Инструменты

asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key.

Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.

Open-source font editor: fontforge -script runs Python scripts headlessly to batch-edit glyphs, convert between OTF, TTF, UFO and other formats, and generate fonts, for type design and font processing. Homebrew installs the CLI version; install the desktop app for the GUI.

Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.

Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.

Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too.

From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity.

From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.

Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.

Has the agent build a local Next.js editor that turns app screenshots into App Store and Google Play marketing images: real device frames, bold headlines, 18 visual styles, multiple languages and RTL layouts, with one-click export of every required size. Needs Node.js.

Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.

MagicPath's official Codex plugin from OpenAI's plugin marketplace: search and install UI components from MagicPath canvases, apply team themes, and move interfaces from local code onto the canvas to keep iterating. Needs a MagicPath account and Node.js.

OpenAI's official life-science skills: 49 skills query public databases such as UniProt, ClinVar, gnomAD and AlphaFold through Python scripts, with a router skill that breaks down questions, normalizes entities and compiles sourced evidence. Written mainly for Codex.

OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install.

Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.

Adobe's official Codex plugin, listed in OpenAI's plugin marketplace: batch-edit and retouch photos by chat, build social graphics from Express templates, reformat landscape video into vertical shorts and search Creative Cloud assets. Try it as a guest; sign in for more features.

OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime.

OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools.

OpenAI's official Codex plugin with about 50 skills that route questions to genetics, omics, pathway, protein structure, chemistry and clinical evidence sources, can split the work across parallel subagents, and synthesize sourced conclusions.

Figma's Codex plugin in OpenAI's official marketplace: implements UI from designs, generates Code Connect mappings, and creates or updates pages, component libraries, FigJam diagrams and slides in Figma. Needs a connected Figma account.

OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues.