# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Data engineering or Security or HR: 238 items.

> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - HR: Screening, interviews, onboarding, training and employee relations.

- [MarkItDown](https://hebbmind.com/ru/cli/markitdown.md): [CLI] Converts PDF, Word, Excel, PowerPoint, HTML, images, audio and more into Markdown that keeps headings, lists and tables, ready for LLMs to read and analyze. Maintained by Microsoft; requires Python 3.10+.
- [Claude Security](https://hebbmind.com/ru/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin.
- [DuckDB](https://hebbmind.com/ru/cli/duckdb.md): [CLI] In-process analytical SQL database. Its CLI queries CSV, Parquet and JSON files directly with SQL, no import or server needed, so agents can sample and aggregate large files. Officially maintained.
- [Knowledge Work Plugins](https://hebbmind.com/ru/skill/knowledge-work-plugins.md): [Skill] Anthropic's role-based skill collection covering sales, finance, legal, HR, support, marketing, product, design, operations and data analysis: over a hundred skills you can install one at a time. Works best with CRM, data warehouse and other connectors.
- [MCP Toolbox for Databases](https://hebbmind.com/ru/mcp/mcp-toolbox.md): [MCP] Google's open-source database MCP server with ready-made query and SQL tools for dozens of sources, including PostgreSQL, MySQL, BigQuery, Spanner and MongoDB. Define controlled custom queries in tools.yaml.
- [Trail of Bits Skills](https://hebbmind.com/ru/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.
- [ECC](https://hebbmind.com/ru/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support.
- [Claude Academy Guide](https://hebbmind.com/ru/skill/academy-guide.md): [Skill] When answering questions about using Claude and its products, attaches a matching course, tutorial or case study from the Claude Academy catalog. Recommends only strong matches and never invents courses. Official Anthropic skill.
- [Scrapling](https://hebbmind.com/ru/cli/scrapling.md): [CLI] Adaptive web scraping framework: scrapling extract turns a page into Markdown, text or HTML in one command, with CSS selectors and browser rendering for dynamic pages, plus an MCP server (needs the ai extra). Needs Python 3.10+ and a browser install on first use.
- [Scrapling](https://hebbmind.com/ru/mcp/scrapling.md): [MCP] MCP server built into the adaptive Python scraping framework Scrapling: supports plain HTTP requests, browser rendering and stealth fetching, and uses CSS selectors to pass only the target content to the AI, saving tokens and filtering out prompt injection.
- [PaddleOCR](https://hebbmind.com/ru/cli/paddleocr.md): [CLI] Baidu PaddlePaddle's official OCR and document parsing tool: the paddleocr command reads text from images and parses PDFs and scans into Markdown or JSON, supporting 100+ languages with models that run locally.
- [uv](https://hebbmind.com/ru/cli/uv.md): [CLI] Astral's extremely fast Python package and project manager written in Rust, replacing pip, pipx, poetry, pyenv and more. Supports lockfiles and multiple Python versions, and uvx runs Python tools without installing them.
- [Crawl4AI](https://hebbmind.com/ru/cli/crawl4ai.md): [CLI] Open-source, LLM-friendly web crawler that turns pages into clean Markdown for RAG and agents. Ships the crwl CLI and supports deep crawling and question-driven data extraction (extraction needs an LLM key). Free to self-host.
- [MinerU](https://hebbmind.com/ru/cli/mineru.md): [CLI] Document parser from OpenDataLab that turns PDFs, images and Office files into Markdown or JSON, handling tables, formulas and complex layouts well, with page-by-page reading and citation anchors for agents. Parses locally by default; needs Python 3.10+.
- [career-ops](https://hebbmind.com/ru/skill/career-ops.md): [Skill] Local job search workbench: evaluates role fit and spots fake listings, generates tailored resume and cover letter PDFs, and tracks applications without ever applying for you. Run npx @santifer/career-ops init first, then open Claude Code or Codex in the created folder.
- [Tesseract OCR](https://hebbmind.com/ru/cli/tesseract.md): [CLI] Classic open-source OCR engine and CLI that reads text from images and outputs plain text, hOCR, searchable PDF or TSV. Supports 100+ languages; install the language data for each language you need.
- [Docling](https://hebbmind.com/ru/cli/docling.md): [CLI] Parses PDF, DOCX, PPTX, XLSX, HTML, images and audio, recovering layout, reading order, tables and formulas, and exports Markdown, HTML or lossless JSON. Started by IBM Research, now hosted by the LF AI & Data Foundation; runs fully locally.
