# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for QA or ML / AI or Data engineering or Security: 370 items.

> - QA: Functional testing, test automation and quality assurance.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [Firecrawl MCP Server](https://hebbmind.com/ru/mcp/firecrawl-mcp-server.md): [MCP] Scrapes web pages into Markdown or structured data, with full-site crawling, sitemaps, web search and interaction with dynamic pages. Maintained by Firecrawl; the cloud needs an API key (self-hosting is possible), and the keyless hosted endpoint only offers scrape, search and parse.
- [Frontend Testing Debugging](https://hebbmind.com/ru/skill/playwright-interactive.md): [Skill] Tests and debugs a locally running frontend with Codex's Browser plugin or Playwright: checks blank pages, framework and console errors, captures screenshots, re-verifies after fixes and writes a QA report. Maintained by OpenAI; formerly playwright-interactive in openai/skills.
- [Test Android Apps](https://hebbmind.com/ru/plugin/test-android-apps.md): [Plugin] Reproduces issues on the Android emulator: installs builds, drives the UI with adb, dumps the UI tree, takes screenshots, captures logcat, and gathers performance evidence with Simpleperf and Perfetto. OpenAI's official Codex plugin; needs the Android SDK.
- [OpenAI Developers](https://hebbmind.com/ru/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.
- [Codex Security](https://hebbmind.com/ru/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.
- [Jupyter Notebooks](https://hebbmind.com/ru/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins.
- [Defending Code Reference Harness](https://hebbmind.com/ru/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.
- [OpenCompass](https://hebbmind.com/ru/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference.
- [BrowserTools MCP](https://hebbmind.com/ru/mcp/browser-tools-mcp.md): [MCP] Hands your current browser session to the agent through a Chrome extension: read console logs and network requests, take screenshots, and run Lighthouse performance, accessibility and SEO audits without signing in again.
- [Jupytext](https://hebbmind.com/ru/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip.
- [arxiv-latex-cleaner](https://hebbmind.com/ru/cli/arxiv-latex-cleaner.md): [CLI] Cleans a LaTeX project before arXiv submission: removes comments, auxiliary files and unused .tex files and images, and can compress images, so internal notes are not published with the source. From Google Research; installable with Homebrew on macOS.
- [Trafilatura](https://hebbmind.com/ru/cli/trafilatura.md): [CLI] Python library and CLI for extracting main web content: fetches pages, crawls via sitemaps and RSS feeds, strips headers, footers and other noise, and outputs TXT, Markdown, JSON, XML and more with metadata. Also processes downloaded HTML offline.
- [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/ru/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.
- [zizmor](https://hebbmind.com/ru/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.
- [Dev Browser](https://hebbmind.com/ru/skill/dev-browser.md): [Skill] Lets coding agents control real Chrome with short Puppeteer scripts, with named pages that keep state across calls, accessibility-tree snapshots and screenshots for self-testing web changes. Install the dev-browser CLI globally first; macOS and glibc Linux only.
- [MobileBuildMCP](https://hebbmind.com/ru/mcp/mobilebuildmcp.md): [MCP] Lets agents build, run, test and debug iOS and macOS projects and control simulators and physical devices, with a CLI mode too. Formerly XcodeBuildMCP, now maintained by Sentry; macOS only, requires Xcode 16 or later.
- [csvkit](https://hebbmind.com/ru/cli/csvkit.md): [CLI] Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files.
- [Google Agents CLI Skills](https://hebbmind.com/ru/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.
- [MCP Atlassian](https://hebbmind.com/ru/mcp/mcp-atlassian.md): [MCP] Community-maintained MCP for Jira and Confluence: search with JQL/CQL and create or update issues, pages and comments. Supports both Cloud and Server/Data Center deployments; needs an API token or personal access token.
- [JiraCLI](https://hebbmind.com/ru/cli/jira-cli.md): [CLI] Full-featured Jira CLI: filter, create, transition, assign and link issues and manage epics and sprints, with --plain text output that agents can read. Works with Cloud and self-hosted Jira; set up an API token and run jira init.
- [Ghidra MCP Server](https://hebbmind.com/ru/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.
