# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for QA or ML / AI or Data engineering or Security: 370 items. > - QA: Functional testing, test automation and quality assurance. > - ML / AI: Model training, evaluation and LLM application development. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [WeKnora CLI](https://hebbmind.com/ru/cli/tencent-cli.md): [CLI] Official CLI for Tencent's open-source knowledge base platform WeKnora: upload documents, manage knowledge bases, run hybrid search and answer questions from them, or serve as a read-only MCP. Needs your own WeKnora deployment and a source build with Go 1.26+. - [jq](https://hebbmind.com/ru/cli/jq.md): [CLI] Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs. - [Anthropic Cybersecurity Skills](https://hebbmind.com/ru/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only. - [Data](https://hebbmind.com/ru/plugin/data.md): [Plugin] Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic. - [SQL Queries](https://hebbmind.com/ru/skill/sql-queries.md): [Skill] Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations. - [Compliance Tracking](https://hebbmind.com/ru/skill/compliance-tracking.md): [Skill] Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review. - [Web Design Guidelines](https://hebbmind.com/ru/skill/web-design-guidelines.md): [Skill] Reviews UI code against Vercel's Web Interface Guidelines, covering accessibility, focus, forms, animation, typography, dark mode and more, listing issues as file:line. Fetches the latest rules before each review. Maintained by Vercel. - [Cognee MCP](https://hebbmind.com/ru/mcp/cognee-mcp.md): [MCP] Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud. - [Nuclei](https://hebbmind.com/ru/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test. - [Graphiti MCP Server](https://hebbmind.com/ru/mcp/getzep-mcp-server.md): [MCP] Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key. - [Grafana k6](https://hebbmind.com/ru/cli/k6.md): [CLI] Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI. - [Lighthouse](https://hebbmind.com/ru/cli/lighthouse.md): [CLI] Official web auditing tool from the Google Chrome team: score pages on performance, accessibility, best practices and SEO from the command line and get HTML, JSON or CSV reports, so agents can iterate on a page. Needs Node 22+ and Chrome. - [Gitleaks](https://hebbmind.com/ru/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks. - [TruffleHog](https://hebbmind.com/ru/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives. - [promptfoo](https://hebbmind.com/ru/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT. - [Awesome Claude Code Subagents](https://hebbmind.com/ru/plugin/awesome-claude-code-subagents.md): [Plugin] 160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need. - [radare2](https://hebbmind.com/ru/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript. - [SOPS](https://hebbmind.com/ru/cli/sops.md): [CLI] Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project. - [BigQuery Basics](https://hebbmind.com/ru/skill/bigquery-basics.md): [Skill] Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project. - [Google Agent Skills](https://hebbmind.com/ru/skill/google-google-skills.md): [Skill] Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics. - [Google Skills](https://hebbmind.com/ru/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others. - [VHS](https://hebbmind.com/ru/cli/vhs.md): [CLI] Scripts terminal sessions in .tape files and records them to GIF, MP4 or WebM, great for CLI demos and docs; text snapshot output also enables terminal integration tests. By Charm; requires ttyd and ffmpeg. - [FunASR](https://hebbmind.com/ru/cli/funasr.md): [CLI] Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch. - [olmOCR](https://hebbmind.com/ru/cli/olmocr.md): [CLI] AI2's tool for converting PDFs and scans to Markdown with a vision LLM, handling equations, tables, handwriting and multi-column layouts, suited to bulk digitizing papers and archives. Local runs need an NVIDIA GPU with 12GB+ VRAM; otherwise use a paid OpenAI-compatible remote endpoint. - [Hurl](https://hebbmind.com/ru/cli/hurl.md): [CLI] Define and run chains of HTTP requests in plain text files, capture variables and assert on status codes, headers and JSONPath or XPath results, for both fetching data and API testing in CI. Open source from Orange. - [Browser Harness](https://hebbmind.com/ru/cli/browser-harness.md): [CLI] Browser control from the browser-use team: an editable CDP connection lets agents drive the Chrome you are already using, writing missing helper functions as they go and keeping them for reuse. Also offers an MCP server. Allow remote debugging in Chrome on first use. - [ARIS (Auto-claude-code-research-in-sleep)](https://hebbmind.com/ru/skill/auto-claude-code-research-in-sleep.md): [Skill] Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too. - [Agent Skills for Context Engineering](https://hebbmind.com/ru/skill/agent-skills-for-context-engineering.md): [Skill] Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform. - [Agent Skills for Context Engineering](https://hebbmind.com/ru/plugin/agent-skills-for-context-engineering.md): [Plugin] Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems. - [Semgrep](https://hebbmind.com/ru/cli/semgrep.md): [CLI] Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in. - [Semgrep MCP](https://hebbmind.com/ru/mcp/semgrep-mcp.md): [MCP] Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN. - [DataX](https://hebbmind.com/ru/cli/datax.md): [CLI] Alibaba's open-source offline data sync tool: JSON job configs batch-sync between heterogeneous sources like MySQL, Oracle, PostgreSQL, Hive, HDFS and MaxCompute, run with python datax.py. Needs JDK 1.8+ and Python; download and unpack the official toolkit. - [Maestro](https://hebbmind.com/ru/cli/maestro.md): [CLI] Write end-to-end UI tests for Android, iOS and web apps in YAML. The CLI includes an MCP server (maestro mcp) so coding agents can tap, assert and generate tests on simulators. Requires Java 17+. - [Maestro MCP](https://hebbmind.com/ru/mcp/mobile-dev-inc-mcp.md): [MCP] MCP built into the CLI of the Maestro mobile UI testing framework (maestro mcp): lets agents view the screen, tap, scroll and assert on iOS/Android simulators, Android devices or Chromium, and write and run YAML end-to-end flows. Needs the Maestro CLI and Java 17+. Official. - [ms-swift](https://hebbmind.com/ru/cli/ms-swift.md): [CLI] ModelScope's official training framework for LLMs and multimodal models: the swift command covers pretraining, fine-tuning, RL, inference, evaluation, quantization and deployment for 600+ text and 400+ multimodal models, with Megatron parallelism and a web UI. Usually needs a GPU. - [DVC](https://hebbmind.com/ru/cli/dvc.md): [CLI] Version datasets and models the way Git versions code: data lives in remote storage like S3 or GCS while versions are tracked in your Git repo. Also offers reproducible pipelines and local experiment tracking, rerunning only the steps affected by a change. - [monolith](https://hebbmind.com/ru/cli/monolith.md): [CLI] Bundles a whole web page with its CSS, images, fonts and scripts into a single HTML file that opens offline exactly as it looked, good for archiving pages or handing them to an agent for offline analysis. It does not run JavaScript, so pre-render dynamic pages with a headless browser. - [F5-TTS](https://hebbmind.com/ru/cli/f5-tts.md): [CLI] Open-source zero-shot TTS via f5-tts_infer-cli: from a few seconds of reference audio it reads Chinese or English text in the same voice, handy for lessons and videos. Needs Python, PyTorch and FFmpeg, ideally a GPU. Pretrained models are non-commercial; get consent before cloning a voice. - [Prompt Master](https://hebbmind.com/ru/skill/prompt-master.md): [Skill] Writes precise prompts for a specific AI tool: identifies the target tool, extracts your intent, asks at most three questions if details are missing, then outputs a lean, paste-ready prompt. Covers dozens of tools including ChatGPT, Claude Code, Cursor, Midjourney and Sora. - [Skill Seekers](https://hebbmind.com/ru/cli/skill-seekers.md): [CLI] Turns 18 kinds of sources, including doc sites, GitHub repos, PDFs and videos, into skill packages for Claude and other platforms, or exports RAG chunks and vector store data. Optional MCP server, and it can call a local agent like Claude Code to enrich content. Needs Python 3.10+. - [Prowler](https://hebbmind.com/ru/cli/prowler.md): [CLI] Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first. - [Playwright CLI](https://hebbmind.com/ru/skill/playwright-cli.md): [Skill] Companion skill for the official Playwright CLI: short commands to open pages, click and fill forms, take snapshots and screenshots, and write and debug Playwright tests, using less context than the MCP approach. Maintained by Microsoft; needs Node.js. - [Playwright CLI](https://hebbmind.com/ru/cli/playwright-cli.md): [CLI] Microsoft Playwright's official browser CLI for coding agents: open pages, click and type, take screenshots and manage sessions, and install the companion skills in one step. Uses fewer tokens than Playwright MCP. Needs Node.js 18+. - [Localization Review](https://hebbmind.com/ru/skill/localization-review.md): [Skill] FormatJS's official localization review skill for software translators: read-only checks of UI strings and translations for ICU syntax, placeholders, terminology consistency and locale formats for dates, numbers and currency, listing issues with evidence and minimal fixes. Never edits files. - [AI Research Skills](https://hebbmind.com/ru/plugin/ai-research-skills.md): [Plugin] Plugin marketplace for AI research with nearly 100 skills in 23 categories, from ideation, fine-tuning and post-training to distributed training, inference serving, evaluation and paper writing, coordinated end to end by the autoresearch skill. - [AI Research Skills](https://hebbmind.com/ru/skill/ai-research-skills.md): [Skill] Nearly 100 skills spanning the AI research workflow: ideation and literature review, fine-tuning and post-training, distributed training, inference serving, evaluation, interpretability and paper writing, tied together by an autoresearch orchestration skill. - [dbt](https://hebbmind.com/ru/cli/dbt.md): [CLI] Command-line framework for warehouse modeling and ELT transformations: write models in SQL and let dbt handle dependencies, data tests and documentation. v2 is rewritten in Rust as a single binary. Maintained by dbt Labs; needs a data warehouse connection. - [Apify MCP Server](https://hebbmind.com/ru/mcp/apify-mcp-server.md): [MCP] Lets agents call thousands of ready-made scrapers and automation Actors from Apify Store to pull data from social media, search engines, maps, e-commerce sites and more. Maintained by Apify; needs an Apify account (OAuth) or API token. - [Nmap](https://hebbmind.com/ru/cli/nmap.md): [CLI] Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test. - [pgcli](https://hebbmind.com/ru/cli/pgcli.md): [CLI] PostgreSQL command-line client with smart autocompletion and syntax highlighting. Compatible with psql environment variables, and -c runs a statement and exits, so agents can query databases non-interactively. Next page: https://hebbmind.com/ru/tools.md?page=4&profession=qa%2Calgorithm%2Cdata-engineering%2Csecurity