# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for QA or Data engineering or Data analysis or Security: 348 items. > - QA: Functional testing, test automation and quality assurance. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [MarkItDown](https://hebbmind.com/ru/cli/markitdown.md): [CLI] Converts PDF, Word, Excel, PowerPoint, HTML, images, audio and more into Markdown that keeps headings, lists and tables, ready for LLMs to read and analyze. Maintained by Microsoft; requires Python 3.10+. - [Code Review](https://hebbmind.com/ru/plugin/code-review.md): [Plugin] Reviews pull requests with several parallel subagents, scores each finding by confidence to filter out false positives, and can post the results as PR comments. Official Anthropic plugin; requires a logged-in GitHub CLI. - [Browser Use](https://hebbmind.com/ru/skill/browser-use.md): [Skill] Controls your local Chrome over CDP to navigate, click, type, take screenshots and scrape data, reusing logged-in sessions. Official browser-use skill; install the browser-use CLI with uv first. - [Browser Use](https://hebbmind.com/ru/cli/browser-use.md): [CLI] Open-source browser agent project. Its browser-use CLI lets Claude Code, Codex and other agents drive your logged-in local Chrome with Python snippets, or connect to a cloud browser; also ships a Python agent library. The cloud browser needs an API key. - [Scientific Agent Skills](https://hebbmind.com/ru/skill/scientific-agent-skills.md): [Skill] 166 research skills maintained by K-Dense (formerly Claude Scientific Skills), spanning bioinformatics, cheminformatics, clinical research, materials and physics, including unified access to 78 public databases such as PubChem and UniProt. Works with Claude Code, Codex and Cursor. - [Claude Security](https://hebbmind.com/ru/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [DuckDB](https://hebbmind.com/ru/cli/duckdb.md): [CLI] In-process analytical SQL database. Its CLI queries CSV, Parquet and JSON files directly with SQL, no import or server needed, so agents can sample and aggregate large files. Officially maintained. - [Playwright MCP](https://hebbmind.com/ru/mcp/playwright.md): [MCP] Lets agents drive a real browser through the accessibility tree: navigate, click, fill forms and take screenshots, without needing a vision model. Maintained by Microsoft. - [MCP Toolbox for Databases](https://hebbmind.com/ru/mcp/mcp-toolbox.md): [MCP] Google's open-source database MCP server with ready-made query and SQL tools for dozens of sources, including PostgreSQL, MySQL, BigQuery, Spanner and MongoDB. Define controlled custom queries in tools.yaml. - [Trail of Bits Skills](https://hebbmind.com/ru/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace. - [Test-Driven Development](https://hebbmind.com/ru/skill/test-driven-development.md): [Skill] Forces red-green-refactor: write a test and watch it fail, then write the minimum code to pass. Any code written without a verified failing test gets deleted and redone. From the Superpowers workflow. - [Diagnosing Bugs](https://hebbmind.com/ru/skill/diagnosing-bugs.md): [Skill] A disciplined process for hard bugs and performance regressions: build a reliable reproduction loop, reproduce and minimize, form hypotheses, instrument to verify, then fix and add a regression test, redacting secrets in output. By Matt Pocock. - [ECC](https://hebbmind.com/ru/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [XLSX](https://hebbmind.com/ru/skill/xlsx.md): [Skill] Creates, edits and analyzes Excel spreadsheets: formulas, formatting, charts and data cleaning, plus conversion between CSV, TSV and other tabular formats. The official Anthropic skill behind Claude's document features; source-available, not open source. - [webapp-testing](https://hebbmind.com/ru/skill/webapp-testing.md): [Skill] Drives local web apps with Python Playwright scripts to verify features, debug the UI, take screenshots and read browser logs. Includes helper scripts to start and stop dev servers. Official Anthropic skill. - [PR Review Toolkit](https://hebbmind.com/ru/plugin/pr-review-toolkit.md): [Plugin] Six specialized review subagents that check comment accuracy, test coverage, silent failures, type design, code style and simplification opportunities. Run them individually or all at once. Official Anthropic plugin. - [gstack](https://hebbmind.com/ru/skill/gstack.md): [Skill] Skill pack from YC president Garry Tan: slash commands such as /office-hours, /plan-ceo-review, /review, /qa and /ship play CEO, engineering manager, designer, QA and release engineer. Needs Git and Bun; clone the repo and run ./setup as the README describes. - [Browser Use MCP](https://hebbmind.com/ru/mcp/browser-use-mcp.md): [MCP] Local MCP server built into