# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for ML / AI or Security or Video / Media: 398 items. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Video / Media: Video editing, image and audio generation, music production, podcasts and short videos. - [goose](https://hebbmind.com/ru/cli/goose.md): [CLI] General-purpose AI agent that runs on your machine, with a desktop app, CLI and API. Written in Rust, works with 15+ model providers and connects to 70+ extensions via MCP. Originally from Block, now part of the Linux Foundation's AAIF. - [whisper.cpp](https://hebbmind.com/ru/cli/whisper-cpp.md): [CLI] C/C++ port of OpenAI's Whisper speech recognition model that transcribes audio offline and outputs subtitles. Runs on CPU, with Apple Silicon and various GPU acceleration. Download a ggml-format model first. - [Ruff](https://hebbmind.com/ru/cli/ruff.md): [CLI] Astral's extremely fast Python linter and formatter written in Rust, replacing Flake8, isort and Black, with 900+ built-in rules and auto-fix. - [tmux](https://hebbmind.com/ru/cli/tmux.md): [CLI] Terminal multiplexer: run multiple sessions and panes in one terminal, with processes surviving disconnects. Agents use it to host long-running tasks and drive interactive programs, and many parallel multi-agent session tools build on it. - [Qlib](https://hebbmind.com/ru/cli/qlib.md): [CLI] Microsoft's open-source AI quant investment research platform: the qrun command runs dataset building, model training, backtesting and evaluation from a YAML config, with many benchmark models. The official dataset is paused, so prepare market data per the README first. - [Agentic Awesome Skills](https://hebbmind.com/ru/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills. - [MCP Server Dev](https://hebbmind.com/ru/plugin/mcp-server-dev.md): [Plugin] Designs and builds MCP servers: first picks a deployment model among remote HTTP, MCPB bundles and local stdio, then guides tool design, auth and in-chat interactive components. Maintained by Anthropic. - [Session Report](https://hebbmind.com/ru/plugin/session-report.md): [Plugin] Official Anthropic plugin that reads local session logs in ~/.claude/projects and generates an interactive HTML usage report covering tokens, cache hit rate, subagents, skills and the most expensive prompts, with optimization tips. Needs Node.js. - [Security Guidance](https://hebbmind.com/ru/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [Skill Creator](https://hebbmind.com/ru/plugin/skill-creator.md): [Plugin] Creates or improves Agent Skills from scratch: writes eval cases to test them, runs benchmarks with variance analysis, and tunes descriptions for more accurate triggering. Maintained by Anthropic. - [Pyright LSP](https://hebbmind.com/ru/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin. - [aria2](https://hebbmind.com/ru/cli/aria2.md): [CLI] Lightweight multi-protocol command-line downloader that fetches in parallel segments from multiple sources over HTTP(S), FTP, SFTP, BitTorrent and Metalink. Resumes downloads, reads URLs in bulk from text files and offers a JSON-RPC interface for scripts or agents. - [OpenMAIC Skill](https://hebbmind.com/ru/skill/openmaic.md): [Skill] Official skill for OpenMAIC, Tsinghua THU-MAIC's open-source multi-agent classroom: from a topic or PDF it generates a full lesson with slides, quizzes, interactive simulations, project-based learning and AI teacher narration. Use a hosted access code, or self-host with an LLM API key. - [Manim](https://hebbmind.com/ru/cli/manim.md): [CLI] Engine for math and explainer animations in Python (Community Edition, ManimCE): write scenes and render them to video with the manim command, letting agents create teaching and science animations. On macOS install cairo and pkg-config first; formulas need LaTeX. - [Security Scanning](https://hebbmind.com/ru/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [LLM Application Dev](https://hebbmind.com/ru/plugin/llm-application-dev.md): [Plugin] Plugin for building LLM apps: LangGraph agents with memory and tool use, hybrid-search RAG, vector index tuning, prompt optimization and LLM evaluation. Includes 3 subagents and 8 skills. - [GDPR Data Handling](https://hebbmind.com/ru/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions. - [wshobson/agents](https://hebbmind.com/ru/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Quantitative Trading](https://hebbmind.com/ru/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice. - [Machine Learning Ops](https://hebbmind.com/ru/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills. - [wshobson/agents](https://hebbmind.com/ru/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands. - [Lightpanda Browser](https://hebbmind.com/ru/cli/browser.md): [CLI] Headless browser written from scratch in Zig for AI agents and automation, using less memory and running faster than headless Chrome in official benchmarks. fetch turns pages into Markdown, and it can serve CDP or MCP. Telemetry is on by default (an env var disables it); Windows needs WSL. - [Marker](https://hebbmind.com/ru/cli/marker.md): [CLI] Converts PDFs, images, PPTX, DOCX, XLSX, EPUB and more into Markdown, JSON or HTML, preserving tables, formulas and layout, with optional LLM help for higher accuracy. Needs Python 3.10+ and PyTorch; large-scale commercial use of the model weights needs a paid license. - [Postiz](https://hebbmind.com/ru/mcp/postiz-app.md): [MCP] MCP built into the open-source social media scheduler Postiz: agents draft, schedule and publish posts and view analytics across 30+ platforms including X, LinkedIn, Instagram and YouTube. The cloud version uses browser OAuth, no