- [Vitest](https://hebbmind.com/ru/skill/vitest.md): [Skill] Reference for Vitest 5: config, CLI, the test, describe and expect APIs, hooks, mocking with vi, snapshots, coverage, fixtures, concurrency, filtering and tags, reporters, benchmarks, test environments, type testing and multi-project setups. Generated by Anthony Fu from the official docs.
- [Claude Scholar](https://hebbmind.com/ru/plugin/claude-scholar.md): [Plugin] Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist.
- [Claude Scholar](https://hebbmind.com/ru/skill/claude-scholar.md): [Skill] Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin.
- [.NET Agent Skills](https://hebbmind.com/ru/skill/dotnet-skills.md): [Skill] The .NET team's official skill collection, grouped into plugins: ASP.NET Core, Blazor, MAUI, EF Core data access, MSBuild troubleshooting, performance diagnostics, testing, and framework upgrades and migrations. Maintained by Microsoft; install via the Claude Code or Codex plugin marketplace.
- [ExecuteAutomation Playwright MCP Server](https://hebbmind.com/ru/mcp/mcp-playwright.md): [MCP] Community Playwright browser automation MCP from ExecuteAutomation (not Microsoft's official one): navigate, click, fill forms, screenshot and scrape page text, plus send HTTP requests, assert network responses and record actions into test code, with 143 device emulations built in.
- [Peekaboo](https://hebbmind.com/ru/cli/peekaboo.md): [CLI] macOS screenshot and UI automation CLI: capture the screen, read the accessibility tree for structured UI elements, then click, type, and switch windows and menus. Also runs as an MCP server for Claude Code and Codex. Needs macOS 15+ with Screen Recording and Accessibility permissions.
- [Peekaboo](https://hebbmind.com/ru/mcp/peekaboo.md): [MCP] macOS screen capture, accessibility-tree inspection and native UI automation, served over MCP so agents can see the screen and click, type and operate menus. Requires macOS 15+ with Screen Recording and Accessibility permissions granted.
- [LM Studio CLI (lms)](https://hebbmind.com/ru/cli/lms.md): [CLI] LM Studio's official CLI: list, load and unload local models, start and stop the local API server, and check status and logs; ls, ps and other commands support --json output for scripts and agents. Requires the LM Studio desktop app.
- [PySceneDetect](https://hebbmind.com/ru/cli/pyscenedetect.md): [CLI] Detects shot changes in video and splits long footage into scenes, exporting cut lists and per-scene thumbnails, useful for shot analysis, organizing footage and finding edit points. Runs locally; needs Python 3.10+, plus FFmpeg or mkvmerge for splitting.
- [ExifTool](https://hebbmind.com/ru/cli/exiftool.md): [CLI] Classic CLI for reading and writing metadata in hundreds of file types including images, video, audio and PDF, covering EXIF, GPS, IPTC, XMP and camera makers' proprietary tags, with batch editing, stripping and conversion. Requires Perl.
- [agent-device](https://hebbmind.com/ru/cli/agent-device.md): [CLI] From Callstack: lets coding agents drive and verify iOS, Android, HarmonyOS and desktop apps through accessibility snapshots, with taps, form filling, screenshots, logs and performance sampling, plus a built-in MCP server. Requires Node.js 22.12+.
- [agent-device](https://hebbmind.com/ru/mcp/agent-device.md): [MCP] From Callstack: lets coding agents inspect, operate and verify apps on iOS, Android and HarmonyOS simulators and real devices, reading accessibility snapshots, taking screenshots and recordings, and capturing logs and performance data. Ships both a CLI and a built-in MCP server.
- [MCPorter](https://hebbmind.com/ru/cli/mcporter.md): [CLI] CLI and TypeScript runtime for discovering and calling MCP servers from the terminal and scripts: list tool signatures and call tools directly, or generate a standalone CLI or typed client from a server. Auto-imports existing MCP configs from Claude Code, Codex and others.
- [Unlighthouse](https://hebbmind.com/ru/cli/unlighthouse.md): [CLI] Runs Google Lighthouse across an entire site (sampling similar pages smartly) and summarizes SEO, performance and accessibility scores page by page in a local web UI; unlighthouse-ci writes reports directly for agents to read. Great for site-wide SEO checkups. Needs Node.js 22.18+.
