도구

Open-source personal AI assistant that runs on your own machine and talks to you over 20+ chat channels such as Telegram, Slack and iMessage. The openclaw CLI manages the gateway, channel pairing and plugins; switch models between Claude, Codex and local ones.

macOS cleanup and maintenance CLI (mo): clears caches and logs, fully uninstalls apps, analyzes disk usage, removes project build artifacts and shows system status. Preview deletions with --dry-run; disk analysis and status support JSON output. Needs macOS 12+.

Upstash's official Context7 CLI (ctx7): search libraries and pull up-to-date docs from the terminal, or set up the Context7 MCP and rules for Claude Code, Cursor and other agents in one step. Docs lookup needs no login; signing in raises rate limits.

Packs a web page, local HTML or dist folder into a lightweight desktop app with one command (built on Rust Tauri; macOS, Windows, Linux), with --json output and llms.txt for agents. Needs Node.js; installs Rust automatically if missing.

Expo's official CLI: starts the React Native dev server, runs prebuild to generate native folders, runs apps locally on iOS and Android, and installs version-compatible dependencies. Ships with the expo package; call it with npx expo inside a project.

Package manager for macOS and Linux: agents can brew install CLI tools and desktop apps (casks), or use brew bundle to restore a dev environment from a Brewfile.

Release automation for iOS and Android: lanes orchestrate builds, code signing management, screenshot generation and uploads to the App Store and Google Play, and agents can call a project's existing lanes directly.

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

One CLI for Gmail, Drive, Calendar, Docs, Sheets and other Google Workspace APIs, with commands generated from the Discovery service, JSON output and 100+ Agent Skills. From the googleworkspace org but not officially supported; needs OAuth via a Google Cloud project.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Official CLI (actual) for the local-first budget app Actual Budget: query and edit accounts, transactions, categories, payees, rules and budgets on your sync server, with JSON output and CSV export for agent bookkeeping. Needs Node.js 22+ plus your server URL, password and budget Sync ID.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

Style and convention linter for Swift, with most rules built on SwiftSyntax. Configure it with .swiftlint.yml, auto-correct with --fix, and run it in an Xcode build phase or as a SwiftPM plugin.

Official Lark (Feishu) CLI with 200+ commands for messages, docs, Base, Sheets, calendar, mail, approvals, OKRs, meetings and Minutes, plus 20+ bundled lark-* agent skills and structured output. Create a Lark app and sign in first.

Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.

Write end-to-end UI tests for Android, iOS and web apps in YAML. The CLI includes an MCP server (maestro mcp) so coding agents can tap, assert and generate tests on simulators. Requires Java 17+.

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test.

Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.