# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Mobile & desktop or ML / AI or Data engineering or Security or Hardware engineering: 391 items.

> - Mobile & desktop: Building and shipping iOS, Android and desktop apps.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Hardware engineering: Part and assembly modeling, schematics and PCB review, simulation, and BOM and production files.

- [Cognee MCP](https://hebbmind.com/ru/mcp/cognee-mcp.md): [MCP] Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud.
- [Nuclei](https://hebbmind.com/ru/cli/nuclei.md): [CLI] Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.
- [Graphiti MCP Server](https://hebbmind.com/ru/mcp/getzep-mcp-server.md): [MCP] Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.
- [Serena](https://hebbmind.com/ru/mcp/serena.md): [MCP] Gives coding agents IDE-like symbol-level code search, editing and refactoring via language servers (LSP) across 40+ languages, with cross-session memory. An optional paid JetBrains plugin backend adds breakpoint debugging. Install with uv first.
- [Gitleaks](https://hebbmind.com/ru/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.
- [TruffleHog](https://hebbmind.com/ru/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.
- [promptfoo](https://hebbmind.com/ru/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.
- [radare2](https://hebbmind.com/ru/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript.
- [SOPS](https://hebbmind.com/ru/cli/sops.md): [CLI] Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.
- [BigQuery Basics](https://hebbmind.com/ru/skill/bigquery-basics.md): [Skill] Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project.
- [Google Agent Skills](https://hebbmind.com/ru/skill/google-google-skills.md): [Skill] Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.
- [Google Skills](https://hebbmind.com/ru/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.
- [FunASR](https://hebbmind.com/ru/cli/funasr.md): [CLI] Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch.
- [olmOCR](https://hebbmind.com/ru/cli/olmocr.md): [CLI] AI2's tool for converting PDFs and scans to Markdown with a vision LLM, handling equations, tables, handwriting and multi-column layouts, suited to bulk digitizing papers and archives. Local runs need an NVIDIA GPU with 12GB+ VRAM; otherwise use a paid OpenAI-compatible remote endpoint.
- [SwiftLint](https://hebbmind.com/ru/cli/swiftlint.md): [CLI] Style and convention linter for Swift, with most rules built on SwiftSyntax. Configure it with .swiftlint.yml, auto-correct with --fix, and run it in an Xcode build phase or as a SwiftPM plugin.
- [Browser Harness](https://hebbmind.com/ru/cli/browser-harness.md): [CLI] Browser control from the browser-use team: an editable CDP connection lets agents drive the Chrome you are already using, writing missing helper functions as they go and keeping them for reuse. Also offers an MCP server. Allow remote debugging in Chrome on first use.
- [ARIS (Auto-claude-code-research-in-sleep)](https://hebbmind.com/ru/skill/auto-claude-code-research-in-sleep.md): [Skill] Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too.
- [Agent Skills for Context Engineering](https://hebbmind.com/ru/skill/agent-skills-for-context-engineering.md): [Skill] Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform.
- [Agent Skills for Context Engineering](https://hebbmind.com/ru/plugin/agent-skills-for-context-engineering.md): [Plugin] Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems.
- [Semgrep](https://hebbmind.com/ru/cli/semgrep.md): [CLI] Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.
- [Semgrep MCP](https://hebbmind.com/ru/mcp/semgrep-mcp.md): [MCP] Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN.
- [DataX](https://hebbmind.com/ru/cli/datax.md): [CLI] Alibaba's open-source offline data sync tool: JSON job configs batch-sync between heterogeneous sources like MySQL, Oracle, PostgreSQL, Hive, HDFS and MaxCompute, run with python datax.py. Needs JDK 1.8+ and Python; download and unpack the official toolkit.
- [Maestro MCP](https://hebbmind.com/ru/mcp/mobile-dev-inc-mcp.md): [MCP] MCP built into the CLI of the Maestro mobile UI testing framework (maestro mcp): lets agents view the screen, tap, scroll and assert on iOS/Android simulators, Android devices or Chromium, and write and run YAML end-to-end flows. Needs the Maestro CLI and Java 17+. Official.