- [YouPlot](https://hebbmind.com/ru/cli/youplot.md): [CLI] Draws bar charts, histograms, line charts, scatter plots and box plots in the terminal from CSV/TSV on stdin, so you can glance at data distributions at the end of a shell pipeline. The command is uplot.
- [Gemini API Dev](https://hebbmind.com/ru/skill/gemini-api-dev.md): [Skill] Teaches agents to code against the latest Gemini API and Python/TypeScript SDKs: multi-turn chat, function calling, structured output, and image and speech generation, while avoiding deprecated older models. Maintained by Google's Gemini team.
- [Gemini Skills](https://hebbmind.com/ru/skill/gemini-skills.md): [Skill] Gemini API development skills: gemini-api-dev (core API and SDKs), gemini-live-api-dev (real-time bidirectional audio/video streaming) and gemini-omni-flash-api (Omni video generation and editing), filling in APIs released after model training cutoffs. Maintained by Google's Gemini team.
- [diff-pdf](https://hebbmind.com/ru/cli/diff-pdf.md): [CLI] Visually compares two PDFs page by page: reports differences via exit code, writes a PDF with differences highlighted, or opens a GUI for side-by-side review. Useful for checking contract or generated-document revisions. No longer actively developed.
- [Nali](https://hebbmind.com/ru/cli/nali.md): [CLI] Terminal tool for offline IP geolocation and CDN provider lookup, supporting QQwry, GeoIP2, ip2region and other databases. Pipe output from dig, nslookup and similar commands through it to annotate IPs automatically.
- [lychee](https://hebbmind.com/ru/cli/lychee.md): [CLI] Fast async link checker written in Rust that scans websites and Markdown, HTML and other files for broken links and email addresses, with JSON output, config files and an official GitHub Action, often wired into docs CI.
- [Hugging Face CLI](https://hebbmind.com/ru/cli/huggingface-hub.md): [CLI] Hugging Face's official hf CLI: search, download and upload models and datasets, manage repos and storage buckets, and run jobs on Hugging Face's cloud. Output adapts automatically for agents, and hf skills add installs companion skills. Uploads and similar actions need a login.
- [qsv](https://hebbmind.com/ru/cli/qsv.md): [CLI] Fast Rust toolkit for tabular data with nearly 80 subcommands for querying, stats, cleaning, validation, joins and format conversion on CSV and Excel. Also offers an MCP server and a Claude Cowork plugin.
- [NVIDIA Agent Skills](https://hebbmind.com/ru/plugin/nvidia-skills.md): [Plugin] NVIDIA's official plugin that finds and installs the right skills from NVIDIA's catalog for your task, spanning CUDA acceleration, NIM inference, NeMo training, RAG blueprints, Omniverse simulation and robotics. Listed in both the Claude and Codex official marketplaces.
- [NVIDIA Agent Skills](https://hebbmind.com/ru/skill/nvidia-skills.md): [Skill] NVIDIA's official, verified catalog of hundreds of skills covering CUDA-X libraries, NeMo training, NIM and Dynamo inference, RAG blueprints, Jetson, Omniverse and robotics simulation. The install adds only nvidia-skill-finder, which recommends other skills and installs them once you confirm.
- [Browserbase Skills](https://hebbmind.com/ru/skill/browserbase-skills.md): [Skill] Browserbase's official skills: drive a local or cloud browser with the browse CLI for web scraping and search, turning site traffic into an OpenAPI spec, adversarial UI testing and competitor research. Cloud features need a Browserbase account.
- [CTF Skills](https://hebbmind.com/ru/skill/ctf-skills.md): [Skill] Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills.
- [Postgres MCP Pro](https://hebbmind.com/ru/mcp/postgres-mcp.md): [MCP] PostgreSQL MCP server with database health checks, index tuning, EXPLAIN plan analysis and hypothetical index simulation, plus safe read-only SQL execution in restricted mode.
- [Agent Toolkit for AWS](https://hebbmind.com/ru/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials.
- [SQLMesh](https://hebbmind.com/ru/cli/sqlmesh.md): [CLI] Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt.

Next page: https://hebbmind.com/ru/tools.md?page=6&profession=qa%2Calgorithm%2Cdata-engineering%2Csecurity
