도구

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.

Support persona skill for the gws CLI: triages support-labeled Gmail, turns emails into tasks, logs tickets in Google Sheets, escalates urgent issues to Chat and books follow-ups. Needs gws authorized via your own Google Cloud project plus its companion skills; not officially supported by Google.

HR coordinator persona skill for the gws CLI: schedules onboarding sessions in Calendar, uploads onboarding docs to shared Drive, announces new hires in Chat, and turns email requests into tasks and bulk notices. Needs gws with OAuth via a Google Cloud project; not officially supported by Google.

Built-in gws CLI skill: lets agents create Google Forms, add or edit questions in bulk, publish and read responses, handy for sign-ups, surveys and class feedback. Needs gws with a Google account authorized via your own Google Cloud project; not an officially supported Google product.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Chief people officer perspective for HR and founders: hiring plans and headcount costs, salary bands and equity design, org structure, performance calibration and retention. Includes two local Python scripts; pay examples use USD and US city tiers. Have comp and equity plans reviewed.

Helps HR and hiring managers design structured interviews: plans rounds by role and level, builds question banks, competency matrices and scoring rubrics, and suggests ways to reduce interviewer bias and recalibrate. Examples focus on tech roles; optional local Python scripts.

For SaaS customer success teams: three standard-library Python scripts turn customer data into health scores, churn-risk tiers and ranked expansion opportunities, with reproducible results. Needs Python and customer data in the sample JSON format. Part of the claude-skills collection.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

Distills a colleague, friend or public figure's chats, documents and public material into a persona profile packaged as a callable skill, for handoffs and preserving know-how. Collects material from Lark, DingTalk, Slack and more. Mind privacy and consent when using others' data.

Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript.

Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project.

Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.

Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch.

AI2's tool for converting PDFs and scans to Markdown with a vision LLM, handling equations, tables, handwriting and multi-column layouts, suited to bulk digitizing papers and archives. Local runs need an NVIDIA GPU with 12GB+ VRAM; otherwise use a paid OpenAI-compatible remote endpoint.

Browser control from the browser-use team: an editable CDP connection lets agents drive the Chrome you are already using, writing missing helper functions as they go and keeping them for reuse. Also offers an MCP server. Allow remote debugging in Chrome on first use.

Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too.

Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems.

Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform.

Official Lark (Feishu) approval skill: list pending, handled and submitted approvals; approve, reject, transfer, return, remind or withdraw; and find and submit native approvals such as leave or expense requests. Needs lark-cli with app setup and sign-in authorization.