- [Maestro](https://hebbmind.com/ru/cli/maestro.md): [CLI] Write end-to-end UI tests for Android, iOS and web apps in YAML. The CLI includes an MCP server (maestro mcp) so coding agents can tap, assert and generate tests on simulators. Requires Java 17+.
- [Framelink MCP for Figma](https://hebbmind.com/ru/mcp/figma-context.md): [MCP] Simplifies Figma designs into layout and style data for coding agents, so UIs built from the design are more accurate than working from screenshots. Requires a Figma personal access token.
- [ms-swift](https://hebbmind.com/ru/cli/ms-swift.md): [CLI] ModelScope's official training framework for LLMs and multimodal models: the swift command covers pretraining, fine-tuning, RL, inference, evaluation, quantization and deployment for 600+ text and 400+ multimodal models, with Megatron parallelism and a web UI. Usually needs a GPU.
- [DVC](https://hebbmind.com/ru/cli/dvc.md): [CLI] Version datasets and models the way Git versions code: data lives in remote storage like S3 or GCS while versions are tracked in your Git repo. Also offers reproducible pipelines and local experiment tracking, rerunning only the steps affected by a change.
- [monolith](https://hebbmind.com/ru/cli/monolith.md): [CLI] Bundles a whole web page with its CSS, images, fonts and scripts into a single HTML file that opens offline exactly as it looked, good for archiving pages or handing them to an agent for offline analysis. It does not run JavaScript, so pre-render dynamic pages with a headless browser.
- [F5-TTS](https://hebbmind.com/ru/cli/f5-tts.md): [CLI] Open-source zero-shot TTS via f5-tts_infer-cli: from a few seconds of reference audio it reads Chinese or English text in the same voice, handy for lessons and videos. Needs Python, PyTorch and FFmpeg, ideally a GPU. Pretrained models are non-commercial; get consent before cloning a voice.
- [Prompt Master](https://hebbmind.com/ru/skill/prompt-master.md): [Skill] Writes precise prompts for a specific AI tool: identifies the target tool, extracts your intent, asks at most three questions if details are missing, then outputs a lean, paste-ready prompt. Covers dozens of tools including ChatGPT, Claude Code, Cursor, Midjourney and Sora.
- [Skill Seekers](https://hebbmind.com/ru/cli/skill-seekers.md): [CLI] Turns 18 kinds of sources, including doc sites, GitHub repos, PDFs and videos, into skill packages for Claude and other platforms, or exports RAG chunks and vector store data. Optional MCP server, and it can call a local agent like Claude Code to enrich content. Needs Python 3.10+.
- [Prowler](https://hebbmind.com/ru/cli/prowler.md): [CLI] Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.
- [Apify MCP Server](https://hebbmind.com/ru/mcp/apify-mcp-server.md): [MCP] Lets agents call thousands of ready-made scrapers and automation Actors from Apify Store to pull data from social media, search engines, maps, e-commerce sites and more. Maintained by Apify; needs an Apify account (OAuth) or API token.
- [AI Research Skills](https://hebbmind.com/ru/plugin/ai-research-skills.md): [Plugin] Plugin marketplace for AI research with nearly 100 skills in 23 categories, from ideation, fine-tuning and post-training to distributed training, inference serving, evaluation and paper writing, coordinated end to end by the autoresearch skill.
- [AI Research Skills](https://hebbmind.com/ru/skill/ai-research-skills.md): [Skill] Nearly 100 skills spanning the AI research workflow: ideation and literature review, fine-tuning and post-training, distributed training, inference serving, evaluation, interpretability and paper writing, tied together by an autoresearch orchestration skill.
- [dbt](https://hebbmind.com/ru/cli/dbt.md): [CLI] Command-line framework for warehouse modeling and ELT transformations: write models in SQL and let dbt handle dependencies, data tests and documentation. v2 is rewritten in Rust as a single binary. Maintained by dbt Labs; needs a data warehouse connection.