- [rclone](https://hebbmind.com/ru/cli/rclone.md): [CLI] 'rsync for cloud storage': sync and copy files across dozens of providers such as S3, Google Drive, OneDrive and Alibaba Cloud OSS, with encryption and mounting. Set up remotes with rclone config before use.
- [Agentic Awesome Skills](https://hebbmind.com/ru/skill/agentic-awesome-skills.md): [Skill] Collection of 2,400+ installable SKILL.md skills across development, security, cloud and ops, AI, marketing and more, with the AAS Core local MCP and an installer that help agents search, pick skills and preview install plans. Formerly antigravity-awesome-skills.
- [Security Guidance](https://hebbmind.com/ru/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access.
- [Pyright LSP](https://hebbmind.com/ru/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin.
- [Reactive Resume MCP](https://hebbmind.com/ru/mcp/reactive-resume.md): [MCP] Official remote MCP for the open-source resume builder Reactive Resume: agents draft and edit resumes and cover letters, export PDFs and track applications; job-based scoring and tailoring need an AI provider set in the app. Needs a free rxresu.me account or a self-hosted instance.
- [aria2](https://hebbmind.com/ru/cli/aria2.md): [CLI] Lightweight multi-protocol command-line downloader that fetches in parallel segments from multiple sources over HTTP(S), FTP, SFTP, BitTorrent and Metalink. Resumes downloads, reads URLs in bulk from text files and offers a JSON-RPC interface for scripts or agents.
- [wshobson/agents](https://hebbmind.com/ru/skill/wshobson-agents.md): [Skill] The 180+ skills bundled with the 90+ plugins in the wshobson/agents marketplace, covering development across many languages and frameworks, testing, ops, security, data and LLM apps. Install individually with npx skills or gh skill; skills only, without subagents or commands.
- [HR Legal Compliance](https://hebbmind.com/ru/plugin/hr-legal-compliance.md): [Plugin] HR and compliance plugin with HR and legal advisor subagents plus employment contract and GDPR skills, for drafting hiring materials, onboarding, offboarding and performance policies, employment contracts, privacy policies, terms of service and DPAs. Mainly US and EU rules.
- [Data Engineering](https://hebbmind.com/ru/plugin/data-engineering.md): [Plugin] Data engineering plugin from the wshobson/agents marketplace: a data engineer subagent, a data pipeline command, and skills for Airflow DAGs, dbt transformations, Spark tuning and data quality, to help build ETL and data warehouses.
- [Security Scanning](https://hebbmind.com/ru/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees.
- [team-composition-analysis](https://hebbmind.com/ru/skill/team-composition-analysis.md): [Skill] Plans teams for seed to Series A startups: which roles to hire at each stage and in what order, org structure, plus salary, equity ranges and headcount budget. Compensation benchmarks are 2024 US market data; adjust for your market and have finance and legal review the plan.
- [GDPR Data Handling](https://hebbmind.com/ru/skill/gdpr-data-handling.md): [Skill] EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions.
- [wshobson/agents](https://hebbmind.com/ru/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content.
- [Employment Contract Templates](https://hebbmind.com/ru/skill/employment-contract-templates.md): [Skill] Templates and drafting guidance for offer letters, employment agreements and handbook policies, helping HR and legal produce consistent employment documents. Written for US employment rules; adapt them for other jurisdictions and have a lawyer review final drafts. No account or API key.
- [Machine Learning Ops](https://hebbmind.com/ru/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills.
- [Lightpanda Browser](https://hebbmind.com/ru/cli/browser.md): [CLI] Headless browser written from scratch in Zig for AI agents and automation, using less memory and running faster than headless Chrome in official benchmarks. fetch turns pages into Markdown, and it can serve CDP or MCP. Telemetry is on by default (an env var disables it); Windows needs WSL.
- [performance-review-writer](https://hebbmind.com/ru/skill/performance-review-writer.md): [Skill] Drafts self-reviews, peer reviews, 360 and upward feedback in STAR structure with concrete examples instead of filler, as Markdown drafts it never submits. With Microsoft WorkIQ it gathers your contributions from Microsoft 365 mail and meetings; otherwise it works from your notes.
