account; usage-based pricing with a free sandbox.

From Callstack: lets coding agents inspect, operate and verify apps on iOS, Android and HarmonyOS simulators and real devices, reading accessibility snapshots, taking screenshots and recordings, and capturing logs and performance data. Ships both a CLI and a built-in MCP server.