# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for DevOps / SRE or ML / AI or Security or Product / Projects: 629 items. > - DevOps / SRE: Deployment, monitoring, cloud resources and reliability. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Product / Projects: Specs, user research, roadmaps, scheduling and project delivery. - [Research Paper Writing Skills](https://hebbmind.com/ru/skill/research-paper-writing-skills.md): [Skill] Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key. - [Steampipe](https://hebbmind.com/ru/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in. - [Supply Chain Risk Auditor](https://hebbmind.com/ru/skill/supply-chain-risk-auditor.md): [Skill] Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended. - [Agentic Actions Auditor](https://hebbmind.com/ru/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks. - [Trail of Bits Skills](https://hebbmind.com/ru/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [Static Analysis](https://hebbmind.com/ru/skill/static-analysis.md): [Skill] Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally. - [Variant Analysis](https://hebbmind.com/ru/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity. - [Differential Review](https://hebbmind.com/ru/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [stable-diffusion.cpp](https://hebbmind.com/ru/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source. - [Product Manager Skills](https://hebbmind.com/ru/plugin/product-manager-skills.md): [Plugin] Plugin marketplace of 77 product management skills based on JTBD, opportunity solution trees, RICE and other proven methods, covering user interviews, PRDs, roadmaps, prioritization, market sizing and product sunsets. A Codex skill pack is also available. - [Product Manager Skills](https://hebbmind.com/ru/skill/product-manager-skills.md): [Skill] 77 product management skills built on JTBD, opportunity solution trees, RICE, Working Backwards and other proven methods: user interviews, PRDs, roadmaps, prioritization, competitive intel, market sizing and sunsetting, explaining the frameworks as they go. CC BY-NC-SA licensed. - [Notion](https://hebbmind.com/ru/plugin/notion.md): [Plugin] Notion's plugin in OpenAI's official Codex marketplace: uses the Notion connector and hosted MCP to search and update workspace pages, with skills for spec-to-implementation plans, research write-ups, meeting prep and knowledge capture. Codex only; needs Notion authorization. - [Notion Meeting Intelligence](https://hebbmind.com/ru/skill/notion-meeting-intelligence.md): [Skill] Prepares meetings using past notes, requirements and decisions in Notion: picks a template by meeting type, drafts the agenda and pre-reads, and adds research. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP. - [OpenAI Codex Plugins](https://hebbmind.com/ru/plugin/openai-plugins.md): [Plugin] OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install. - [Linear (Codex plugin)](https://hebbmind.com/ru/plugin/openai-linear.md): [Plugin] Linear's official plugin in OpenAI's Codex marketplace: search, create and update Linear issues, projects and initiatives from Codex, and draft PRDs, status updates and customer request summaries. Codex only; needs a Linear account and authorization. - [Microsoft Teams](https://hebbmind.com/ru/plugin/teams.md): [Plugin] OpenAI's official Codex plugin for Microsoft Teams: summarizes chats and channel messages, pulls out action items, and drafts channel replies or meeting follow-ups. Requires signing in to Codex with ChatGPT and authorizing a Microsoft account. - [notion-spec-to-implementation](https://hebbmind.com/ru/skill/notion-spec-to-implementation.md): [Skill] Turns a Notion PRD or feature spec into an implementation plan page and tasks, flagging open questions and linking spec, plan and tasks while tracking progress. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP connected. - [monday.com](https://hebbmind.com/ru/plugin/monday-com.md): [Plugin] monday.com's official plugin in OpenAI's Codex marketplace: search boards, create and update items, assign owners, set timelines and post updates, for campaign schedules, approvals, project tracking and client management. Codex only; needs a monday.com account. - [Jupyter Notebooks](https://hebbmind.com/ru/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins. - [Google Drive](https://hebbmind.com/ru/plugin/google-drive.md): [Plugin] OpenAI's official Codex plugin that makes Google Drive the single entry point to search, organize, share and export files, handing Docs, Sheets, Slides and comments to dedicated sub-skills for summaries, edits and new files. Authorize your Google account in Codex. - [Product Design](https://hebbmind.com/ru/plugin/product-design.md): [Plugin] OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues. - [Granola](https://hebbmind.com/ru/plugin/granola.md): [Plugin] Granola's official plugin in OpenAI's Codex marketplace: search past Granola meeting notes by topic, person, company or date, and cite the discussions and decisions when writing proposals, reports or analyses. Codex only; needs a Granola account already recording meetings. - [OpenAI Developers](https://hebbmind.com/ru/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only. - [Codex Security](https://hebbmind.com/ru/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. - [ClickUp](https://hebbmind.com/ru/plugin/clickup.md): [Plugin] ClickUp's official plugin in OpenAI's Codex marketplace: search your whole ClickUp workspace in natural language, find, create, update and manage tasks, and check whether a project or sprint is at risk of slipping. Codex only; needs a ClickUp account and authorization. - [Data Analytics](https://hebbmind.com/ru/plugin/data-analytics.md): [Plugin] OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools. - [Outlook Calendar](https://hebbmind.com/ru/plugin/outlook-calendar.md): [Plugin] OpenAI's official Codex plugin for Outlook Calendar: summarizes your day, compares availability across people, preps meetings, explains busy and tentative states, and creates, reschedules or cancels meetings. Requires Codex with a ChatGPT sign-in and a Microsoft account. - [Google Calendar](https://hebbmind.com/ru/plugin/google-calendar.md): [Plugin] OpenAI's official Codex plugin for Google Calendar: summarize today's schedule, compare availability across people, prep for meetings, and create, edit or delete events. Requires signing in to Codex with ChatGPT and authorizing your Google account. - [Notion Knowledge Capture](https://hebbmind.com/ru/skill/notion-knowledge-capture.md): [Skill] Turns conversations and notes into structured Notion pages such as team wikis, how-to guides, decision records and FAQs, linked to related pages. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP. - [Notion Research Documentation](https://hebbmind.com/ru/skill/notion-research-documentation.md): [Skill] Searches multiple pages in your Notion workspace and turns them into briefs, research summaries, comparisons or full reports with citations, written back to Notion. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP. - [Defending Code Reference Harness](https://hebbmind.com/ru/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained. - [Data Analytics](https://hebbmind.com/ru/skill/openai-skills.md): [Skill] OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime. - [kubectl-ai](https://hebbmind.com/ru/cli/kubectl-ai.md): [CLI] Manage Kubernetes clusters in natural language: translates intent into kubectl operations and runs them, and can serve as an MCP server for other agents. Uses Gemini by default (API key required) and also supports OpenAI and local models. Maintained by Google Cloud. - [OpenCompass](https://hebbmind.com/ru/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference. - [sd](https://hebbmind.com/ru/cli/sd.md): [CLI] A more intuitive find-and-replace tool than sed: uses JavaScript/Python-style regex syntax, supports literal string mode and in-place file edits, which suits agents doing bulk text rewrites. - [Jupytext](https://hebbmind.com/ru/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip. - [Backlog.md](https://hebbmind.com/ru/cli/backlog-md.md): [CLI] Turns any folder into a Markdown task board: Claude Code or Codex break work into tasks with acceptance criteria for review before coding, managed from the terminal or a browser board. Works without Git for personal plans too. Runs locally with no account; needs Node.js or Homebrew. - [Pricing Page](https://hebbmind.com/ru/skill/pricing-page.md): [Skill] Designs or rewrites a high-converting SaaS pricing page: gathers plans, limits, upgrade triggers and objections, then structures a value headline, monthly/annual toggle, tiered plans, comparison, FAQ and trust sections with copy templates. - [arxiv-latex-cleaner](https://hebbmind.com/ru/cli/arxiv-latex-cleaner.md): [CLI] Cleans a LaTeX project before arXiv submission: removes comments, auxiliary files and unused .tex files and images, and can compress images, so internal notes are not published with the source. From Google Research; installable with Homebrew on macOS. - [Talk to Figma MCP](https://hebbmind.com/ru/mcp/cursor-talk-to-figma-mcp.md): [MCP] Uses a Figma plugin and a local WebSocket server so agents can read and directly edit designs: create frames and text, adjust auto layout and styles, and replace copy in bulk. Requires Bun; now maintained by Grab. - [Trafilatura](https://hebbmind.com/ru/cli/trafilatura.md): [CLI] Python library and CLI for extracting main web content: fetches pages, crawls via sitemaps and RSS feeds, strips headers, footers and other noise, and outputs TXT, Markdown, JSON, XML and more with metadata. Also processes downloaded HTML offline. - [OpenPencil](https://hebbmind.com/ru/mcp/openpencil.md): [MCP] Open-source AI-native vector design tool with an MCP server built into its desktop app, connectable to Claude Code or Codex in one click. Agents read and edit .op designs in natural language, apply style guides and export React, Vue, Flutter or SwiftUI code. Needs the desktop app. - [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/ru/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview. - [zizmor](https://hebbmind.com/ru/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings. - [Summarize](https://hebbmind.com/ru/cli/summarize.md): [CLI] One command extracts or summarizes web pages, PDFs, YouTube videos, podcasts and media files, with JSON output. Summaries can use many model APIs, local models or a logged-in Codex or Claude CLI; plain extraction needs no key. Also has a browser sidebar extension. - [n8n Skills](https://hebbmind.com/ru/skill/n8n-skills.md): [Skill] 14 n8n workflow skills: expression syntax, MCP tool usage, node configuration, validation and troubleshooting, Code nodes, AI Agent workflows and self-hosted n8n deployment. Meant to be used with the n8n-mcp server. - [Google Agents CLI Skills](https://hebbmind.com/ru/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key. - [Taskwarrior](https://hebbmind.com/ru/cli/taskwarrior.md): [CLI] Veteran command-line task manager with projects, tags, priorities, due dates and custom reports, JSON export, and a rich ecosystem of hooks and extensions, well suited for agents that record and track tasks. - [Docker CLI](https://hebbmind.com/ru/cli/docker-cli.md): [CLI] Docker's official CLI for building images, running and managing containers, viewing logs and pushing to registries, a foundational tool for agents setting up isolated environments. Needs a local or remote Docker Engine such as Docker Desktop. - [Ghidra MCP Server](https://hebbmind.com/ru/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first. Next page: https://hebbmind.com/ru/tools.md?page=8&profession=devops%2Calgorithm%2Csecurity%2Cproduct