# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Full-stack / Indie or ML / AI or Data analysis or Security: 785 items.

> - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [Build with Claude](https://hebbmind.com/plugin/buildwithclaude.md): [Plugin] Community plugin marketplace bundling hundreds of subagents, slash commands, hooks and skills by category, installable individually or all at once, with the buildwithclaude.com site for browsing community plugins and MCP servers.
- [Google Analytics MCP Server](https://hebbmind.com/mcp/google-analytics-mcp.md): [MCP] Query Google Analytics 4 in natural language: read account and property info and run standard, funnel and realtime reports. Official from Google Analytics (experimental); requires Google Cloud Application Default Credentials.
- [CTF Skills](https://hebbmind.com/skill/ctf-skills.md): [Skill] Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills.
- [Finance Skills](https://hebbmind.com/plugin/finance-skills.md): [Plugin] Plugin marketplace for investment research: six plugin groups covering yfinance market data, earnings previews and recaps, DCF valuation, option payoff charts, ETF premiums, read-only news from X, Discord and other social sources, and TradingView data. Research only, not investment advice.
- [SQLMesh](https://hebbmind.com/cli/sqlmesh.md): [CLI] Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt.
- [Science Skills](https://hebbmind.com/skill/science-skills.md): [Skill] About 40 research skills from Google DeepMind: search arXiv, PubMed and OpenAlex, query UniProt, PDB, ClinVar, ChEMBL and more, run AlphaGenome variant analysis and render structures in PyMOL. Requires uv; AlphaGenome needs an API key, and keys raise limits for OpenAlex, ClinVar and others.
- [Playwright Skill](https://hebbmind.com/skill/playwright-skill.md): [Skill] Lets agents write and run Playwright scripts on the fly for browser testing and automation, auto-detecting local dev servers, with screenshots, responsive checks, login flows and link checking. After installing, run npm run setup in the skill directory.
- [arXiv MCP Server](https://hebbmind.com/mcp/arxiv-mcp-server.md): [MCP] Search and download arXiv papers and read the authors' LaTeX source section by section, export BibTeX and follow topic updates, with papers cached locally. No API key needed.
- [Playwright Skill](https://hebbmind.com/plugin/playwright-skill.md): [Plugin] Lets agents write and run Playwright scripts on the fly for browser automation: page tests, UX checks and multi-step flows, opening a visible browser by default and auto-detecting local dev servers. After installing the plugin, run npm run setup in the skill directory.
- [textlint](https://hebbmind.com/cli/textlint.md): [CLI] Pluggable natural-language linter that checks Markdown and plain text for wording, punctuation and terminology consistency like code, with auto-fix, and can also run as an MCP server. Rules are installed separately, mostly for Japanese and English; requires Node.js 20+.
- [textlint MCP Server](https://hebbmind.com/mcp/textlint.md): [MCP] MCP server built into the textlint proofreader: agents check Markdown, plain text and other documents against your rules for wording, punctuation and formatting issues and get auto-fixed text. Needs Node.js plus a .textlintrc and rule packages in your project; textlint has no default rules.
- [Microsoft Agent Skills](https://hebbmind.com/skill/microsoft-skills.md): [Skill] Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all.
- [Cloudflare Agents SDK](https://hebbmind.com/skill/agents-sdk.md): [Skill] Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare.
- [Cloudflare](https://hebbmind.com/skill/cloudflare.md): [Skill] Cloudflare's official overview skill: recommends platform products such as Workers, R2, D1, Durable Objects, Containers and AI for your needs, then loads the matching sub-skills and docs. The same repo has dedicated skills for Wrangler, the Agents SDK and more.
- [Cloudflare Skills](https://hebbmind.com/plugin/cloudflare-skills.md): [Plugin] Cloudflare's official plugin with skills for Workers, Durable Objects, the Agents SDK, Wrangler, Sandbox and web performance audits, plus the Cloudflare API MCP for account data and up-to-date docs.
- [Cloudflare Skills](https://hebbmind.com/skill/cloudflare-skills.md): [Skill] Cloudflare's official skills with build and deploy guidance for Workers, Wrangler, Durable Objects, the Agents SDK, Sandbox, Email Service and Cloudflare One; the plugin version also bundles the official MCP.
- [khal](https://hebbmind.com/cli/khal.md): [CLI] Standards-based command-line calendar that syncs iCloud and other CalDAV calendars via vdirsyncer, so agents can query your schedule and quickly add events; also has an interactive UI. Setting up vdirsyncer takes some technical effort; no Windows support.
- [Awesome Finance Skills](https://hebbmind.com/skill/awesome-finance-skills.md): [Skill] Finance skills for US, Hong Kong and China A-share markets: news from 10+ sources, quotes and fundamentals, sentiment analysis, time-series forecasts, signal tracking, impact-chain diagrams and reports. Needs Python; some skills download PyTorch models. Not investment advice.
- [Rebiber](https://hebbmind.com/cli/rebiber.md): [CLI] Replaces arXiv preprint entries in your .bib file with the official published versions from DBLP and ACL Anthology, keeping citation keys, to tidy references before camera-ready. Overwrites the file by default, so preview with --dry-run. Mainly covers CS venues; needs Python 3.10+.
- [Expo](https://hebbmind.com/plugin/expo.md): [Plugin] Expo's official plugin covering Expo Router navigation, native UI, data fetching and SDK upgrades, plus EAS builds, OTA updates and app store submission. Some service-related skills rely on paid EAS.
- [Web Quality Skills](https://hebbmind.com/skill/web-quality-skills.md): [Skill] Measurement-first audits and optimization of web quality using Lighthouse, Chrome DevTools performance traces and CrUX data, covering Core Web Vitals, WCAG 2.2 accessibility, SEO and best practices, for any frontend framework. By Addy Osmani (not an official Google project).
- [Supabase MCP Server](https://hebbmind.com/mcp/supabase-mcp.md): [MCP] Connects to your Supabase projects: manage schemas and migrations, run SQL, deploy Edge Functions, create development branches and generate TypeScript types. A remote server hosted by Supabase with OAuth sign-in.
- [Rill](https://hebbmind.com/cli/rill.md): [CLI] Open-source, agent-friendly BI: define metrics and dashboards in YAML and SQL, and rill init generates project instructions and MCP config for Claude Code so agents can build business dashboards and answer questions in natural language. Local use is free; publishing to Rill Cloud needs an account.
- [Agent Toolkit for AWS](https://hebbmind.com/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials.
- [JADX AI MCP](https://hebbmind.com/mcp/jadx-ai-mcp.md): [MCP] A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.
- [Agent Skills for AWS](https://hebbmind.com/skill/aws-skills.md): [Skill] AWS's official skills (Agent Toolkit for AWS) covering IAM, CDK/CloudFormation, serverless, containers, observability, cost management and Bedrock, plus service-specific skills. Running AWS operations requires locally configured credentials.
- [Supabase Postgres Best Practices](https://hebbmind.com/skill/supabase-postgres-best-practices.md): [Skill] Postgres rules ranked by impact: query optimization, indexing, connection pooling, RLS security, schema design and lock troubleshooting, with wrong-vs-right SQL examples, applicable to any Postgres. Maintained by Supabase.
- [Supabase](https://hebbmind.com/skill/supabase.md): [Skill] Supabase's official general skill covering the database, Auth, Edge Functions, Realtime, Storage, vectors and queues, plus supabase-js/SSR integration, the CLI and MCP, migrations and RLS security checks, and it checks the latest docs and changelog before acting.
- [Paper Search MCP](https://hebbmind.com/mcp/paper-search-mcp.md): [MCP] Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.
- [EdgarTools](https://hebbmind.com/mcp/edgartools.md): [MCP] Python library with a built-in MCP server for US SEC EDGAR data: search 10-K, 10-Q, 8-K and other filings and read XBRL-standardized financial statements, Form 4 insider trades and 13F holdings. Free with no API key; just set an EDGAR_IDENTITY.
- [Claude-Supermemory](https://hebbmind.com/plugin/claude-supermemory.md): [Plugin] Supermemory's official Claude Code plugin: hooks save memories automatically when a session ends and recall them on demand, giving persistent memory across sessions and projects, with shared project memory for teams. Needs a Supermemory API key and Node.js 18+.
- [myclaude](https://hebbmind.com/plugin/myclaude.md): [Plugin] Plugin marketplace for multi-agent dev workflows: omo multi-agent orchestration, BMAD agile role flows, requirements-driven development, SPARV and common dev commands, delegating coding tasks to Codex, Claude, Gemini and other backends (their CLIs installed separately). AGPL licensed.