Browser Use: lets agents navigate, click, type and extract page content, or hand multi-step tasks to the built-in browser agent. Bring your own OpenAI or Anthropic API key. - [Agent Skills](https://hebbmind.com/ru/plugin/agent-skills.md): [Plugin] Addy Osmani's production-grade engineering skill pack covering spec, planning, implementation, testing, review and shipping, with commands like /spec, /plan, /build, /test, /review and /ship. Supports both Claude Code and Codex. - [Agent Skills (Addy Osmani)](https://hebbmind.com/ru/skill/addyosmani-agent-skills.md): [Skill] Engineering skill collection spanning define, plan, build, verify, review and ship, with /spec, /plan, /build, /test, /review and /ship commands, including TDD, code review and web performance audits. By Addy Osmani. - [Playwright](https://hebbmind.com/ru/cli/playwright.md): [CLI] Microsoft's cross-browser end-to-end testing framework: one API drives Chromium, Firefox and WebKit, npx playwright test runs tests in parallel and isolation, with auto-waiting and trace replay for debugging failures. - [Scrapling](https://hebbmind.com/ru/cli/scrapling.md): [CLI] Adaptive web scraping framework: scrapling extract turns a page into Markdown, text or HTML in one command, with CSS selectors and browser rendering for dynamic pages, plus an MCP server (needs the ai extra). Needs Python 3.10+ and a browser install on first use. - [PaddleOCR](https://hebbmind.com/ru/cli/paddleocr.md): [CLI] Baidu PaddlePaddle's official OCR and document parsing tool: the paddleocr command reads text from images and parses PDFs and scans into Markdown or JSON, supporting 100+ languages with models that run locally. - [Scrapling](https://hebbmind.com/ru/mcp/scrapling.md): [MCP] MCP server built into the adaptive Python scraping framework Scrapling: supports plain HTTP requests, browser rendering and stealth fetching, and uses CSS selectors to pass only the target content to the AI, saving tokens and filtering out prompt injection. - [uv](https://hebbmind.com/ru/cli/uv.md): [CLI] Astral's extremely fast Python package and project manager written in Rust, replacing pip, pipx, poetry, pyenv and more. Supports lockfiles and multiple Python versions, and uvx runs Python tools without installing them. - [Crawl4AI](https://hebbmind.com/ru/cli/crawl4ai.md): [CLI] Open-source, LLM-friendly web crawler that turns pages into clean Markdown for RAG and agents. Ships the crwl CLI and supports deep crawling and question-driven data extraction (extraction needs an LLM key). Free to self-host. - [MinerU](https://hebbmind.com/ru/cli/mineru.md): [CLI] Document parser from OpenDataLab that turns PDFs, images and Office files into Markdown or JSON, handling tables, formulas and complex layouts well, with page-by-page reading and citation anchors for agents. Parses locally by default; needs Python 3.10+. - [Tesseract OCR](https://hebbmind.com/ru/cli/tesseract.md): [CLI] Classic open-source OCR engine and CLI that reads text from images and outputs plain text, hOCR, searchable PDF or TSV. Supports 100+ languages; install the language data for each language you need. - [OpenBB Platform CLI](https://hebbmind.com/ru/cli/openbb-finance-cli.md): [CLI] Command-line edition of the open-source OpenBB investment research platform: query stock prices, financial statements, macroeconomic and other financial data from the terminal, and automate data pulls with Routine scripts. Officially maintained; some sources need API keys. - [OpenBB MCP Server](https://hebbmind.com/ru/mcp/openbb-finance-mcp-server.md): [MCP] Official OpenBB MCP server exposing the OpenBB Platform's equity, ETF, macroeconomic, crypto and news data to agents; enable only the tool categories you need to save context. Needs uv locally; some data sources need your own API keys. Not investment advice. - [act](https://hebbmind.com/ru/cli/act.md): [CLI] Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed. - [Docling](https://hebbmind.com/ru/cli/docling.md): [CLI] Parses PDF, DOCX, PPTX, XLSX, HTML, images and audio, recovering layout, reading order, tables and formulas, and exports Markdown, HTML or lossless JSON. Started by IBM Research, now hosted by the LF AI & Data Foundation; runs fully locally. - [rclone](https://hebbmind.com/ru/cli/rclone.md): [CLI] 'rsync for cloud storage': sync and copy files across dozens of providers such as S3, Google Drive, OneDrive and Alibaba Cloud OSS, with encryption and mounting. Set up remotes with rclone config before use. - [Database Lookup](https://hebbmind.com/ru/skill/database-lookup.md): [Skill] Unified database lookup skill from K-Dense's scientific collection: reproducibly queries about 80 public database APIs such as PubChem, UniProt, ChEMBL, ClinicalTrials.gov and FRED, returning traceable results with endpoints, parameters and count checks. Some need API keys. - [Statistical Analysis](https://hebbmind.com/ru/skill/statistical-analysis.md): [Skill] Guides agents to the right statistical method for research data: t-tests, ANOVA, chi-square, regression and Bayesian analysis, checking assumptions, computing effect sizes and power, and reporting results in APA format. Python-based (pingouin, statsmodels); by K-Dense. - [Scanpy Single-Cell Analysis](https://hebbmind.com/ru/skill/scanpy.md): [Skill] Teaches agents standard single-cell RNA-seq analysis with Scanpy: QC, normalization, PCA/UMAP, clustering, differential expression and plots, with ready-to-run pipeline scripts and guidance on converting Seurat and other R objects to h5ad. Needs Python 3.12+; by K-Dense. - [Chrome DevTools MCP](https://hebbmind.com/ru/plugin/chrome-devtools-mcp.md): [Plugin] Official Chrome plugin bundling the Chrome DevTools MCP with debugging skills for accessibility, LCP and memory leaks: lets agents drive and inspect a real Chrome and analyze network requests, console logs and performance traces. Collects usage stats by default; can be disabled. - [Chrome DevTools](https://hebbmind.com/ru/skill/chrome-devtools.md): [Skill] Teaches agents to use the Chrome DevTools MCP efficiently: snapshot first to get element uids, screenshot only when needed, paginate and filter large output, inspect CSS and test browser extensions. Needs chrome-devtools-mcp configured; maintained by the Chrome DevTools team. - [Chrome DevTools MCP](https://hebbmind.com/ru/mcp/chrome-devtools-mcp.md): [MCP] Lets agents control and inspect a real Chrome: read the console and network requests, take screenshots, and record performance traces with optimization suggestions. Maintained by the Chrome DevTools team. - [Open Code Review](https://hebbmind.com/ru/skill/open-code-review.md): [Skill] Drives Alibaba's open-source ocr CLI to review Git changes (working tree, a commit or a branch diff), grouping line-level comments by severity and fixing them on request. Needs an LLM endpoint (Anthropic, OpenAI and other protocols); installs the CLI if missing. By Alibaba. - [Agentic Awesome Skills](https://hebbmind.com/ru/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills. - [Bruno CLI](https://hebbmind.com/ru/cli/bruno-cli.md): [CLI] Official CLI (bru) for the open-source API client Bruno: runs collections stored as plain text in your repo, switches environments, outputs JSON results and imports collections from OpenAPI, making API tests easy to run in CI. - [Playwright](https://hebbmind.com/ru/plugin/playwright.md): [Plugin] Wraps Microsoft's Playwright MCP so agents can drive a real browser to navigate, click, fill forms and take screenshots for end-to-end tests and page checks. In Anthropic's official marketplace; needs Node.js. - [Security Guidance](https://hebbmind.com/ru/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [Pyright LSP](https://hebbmind.com/ru/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin. - [agent-browser](https://hebbmind.com/ru/skill/agent-browser.md): [Skill] Companion skill for the agent-browser CLI: has the agent load usage matching the installed version to navigate, fill forms, take screenshots and run exploratory tests, and can also drive Electron desktop apps. Install the agent-browser CLI first; from Vercel Labs. - [agent-browser](https://hebbmind.com/ru/cli/agent-browser.md): [CLI] Browser automation CLI built for AI agents in native Rust: open pages, click and fill forms by refs from accessibility tree snapshots, read text and take screenshots, with compact snapshots and output limits to save context. From Vercel Labs; reuses local Chrome or installs one. - [agent-browser](https://hebbmind.com/ru/plugin/agent-browser.md): [Plugin] Browser automation plugin from Vercel Labs: agents drive Chrome through accessibility tree snapshots and element refs to navigate, click, fill forms and take screenshots, for web testing and exploratory QA. Install the agent-browser CLI first (npm, Homebrew or Cargo). - [aria2](https://hebbmind.com/ru/cli/aria2.md): [CLI] Lightweight multi-protocol command-line downloader that fetches in parallel segments from multiple sources over HTTP(S), FTP, SFTP, BitTorrent and Metalink. Resumes downloads, reads URLs in bulk from text files and offers a JSON-RPC interface for scripts or agents. - [curl](https://hebbmind.com/ru/cli/curl.md): [CLI] Command-line tool for transferring data by URL over 20+ protocols including HTTP(S), FTP, SFTP, WebSocket and MQTT; a staple for agents calling APIs and downloading files. Preinstalled on macOS and most Linux distributions. Next page: https://hebbmind.com/ru/tools.md?page=2&profession=qa%2Cdata-engineering%2Cdata%2Csecurity