- [Nmap](https://hebbmind.com/ru/cli/nmap.md): [CLI] Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test.
- [MiniMax Skills](https://hebbmind.com/ru/skill/minimax-ai-skills.md): [Skill] MiniMax's official skill collection covering frontend, full-stack, Android, iOS, Flutter, React Native and GLSL shader development, plus PDF, Word, Excel and PowerPoint document generation. Some media skills need a MiniMax API key. Still in beta.
- [MiniMax Skills](https://hebbmind.com/ru/plugin/minimax-ai-skills.md): [Plugin] MiniMax's official skill plugin with dev guides for frontend, full-stack, Android, iOS, Flutter, React Native and GLSL shaders, plus PDF, PowerPoint, Excel and Word document skills and image, video and music generation. Media skills need a MiniMax API key. Still in beta.
- [pgcli](https://hebbmind.com/ru/cli/pgcli.md): [CLI] PostgreSQL command-line client with smart autocompletion and syntax highlighting. Compatible with psql environment variables, and -c runs a statement and exits, so agents can query databases non-interactively.
- [HexStrike AI](https://hebbmind.com/ru/mcp/hexstrike-ai.md): [MCP] Wraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only.
- [IDA Pro MCP](https://hebbmind.com/ru/mcp/ida-pro-mcp.md): [MCP] Lets agents decompile, disassemble and query cross-references in IDA Pro, and rename variables, change types and add comments, including headless idalib mode. Requires IDA Pro 8.3+ (IDA Free is not supported); the author now recommends Hex-Rays' official IDA MCP instead.
- [Grype](https://hebbmind.com/ru/cli/grype.md): [CLI] Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.
- [LLM](https://hebbmind.com/ru/cli/llm.md): [CLI] Simon Willison's LLM CLI and Python library: call OpenAI, Claude, Gemini and local models from the terminal, with conversations logged to SQLite automatically, plus embeddings, structured extraction, tool calling and a plugin system.
- [Claude Skills (Fullstack Dev Skills)](https://hebbmind.com/ru/plugin/jeffallan-claude-skills.md): [Plugin] Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP).
- [Trae Agent](https://hebbmind.com/ru/cli/trae-agent.md): [CLI] ByteDance's open-source, general software engineering agent: trae-cli edits files and runs commands from natural language, supports multiple model providers and MCP, and records full execution trajectories. Transparent design suits agent research and customization. Needs your own model API key.
- [Arize Phoenix MCP Server](https://hebbmind.com/ru/mcp/phoenix-mcp.md): [MCP] Connects to the Arize Phoenix observability platform so agents can query LLM traces and sessions, manage prompts, browse datasets and read experiment evaluation results. Maintained by Arize; needs a self-hosted or cloud Phoenix instance.
- [mycli](https://hebbmind.com/ru/cli/mycli.md): [CLI] MySQL terminal client with smart autocompletion and syntax highlighting, also compatible with MariaDB and TiDB. Supports --execute and batch mode with CSV or table output, so agents can run SQL directly.
- [Presidio CLI](https://hebbmind.com/ru/cli/presidio.md): [CLI] Scans files and directories for personal data such as names, emails and credit card numbers using Presidio Analyzer, with configurable entity types, confidence thresholds and ignore rules. Needs Python 3.10+ and a spaCy language model.
- [Datasette](https://hebbmind.com/ru/cli/datasette.md): [CLI] Publishes SQLite databases as browsable, queryable web pages and JSON APIs, with SQL queries, metadata and plugins, and deploys to Cloud Run and other platforms with datasette publish. Great for data exploration and data journalism. Needs Python 3.10+.

Next page: https://hebbmind.com/ru/tools.md?page=4&profession=mobile%2Calgorithm%2Cdata-engineering%2Csecurity%2Chardware
