도구

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.

Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI.

One CLI for Gmail, Drive, Calendar, Docs, Sheets and other Google Workspace APIs, with commands generated from the Discovery service, JSON output and 100+ Agent Skills. From the googleworkspace org but not officially supported; needs OAuth via a Google Cloud project.

Skill collection for the gws CLI: one skill per Workspace API plus recipes for common Gmail, Drive, Docs, Calendar and Sheets workflows. Install gws and authorize your Google account first; not an officially supported Google product.

Generates zero-dependency, animated HTML slide decks: previews several visual styles to choose from first, and can convert PowerPoint decks to web slides. Made for non-designers who don't write CSS.

Gives coding agents IDE-like symbol-level code search, editing and refactoring via language servers (LSP) across 40+ languages, with cross-session memory. An optional paid JetBrains plugin backend adds breakpoint debugging. Install with uv first.

Official web auditing tool from the Google Chrome team: score pages on performance, accessibility, best practices and SEO from the command line and get HTML, JSON or CSV reports, so agents can iterate on a page. Needs Node 22+ and Chrome.

Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0.

Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.

Official CLI (actual) for the local-first budget app Actual Budget: query and edit accounts, transactions, categories, payees, rules and budgets on your sync server, with JSON output and CSV export for agent bookkeeping. Needs Node.js 22+ plus your server URL, password and budget Sync ID.

Large multi-domain plugin marketplace: 99 plugins bundle hundreds of skills, agents and slash commands covering engineering, marketing, product, project management, regulatory and quality, finance and C-level advisory. Also offers install options for Codex, Gemini CLI and others.

A virtual executive team for founders: 33 skills act as CEO, CFO, CMO, CTO, legal and other advisors on strategy decisions, board materials, financial scenarios, M&A and org diagnostics, with Python analysis scripts. Persona subagents require the separate c-level-agents plugin.

Finance plugin: ratio analysis, DCF valuation, budget variance, revenue and cash-flow forecasts, SaaS metrics like ARR, churn, LTV and CAC, and peer-comparison fundamentals for US and Indian listed companies. Includes Python scripts. Not investment advice; needs professional review.

Helps finance teams with ratio analysis, DCF valuation, budget variance analysis and rolling forecasts, using bundled Python scripts so the numbers can be recomputed. Needs Python locally and financial data prepared as JSON; have a professional review the results.

Generates single-file HTML slide decks with horizontal paging and two built-in visual systems (editorial magazine and Swiss International style), plus presenter mode with speaker notes. Can also make slide illustrations and covers for various platforms. By Guizang.

A collection of 380+ skills across engineering, product, marketing, compliance, finance and executive advisory roles, with many standard-library Python scripts. Claude Code can install them by domain as plugins; works with Codex, Gemini CLI and a dozen other agents.

Packs a whole repository into a single AI-friendly file (XML, Markdown, JSON or plain text) with per-file token counts, automatically excludes files containing secrets, and can compress code with Tree-sitter or pack remote GitHub repos directly.

Open-source terminal coding agent from Alibaba's Qwen team with subagents, auto memory, skills and MCP. Works with Qwen, OpenAI, Anthropic, Gemini and other APIs or local models, with IDE plugins and a headless mode (qwen -p).

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Status line plugin for Claude Code showing the model, Git branch, context usage and rate limits live below the input, optionally with running tools, active subagents and todo progress.

Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed.