# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for DevOps / SRE or ML / AI or Security or Customer support: 456 items. > - DevOps / SRE: Deployment, monitoring, cloud resources and reliability. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Customer support: Tickets, customer questions, knowledge-base upkeep and service quality. - [D2](https://hebbmind.com/cli/d2.md): [CLI] Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control. - [radare2](https://hebbmind.com/cli/radare2.md): [CLI] Open-source reverse engineering framework and CLI: disassemble, debug, emulate and patch binaries across many architectures and file formats, scriptable through r2pipe or built-in JavaScript. - [eza](https://hebbmind.com/cli/eza.md): [CLI] Community-maintained modern replacement for ls (successor to exa) with colored output, tree view, Git status and file icons, plus .gitignore filtering for quickly scanning directory structures. - [SOPS](https://hebbmind.com/cli/sops.md): [CLI] Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project. - [Google Agent Skills](https://hebbmind.com/skill/google-google-skills.md): [Skill] Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics. - [Google Skills](https://hebbmind.com/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others. - [GKE Basics & Critical Gotchas](https://hebbmind.com/skill/gke-basics.md): [Skill] Google's official GKE basics skill: creating clusters, choosing Autopilot or Standard, getting kubectl credentials, configuring Workload Identity and deploying workloads, plus a list of common gotchas. Needs gcloud and a GCP project. - [FunASR](https://hebbmind.com/cli/funasr.md): [CLI] Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch. - [olmOCR](https://hebbmind.com/cli/olmocr.md): [CLI] AI2's tool for converting PDFs and scans to Markdown with a vision LLM, handling equations, tables, handwriting and multi-column layouts, suited to bulk digitizing papers and archives. Local runs need an NVIDIA GPU with 12GB+ VRAM; otherwise use a paid OpenAI-compatible remote endpoint. - [Browser Harness](https://hebbmind.com/cli/browser-harness.md): [CLI] Browser control from the browser-use team: an editable CDP connection lets agents drive the Chrome you are already using, writing missing helper functions as they go and keeping them for reuse. Also offers an MCP server. Allow remote debugging in Chrome on first use. - [Sealos](https://hebbmind.com/cli/sealos.md): [CLI] Sealos's Kubernetes lifecycle CLI: one sealos run deploys a highly available cluster across multiple servers, and cluster images install databases, middleware and other apps, with offline delivery support. Linux only. - [Agent Skills for Context Engineering](https://hebbmind.com/skill/agent-skills-for-context-engineering.md): [Skill] Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform. - [Agent Skills for Context Engineering](https://hebbmind.com/plugin/agent-skills-for-context-engineering.md): [Plugin] Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems. - [ARIS (Auto-claude-code-research-in-sleep)](https://hebbmind.com/skill/auto-claude-code-research-in-sleep.md): [Skill] Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too. - [AWS CLI](https://hebbmind.com/cli/aws-cli.md): [CLI] AWS's official unified CLI for managing EC2, S3, IAM and every other AWS service with one set of commands, with --query (JMESPath) filtering and JSON output that agents can use to inspect and change cloud resources. Run aws configure to set credentials first. - [Semgrep MCP](https://hebbmind.com/mcp/semgrep-mcp.md): [MCP] Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN. - [Semgrep](https://hebbmind.com/cli/semgrep.md): [CLI] Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in. - [Support Ticket Triage](https://hebbmind.com/skill/support-ticket-triage.md): [Skill] Helps support teams categorize and prioritize tickets, emails or chat logs and suggest next steps; drafts replies, organizes repro steps and reminds you to redact customer data before sharing. Works with exports from Zendesk, Intercom and others or pasted chats; no account or API key needed. - [Vercel CLI](https://hebbmind.com/cli/vercel-cli.md): [CLI] Vercel's official CLI: deploy frontend and full-stack projects with one command and manage preview environments, environment variables, domains and logs. Requires a Vercel account (free tier available). - [Dagger](https://hebbmind.com/cli/dagger.md): [CLI] Programmable software delivery engine: write build, test and release pipelines with SDKs in Go, Python, TypeScript and five other languages, all running in containers so local and CI behave the same, with built-in OpenTelemetry tracing. Needs a container runtime such as Docker. - [cloudflared](https://hebbmind.com/cli/cloudflared.md): [CLI] Official