API key (paid after a 7-day trial); self-hosting is free. - [Agent TARS CLI](https://hebbmind.com/ru/cli/ui-tars-desktop.md): [CLI] ByteDance's open-source multimodal agent CLI: operates browsers via vision or the DOM and calls terminal, file and MCP tools to complete tasks, with a Web UI and headless server mode. Needs Node.js 22+ and a model API key. - [@agent-infra/mcp-server-browser](https://hebbmind.com/ru/mcp/browser.md): [MCP] Browser automation MCP server open-sourced by ByteDance in the UI-TARS-desktop repo: drives pages through Puppeteer accessibility data with an optional vision mode, running locally over stdio or remotely over SSE or Streamable HTTP. - [Trivy](https://hebbmind.com/ru/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security. - [llmfit](https://hebbmind.com/ru/cli/llmfit.md): [CLI] Detects your CPU, memory and GPU and scores open models on whether they run, speed, quality and context, then works with local runtimes like Ollama, llama.cpp and MLX to download and benchmark them. recommend --json gives agent-friendly output. - [skills](https://hebbmind.com/ru/cli/skills.md): [CLI] Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs. - [Claude Code Router](https://hebbmind.com/ru/cli/claude-code-router.md): [CLI] Local model gateway that routes requests from Claude Code, Codex and other coding agents to providers like DeepSeek, Kimi, Gemini and OpenRouter, with failover, rule-based routing and request logs. Bring your own API keys. - [Find Skills](https://hebbmind.com/ru/skill/find-skills.md): [Skill] When a user asks whether a skill exists for some task, searches the skills.sh ecosystem with the skills CLI, then recommends and installs a fit. Maintained by Vercel Labs and shipped in the skills CLI repo. - [Vibe-Trading](https://hebbmind.com/ru/mcp/vibe-trading.md): [MCP] Trading research agent from HKU's HKUDS whose MCP server offers 70+ tools for quotes, financials, backtesting and research across A-shares, Hong Kong and US stocks and crypto. Needs local Python; HK, US and crypto research need no API key. For research only; not investment advice. - [Vault](https://hebbmind.com/ru/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server. - [WeKnora CLI](https://hebbmind.com/ru/cli/tencent-cli.md): [CLI] Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+. - [Anthropic Cybersecurity Skills](https://hebbmind.com/ru/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only. - [Compliance Tracking](https://hebbmind.com/ru/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review. - [Cognee MCP](https://hebbmind.com/ru/mcp/cognee-mcp.md): [MCP] Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud. - [Nuclei](https://hebbmind.com/ru/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test. - [Graphiti MCP Server](https://hebbmind.com/ru/mcp/getzep-mcp-server.md): [MCP] Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key. - [Gitleaks](https://hebbmind.com/ru/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks. - [video-use](https://hebbmind.com/ru/skill/video-use.md): [Skill] Browser Use's video editing skill: put raw footage in a folder and chat with Claude Code or Codex to get a finished cut, with filler words and pauses removed, color grading, burned-in subtitles, animations and per-cut self-checks. Needs ffmpeg, Python (uv) and an ElevenLabs API key. - [TruffleHog](https://hebbmind.com/ru/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives. - [Huashu Design](https://hebbmind.com/ru/skill/huashu-design.md): [Skill] Have an agent produce high-fidelity clickable prototypes, editable slides, timeline animations (exportable to MP4/GIF) and infographics in HTML from one sentence. Proposes three design directions first and includes a five-dimension design review. By Huashu, MIT licensed. - [baoyu-skills](https://hebbmind.com/ru/skill/baoyu-skills.md): [Skill] Baoyu's (JimLiu) content creation skills: infographics, covers, article illustrations, slide decks, comics and translation, plus Xiaohongshu cards and publishing to WeChat, Weibo and X. Needs Node.js, bun and an image model API key; some skills rely on Chrome automation or unofficial APIs. - [baoyu-skills](https://hebbmind.com/ru/plugin/baoyu-skills.md): [Plugin] Content creation plugin by Baoyu (JimLiu): infographics, article illustrations, covers, slide decks and translation, plus Xiaohongshu image cards and publishing to WeChat Official Accounts, Weibo and X. Needs Node.js; image generation needs an OpenAI, Google or Tongyi Wanxiang API key. - [promptfoo](https://hebbmind.com/ru/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT. - [Rembg](https://hebbmind.com/ru/cli/rembg.md): [CLI] Removes image backgrounds with one command: single images, whole folders or watched directories, mask-only output and switchable models like U2Net and SAM. Can also run as an HTTP server or process video frames with FFmpeg. Default models run locally. - [radare2](https://hebbmind.com/ru/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript. - [WhisperX](https://hebbmind.com/ru/cli/whisperx.md): [CLI] Fast speech transcription built on faster-whisper, with word-level timestamps and speaker diarization, suited to meeting notes and subtitles. Diarization needs a Hugging Face token; GPU acceleration needs CUDA. - [HandBrake](https://hebbmind.com/ru/cli/handbrake.md): [CLI] Veteran open-source video transcoder. HandBrakeCLI uses built-in presets to batch-compress screen recordings, course videos and footage or convert them to MP4, MKV or WebM for phones and the web. Free, runs locally, installable on macOS via Homebrew. Next page: https://hebbmind.com/ru/tools.md?page=3&profession=algorithm%2Csecurity%2Cmedia