- [Marker](https://hebbmind.com/ru/cli/marker.md): [CLI] Converts PDFs, images, PPTX, DOCX, XLSX, EPUB and more into Markdown, JSON or HTML, preserving tables, formulas and layout, with optional LLM help for higher accuracy. Needs Python 3.10+ and PyTorch; large-scale commercial use of the model weights needs a paid license.
- [Nushell](https://hebbmind.com/ru/cli/nushell.md): [CLI] Cross-platform shell built around structured data: pipelines pass tables instead of plain text, and you can open and query JSON, CSV, TOML and more directly. Default builds include nu --mcp, which serves it to agents as an MCP server.
- [Trivy](https://hebbmind.com/ru/cli/trivy.md): [CLI] All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.
- [Vault](https://hebbmind.com/ru/cli/vault.md): [CLI] HashiCorp's secrets management system: the vault CLI reads and writes secrets, issues dynamic database and cloud credentials on demand, encrypts and decrypts data, and manages leases and revocation. Needs a reachable Vault server.
- [jq](https://hebbmind.com/ru/cli/jq.md): [CLI] Lightweight command-line JSON processor that slices, filters, maps and transforms JSON with concise expressions and no runtime dependencies. A staple for agents parsing API responses and logs.
- [Anthropic Cybersecurity Skills](https://hebbmind.com/ru/skill/anthropic-cybersecurity-skills.md): [Skill] Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.
- [Human Resources](https://hebbmind.com/ru/plugin/human-resources.md): [Plugin] HR plugin: drafts offer letters, generates onboarding checklists, runs performance reviews, answers policy questions, and produces compensation benchmarks and people analytics reports. Can connect to HRIS and ATS systems. Official from Anthropic.
- [recruiting-pipeline](https://hebbmind.com/ru/skill/recruiting-pipeline.md): [Skill] Tracks the hiring funnel through sourcing, screening, interviews, debrief and offer, watching stage time and conversion, source effectiveness, offer acceptance and time to hire. With an ATS connected it pulls candidate data and updates status. A brief skill from Anthropic's human-resources plugin.
- [Process Doc](https://hebbmind.com/ru/skill/process-doc.md): [Skill] Turns processes that live in people's heads into SOPs: flowcharts, a RACI matrix (responsible, accountable, consulted, informed), detailed steps and exceptions, ready for handoffs, audits and onboarding. Describe the process or paste existing notes. Official from Anthropic.
- [org-planning](https://hebbmind.com/ru/skill/org-planning.md): [Skill] Helps with headcount planning and org design: maps reporting lines and spans of control, sequences upcoming hires, estimates people costs, and flags structural issues like single points of failure or top-heavy management. Works in plain chat. Official from Anthropic.
- [performance-review](https://hebbmind.com/ru/skill/performance-review.md): [Skill] Performance review season helper: generates self-review and manager review templates and calibration materials, summarizes rating distributions and promotion cases, and rewrites vague feedback into specific behavioral examples. Works in plain chat. Official from Anthropic.
- [policy-lookup](https://hebbmind.com/ru/skill/policy-lookup.md): [Skill] Answers employee policy questions in plain language, such as PTO, benefits, expenses, travel and remote work, with sources cited. Paste the handbook into the chat, or connect Notion, Confluence or another knowledge base to search automatically, cutting repeat HR questions. Official from Anthropic.
- [Payroll Prep](https://hebbmind.com/ru/skill/payroll-prep.md): [Skill] Checks hours before payroll for US small businesses: totals regular time, overtime and PTO from Gusto, QuickBooks Payroll or timesheets, and flags missed punches, overtime anomalies, rate changes and mid-period hires or exits. Prepares only, never runs payroll. Official from Anthropic.
- [SQL Queries](https://hebbmind.com/ru/skill/sql-queries.md): [Skill] Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.
- [draft-offer](https://hebbmind.com/ru/skill/draft-offer.md): [Skill] Drafts offer letters from role, level, location and comp package, listing base salary, equity, signing bonus and first-year total, plus talking points for the hiring manager's negotiation. The template follows US company conventions; have legal review before sending. Official from Anthropic.
- [people-report](https://hebbmind.com/ru/skill/people-report.md): [Skill] Generates people analytics reports from employee data: headcount snapshots, voluntary and involuntary attrition, diversity metrics, spans of control and flight risk, with findings and recommendations for leadership. Needs an uploaded employee CSV or a connected HRIS. Official from Anthropic.

Next page: https://hebbmind.com/ru/tools.md?page=2&profession=data-engineering%2Csecurity%2Chr
