도구

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.

Connects to your Supabase projects: manage schemas and migrations, run SQL, deploy Edge Functions, create development branches and generate TypeScript types. A remote server hosted by Supabase with OAuth sign-in.

A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.

Supermemory's official Claude Code plugin: hooks save memories automatically when a session ends and recall them on demand, giving persistent memory across sessions and projects, with shared project memory for teams. Needs a Supermemory API key and Node.js 18+.

Google's official terminal coding agent and successor to Gemini CLI: understands your codebase and, with your approval, edits files and runs commands. Shares its engine and settings with the Antigravity 2.0 desktop app. Closed source; sign in with a Google account; free tier included.

Plugin marketplace for multi-agent dev workflows: omo multi-agent orchestration, BMAD agile role flows, requirements-driven development, SPARV and common dev commands, delegating coding tasks to Codex, Claude, Gemini and other backends (their CLIs installed separately). AGPL licensed.

Gives agents on-demand guidance for the modern web platform, covering View Transitions, container queries, Popover, INP optimization, accessibility and more, with browser compatibility data so they avoid outdated code. Maintained by the Google Chrome team; currently in preview.

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.

65 skills built on methods from business, marketing and design bestsellers like Influence, StoryBrand and The Lean Startup: positioning, copywriting, conversion optimization, sales negotiation, UX review, plus step-by-step startup and site-building guides. Prompt-only, no API key needed.

Gives agents a live local Excalidraw canvas: add, edit and delete elements to draw architecture diagrams and flowcharts, take screenshots to check the result, convert Mermaid and export .excalidraw files. Runs locally with no API key; also ships a CLI and an agent skill.

Perplexity's official MCP with four tools: web search, grounded Q&A, deep research and reasoning, available remotely or run locally. Requires a Perplexity API key.

Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.

Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.

Turns a paper's method description (text or PDF) or data files into publication-ready diagrams and plots, with several AI reviewer roles refining each figure. Needs an OpenAI or Gemini API key (billed per image), Python and uv. A community reimplementation, not by the original paper's authors.

Supabase's official CLI: runs the full backend stack locally (Postgres, Auth, Storage, Edge Functions), manages database migrations, generates types and deploys functions. The local stack requires Docker.

Explains a codebase, feature, command or pull request to someone new to it as a PR Lens canvas: one plain sentence first, then a walkthrough that grows the diagram from two boxes to the whole picture, delivered as a shareable link. Requires the PR Lens skill and its npx CLI.

Draws a code change or part of a codebase as an animated architecture or data-flow diagram. The agent writes a JSON graph, validates and renders it to SVG with the PR Lens CLI, then pushes it to a prlens.dev canvas or attaches it to a GitHub, GitLab or Bitbucket pull request.

Uses hooks to enforce test-driven development in Claude Code: blocks implementation without a failing test, prevents code beyond what tests require, and can use lint results to push refactoring. Needs Node.js 22+. Still maintained, but the author suggests its successor Probity for new projects.

WordPress's official skill collection: block development, block themes, plugin architecture, REST API, Interactivity API, WP-CLI, performance profiling and Playground, so agents write code to modern WordPress standards and avoid common security pitfalls.

Lets Claude Code and other agents call Antigravity CLI or Gemini CLI, using Gemini's large context window to analyze big files and whole codebases; with Gemini CLI it can also test code in a sandbox. Install and sign in to the CLI first. Not an official Google project.

Helps app marketers and translators plan multilingual App Store listings: prioritize countries, research keywords per market, rewrite title, subtitle, keywords and description, and flag screenshot and cultural issues rather than translating literally. Guidance only, no account needed.

App Store Optimization and app marketing skills: keyword research, title and description optimization, competitor tracking, review management, launch and ad planning. Works from general knowledge alone; add an Appeeky API key or MCP for real App Store data (free accounts get 100 credits a month).

TypeUI's design fundamentals skill: general UI and interaction principles covering visual hierarchy, spacing, typography, 30 laws of interaction and WCAG accessibility. Needs Node.js to install; the TypeUI design-system library needs its hosted MCP and sign-in.

Stripe's official CLI: forward and trigger webhook events locally, tail API request logs in real time, and create, read, update or delete Stripe objects to debug payment integrations. Needs a Stripe account; run stripe login first.