도구

Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills.

Grafana's official MCP: search and edit dashboards, query Prometheus, Loki and other data sources, and view alerts, incidents and OnCall schedules to help with troubleshooting. Needs a Grafana URL and a service account token.

AWS's official skills (Agent Toolkit for AWS) covering IAM, CDK/CloudFormation, serverless, containers, observability, cost management and Bedrock, plus service-specific skills. Running AWS operations requires locally configured credentials.

AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials.

PostgreSQL MCP server with database health checks, index tuning, EXPLAIN plan analysis and hypothetical index simulation, plus safe read-only SQL execution in restricted mode.

About 40 research skills from Google DeepMind: search arXiv, PubMed and OpenAlex, query UniProt, PDB, ClinVar, ChEMBL and more, run AlphaGenome variant analysis and render structures in PyMOL. Requires uv; AlphaGenome needs an API key, and keys raise limits for OpenAlex, ClinVar and others.

Kubernetes' official CLI for inspecting and managing Pods, Deployments, Services and other cluster resources, reading logs, executing commands in containers and applying YAML manifests. Requires a working kubeconfig for cluster access.

Cloudflare's official overview skill: recommends platform products such as Workers, R2, D1, Durable Objects, Containers and AI for your needs, then loads the matching sub-skills and docs. The same repo has dedicated skills for Wrangler, the Agents SDK and more.

Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare.

Cloudflare's official skills with build and deploy guidance for Workers, Wrangler, Durable Objects, the Agents SDK, Sandbox, Email Service and Cloudflare One; the plugin version also bundles the official MCP.

Cloudflare's official plugin with skills for Workers, Durable Objects, the Agents SDK, Wrangler, Sandbox and web performance audits, plus the Cloudflare API MCP for account data and up-to-date docs.

Claude Code plugin marketplace for designers: 33 plugins and 273 skills for user research, design systems, UX strategy, interaction, prototype testing, visual critique and accessibility. Install designer-toolkit and run /designer-toolkit:start-here for a suggested flow; no coding needed.

Lets agents read and write Figma: extract variables, components and styles, create and edit screens, FigJam boards and slides on the canvas, and run accessibility checks and design-system audits. Needs a Figma personal access token, the Figma desktop app, Node.js and the companion plugin.

Lets agents drive the open-source CAD app FreeCAD: create and edit part models in natural language, run Python scripts, capture views and run FEM structural analysis for mechanical and product design. Needs FreeCAD with the addon and its RPC server, plus uv; engineers should verify results.

Search and download arXiv papers and read the authors' LaTeX source section by section, export BibTeX and follow topic updates, with papers cached locally. No API key needed.

Reviews mobile and desktop app designs against Apple's Human Interface Guidelines, bundled as 123 pages from developer.apple.com, citing the exact guideline through five review lenses, and flags generic, templated choices. Works on screenshots, mockups or code for SwiftUI, Flutter or Electron.

Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all.

869 medical skills compiled by FreedomIntelligence from a dozen open-source libraries: SOAP notes, discharge summaries, drug interactions, clinical guidelines, PubMed/FDA lookups, genomics and device regulation. Made for OpenClaw, usable elsewhere; some need API keys. Doctors must review output.

Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.

Replaces arXiv preprint entries in your .bib file with the official published versions from DBLP and ACL Anthology, keeping citation keys, to tidy references before camera-ready. Overwrites the file by default, so preview with --dry-run. Mainly covers CS venues; needs Python 3.10+.

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.

A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.

65 skills built on methods from business, marketing and design bestsellers like Influence, StoryBrand and The Lean Startup: positioning, copywriting, conversion optimization, sales negotiation, UX review, plus step-by-step startup and site-building guides. Prompt-only, no API key needed.

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.