도구

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output.

Give it a person's name or a vague need and it researches and distills their mental models, decision style and voice into a callable persona skill (e.g. Munger, Feynman, Jobs) to aid analysis and decisions. Works with Claude Code, Codex and other agents.

Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice.

Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys.

Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+.

Claude Code plugin for Next AI Draw.io that starts its Draw.io MCP server via npx. Generate and edit flowcharts, architecture and sequence diagrams in plain language, with live browser preview, version history and .drawio export. Needs Node.js.

Lets agents create and edit draw.io diagrams such as flowcharts and architecture diagrams in plain language, with live browser preview, version history and export to .drawio, PNG or SVG. Includes an embedded server; runs locally with no API key.

HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

Generates people analytics reports from employee data: headcount snapshots, voluntary and involuntary attrition, diversity metrics, spans of control and flight risk, with findings and recommendations for leadership. Needs an uploaded employee CSV or a connected HRIS. Official from Anthropic.

Turns a feature idea or problem statement into a structured spec or PRD with goals and non-goals, user stories, success metrics and acceptance criteria, and can split large requests into phases. From Anthropic's official product-management plugin.

Turns resolved tickets, common questions or workarounds into publish-ready knowledge base articles, structured as how-to guides, troubleshooting, FAQs or known issues, and optimized for search. From Anthropic's official customer-support plugin.

Plans a sprint: estimates team capacity around time off and meetings, sets scope, goals and P0 versus stretch items, handles carryover from the last sprint, and outputs a sprint plan document. Works without any connected tools. From Anthropic's official product-management plugin.

Anthropic's official business operations plugin: vendor evaluations, process docs (flowcharts, RACI, SOPs), change requests, capacity planning, status reports and runbooks. Works without external tools and does more with ITSM and project management tools connected.

Support for small merchants: reads customer emails, checks orders and refunds in Stripe, PayPal, Square or Shopify, and drafts replies in the owner's voice per your refund policy; can refund via Stripe or Square after explicit approval. Works with pasted emails too. Official from Anthropic.

Pulls verbatim customer quotes on a topic from call transcripts, meeting notes and emails, tagging each with speaker, account and date, and summarizes recurring themes into voice-of-customer findings for product and marketing. Connect Gong, email or drive, or upload transcripts. By Anthropic.

Before replying to a customer, verifies answers across the knowledge base, past tickets, CRM and chat history, grades confidence and cites sources; can also find whether an issue was reported before or what a customer was told. From Anthropic's official customer-support plugin.

Runs compliance checks on planned features, marketing campaigns or business initiatives: identifies applicable regulations such as GDPR and CCPA, required approvals and risks, and concludes go, go with conditions, or needs further review. From Anthropic's legal plugin; not legal advice.

Account health checks for customer success managers: pulls CRM, email, calendar and call notes to score relationship, engagement, commercial (renewal and expansion), support and value delivery red/yellow/green, and can prep a QBR agenda. CRM preferred; uploads work. Official from Anthropic.

Writes competitive briefs on one or more competitors or a feature area: researches websites, pricing and reviews online, then compares features, pricing, positioning and go-to-market for prioritization, sales battlecards or board decks. From Anthropic's product-management plugin.

Packages customer issues that need engineering, product or leadership into an escalation brief with scope, repro steps, business impact, asks and deadline, and decides who to escalate to. Support and CRM connectors add context automatically. Part of Anthropic's official customer-support plugin.

Collects reviews and complaints from Google, Yelp, Facebook and more, groups them by theme with quotes, and drafts replies in the owner's voice that post only after approval; also finds lapsed customers and drafts win-back messages. Official Anthropic small-business plugin.

Competitive analysis skill from Anthropic's official marketing plugin: researches competitor websites, pricing, recent news and content strategy, compares positioning and messaging, and lists content gaps, opportunities and threats; can also produce sales battlecards. Needs web search.