도구

Turns 18 kinds of sources, including doc sites, GitHub repos, PDFs and videos, into skill packages for Claude and other platforms, or exports RAG chunks and vector store data. Optional MCP server, and it can call a local agent like Claude Code to enrich content. Needs Python 3.10+.

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Companion skill for the official Playwright CLI: short commands to open pages, click and fill forms, take snapshots and screenshots, and write and debug Playwright tests, using less context than the MCP approach. Maintained by Microsoft; needs Node.js.

Microsoft Playwright's official browser CLI for coding agents: open pages, click and type, take screenshots and manage sessions, and install the companion skills in one step. Uses fewer tokens than Playwright MCP. Needs Node.js 18+.

ConardLi's skill collection: turn articles or scripts into web presentations you can screen-record as videos (23 themes, optional voiceover), lay out material as shareable long-form web pages, search local knowledge base folders, web design, and GPT-Image-2 image generation with 79 templates.

FormatJS's official localization review skill for software translators: read-only checks of UI strings and translations for ICU syntax, placeholders, terminology consistency and locale formats for dates, numbers and currency, listing issues with evidence and minimal fixes. Never edits files.

Nearly 100 skills spanning the AI research workflow: ideation and literature review, fine-tuning and post-training, distributed training, inference serving, evaluation, interpretability and paper writing, tied together by an autoresearch orchestration skill.

Plugin marketplace for AI research with nearly 100 skills in 23 categories, from ideation, fine-tuning and post-training to distributed training, inference serving, evaluation and paper writing, coordinated end to end by the autoresearch skill.

Command-line framework for warehouse modeling and ELT transformations: write models in SQL and let dbt handle dependencies, data tests and documentation. v2 is rewritten in Rust as a single binary. Maintained by dbt Labs; needs a data warehouse connection.

Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test.

MiniMax's official Excel skill: read, analyze, create, edit and validate xlsx files and fix broken formulas. Edits existing files at the XML level to keep formatting, formulas and pivot tables; writes results as formulas with finance-style color coding. Needs Python (pandas); LibreOffice optional.

Wraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only.

Lets agents decompile, disassemble and query cross-references in IDA Pro, and rename variables, change types and add comments, including headless idalib mode. Requires IDA Pro 8.3+ (IDA Free is not supported); the author now recommends Hex-Rays' official IDA MCP instead.

PostgreSQL command-line client with smart autocompletion and syntax highlighting. Compatible with psql environment variables, and -c runs a statement and exits, so agents can query databases non-interactively.

Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.

curl for gRPC: call any gRPC method with JSON, including bidirectional streaming, browse service definitions via server reflection, proto source files or protosets, with TLS and mutual TLS support.

Simon Willison's LLM CLI and Python library: call OpenAI, Claude, Gemini and local models from the terminal, with conversations logged to SQLite automatically, plus embeddings, structured extraction, tool calling and a plugin system.

A Chrome extension that hands the browser you use every day to your agent, keeping your logins and settings, with screenshots, network monitoring, bookmarks and history, and semantic search over tab content. Install the extension and mcp-chrome-bridge first.

Document layout skill by tw93 with eight templates (resume, one-pager, long doc, formal letter, portfolio, slides, research report and more) that render polished PDF, PNG or editable PPT and check layout and content gaps. Supports English, Chinese, Japanese and Korean. Needs Python (WeasyPrint).

Connects to the Arize Phoenix observability platform so agents can query LLM traces and sessions, manage prompts, browse datasets and read experiment evaluation results. Maintained by Arize; needs a self-hosted or cloud Phoenix instance.

OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key.

ByteDance's open-source, general software engineering agent: trae-cli edits files and runs commands from natural language, supports multiple model providers and MCP, and records full execution trajectories. Transparent design suits agent research and customization. Needs your own model API key.

Design engineer Jakub Krehel's 11 UI skills: targeted fixes for typography, color, layout, accessibility and UI copy, plus full interface reviews, animation teardowns, component state stress tests and multi-variant generation. Works on web project code; installing needs Node.js.

MySQL terminal client with smart autocompletion and syntax highlighting, also compatible with MariaDB and TiDB. Supports --execute and batch mode with CSV or table output, so agents can run SQL directly.