- [Bright Data MCP](https://hebbmind.com/mcp/brightdata-mcp.md): [MCP] Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.
- [ScanCode Toolkit](https://hebbmind.com/cli/scancode-toolkit.md): [CLI] Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.
- [shot-scraper](https://hebbmind.com/cli/shot-scraper.md): [CLI] Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use.
- [Antigravity CLI](https://hebbmind.com/cli/antigravity-cli.md): [CLI] Google's official terminal coding agent and successor to Gemini CLI: understands your codebase and, with your approval, edits files and runs commands. Shares its engine and settings with the Antigravity 2.0 desktop app. Closed source; sign in with a Google account; free tier included.
- [Perplexity API Platform MCP Server](https://hebbmind.com/mcp/modelcontextprotocol.md): [MCP] Perplexity's official MCP with four tools: web search, grounded Q&A, deep research and reasoning, available remotely or run locally. Requires a Perplexity API key.
- [x64dbg MCP Server](https://hebbmind.com/mcp/x64dbg-mcp-server.md): [MCP] A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.
- [Excalidraw MCP Server](https://hebbmind.com/mcp/mcp-excalidraw.md): [MCP] Gives agents a live local Excalidraw canvas: add, edit and delete elements to draw architecture diagrams and flowcharts, take screenshots to check the result, convert Mermaid and export .excalidraw files. Runs locally with no API key; also ships a CLI and an agent skill.
- [MFLUX](https://hebbmind.com/cli/mflux.md): [CLI] Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.
- [Modern Web Guidance](https://hebbmind.com/plugin/modern-web-guidance.md): [Plugin] Gives agents on-demand guidance for the modern web platform, covering View Transitions, container queries, Popover, INP optimization, accessibility and more, with browser compatibility data so they avoid outdated code. Maintained by the Google Chrome team; currently in preview.
- [Apify Agent Skills](https://hebbmind.com/skill/apify-agent-skills.md): [Skill] Apify's official skill collection: picks from 130+ curated Actors to scrape public data from social networks, maps, e-commerce sites and more, and can also build, package and deploy Actors. Needs an Apify account; a free tier is available.
- [Tavily MCP Server](https://hebbmind.com/mcp/tavily-mcp.md): [MCP] Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.
- [Supabase CLI](https://hebbmind.com/cli/supabase-cli.md): [CLI] Supabase's official CLI: runs the full backend stack locally (Postgres, Auth, Storage, Edge Functions), manages database migrations, generates types and deploys functions. The local stack requires Docker.
- [TDD Guard](https://hebbmind.com/plugin/tdd-guard.md): [Plugin] Uses hooks to enforce test-driven development in Claude Code: blocks implementation without a failing test, prevents code beyond what tests require, and can use lint results to push refactoring. Needs Node.js 22+. Still maintained, but the author suggests its successor Probity for new projects.
- [Gemini MCP Tool](https://hebbmind.com/mcp/gemini-mcp-tool.md): [MCP] Lets Claude Code and other agents call Antigravity CLI or Gemini CLI, using Gemini's large context window to analyze big files and whole codebases; with Gemini CLI it can also test code in a sandbox. Install and sign in to the CLI first. Not an official Google project.
- [Agent Skills for WordPress](https://hebbmind.com/skill/agent-skills.md): [Skill] WordPress's official skill collection: block development, block themes, plugin architecture, REST API, Interactivity API, WP-CLI, performance profiling and Playground, so agents write code to modern WordPress standards and avoid common security pitfalls.
- [Stripe CLI](https://hebbmind.com/cli/stripe-cli.md): [CLI] Stripe's official CLI: forward and trigger webhook events locally, tail API request logs in real time, and create, read, update or delete Stripe objects to debug payment integrations. Needs a Stripe account; run stripe login first.
- [MiniMax CLI (mmx)](https://hebbmind.com/cli/minimax-ai-cli.md): [CLI] MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription.
- [PR Lens](https://hebbmind.com/skill/pr-lens.md): [Skill] Draws a code change or part of a codebase as an animated architecture or data-flow diagram. The agent writes a JSON graph, validates and renders it to SVG with the PR Lens CLI, then pushes it to a prlens.dev canvas or attaches it to a GitHub, GitLab or Bitbucket pull request.

Next page: https://hebbmind.com/tools.md?page=12&profession=fullstack%2Calgorithm%2Cdata%2Csecurity