Cloudflare Tunnel client: exposes local services to the internet without opening firewall ports and can proxy TCP access like SSH and RDP. Named tunnels need a Cloudflare account and domain; quick tunnels work without signing in. - [yq](https://hebbmind.com/cli/yq.md): [CLI] Lightweight command-line processor with jq-like syntax for reading, modifying and converting YAML, JSON, XML, INI, CSV and more, including in-place config edits. A single dependency-free Go binary. - [DVC](https://hebbmind.com/cli/dvc.md): [CLI] Version datasets and models the way Git versions code: data lives in remote storage like S3 or GCS while versions are tracked in your Git repo. Also offers reproducible pipelines and local experiment tracking, rerunning only the steps affected by a change. - [ms-swift](https://hebbmind.com/cli/ms-swift.md): [CLI] ModelScope's official training framework for LLMs and multimodal models: the swift command covers pretraining, fine-tuning, RL, inference, evaluation, quantization and deployment for 600+ text and 400+ multimodal models, with Megatron parallelism and a web UI. Usually needs a GPU. - [pre-commit](https://hebbmind.com/cli/pre-commit.md): [CLI] Multi-language git hook manager: declare formatting, lint, secret scanning and other hooks in .pre-commit-config.yaml to run automatically before each commit, or have the agent self-check with pre-commit run --all-files before committing. - [direnv](https://hebbmind.com/cli/direnv.md): [CLI] Loads and unloads environment variables per directory: reads .envrc (and optionally .env) when you enter a project and restores the environment when you leave, so configs and secrets do not leak between projects. Hook it into bash, zsh, fish or another shell first. - [F5-TTS](https://hebbmind.com/cli/f5-tts.md): [CLI] Open-source zero-shot TTS via f5-tts_infer-cli: from a few seconds of reference audio it reads Chinese or English text in the same voice, handy for lessons and videos. Needs Python, PyTorch and FFmpeg, ideally a GPU. Pretrained models are non-commercial; get consent before cloning a voice. - [Skill Seekers](https://hebbmind.com/cli/skill-seekers.md): [CLI] Turns 18 kinds of sources, including doc sites, GitHub repos, PDFs and videos, into skill packages for Claude and other platforms, or exports RAG chunks and vector store data. Optional MCP server, and it can call a local agent like Claude Code to enrich content. Needs Python 3.10+. - [Prowler](https://hebbmind.com/cli/prowler.md): [CLI] Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first. - [Prompt Master](https://hebbmind.com/skill/prompt-master.md): [Skill] Writes precise prompts for a specific AI tool: identifies the target tool, extracts your intent, asks at most three questions if details are missing, then outputs a lean, paste-ready prompt. Covers dozens of tools including ChatGPT, Claude Code, Cursor, Midjourney and Sora. - [Nmap](https://hebbmind.com/cli/nmap.md): [CLI] Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test. - [AI Research Skills](https://hebbmind.com/skill/ai-research-skills.md): [Skill] Nearly 100 skills spanning the AI research workflow: ideation and literature review, fine-tuning and post-training, distributed training, inference serving, evaluation, interpretability and paper writing, tied together by an autoresearch orchestration skill. - [AI Research Skills](https://hebbmind.com/plugin/ai-research-skills.md): [Plugin] Plugin marketplace for AI research with nearly 100 skills in 23 categories, from ideation, fine-tuning and post-training to distributed training, inference serving, evaluation and paper writing, coordinated end to end by the autoresearch skill. - [Grype](https://hebbmind.com/cli/grype.md): [CLI] Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore. - [IDA Pro MCP](https://hebbmind.com/mcp/ida-pro-mcp.md): [MCP] Lets agents decompile, disassemble and query cross-references in IDA Pro, and rename variables, change types and add comments, including headless idalib mode. Requires IDA Pro 8.3+ (IDA Free is not supported); the author now recommends Hex-Rays' official IDA MCP instead. - [HexStrike AI](https://hebbmind.com/mcp/hexstrike-ai.md): [MCP] Wraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only. - [gRPCurl](https://hebbmind.com/cli/grpcurl.md): [CLI] curl for gRPC: call any gRPC method with JSON, including bidirectional streaming, browse service definitions via server reflection, proto source files or protosets, with TLS and mutual TLS support. - [LLM](https://hebbmind.com/cli/llm.md): [CLI] Simon Willison's LLM CLI and Python library: call OpenAI, Claude, Gemini and local models from the terminal, with conversations logged to SQLite automatically, plus embeddings, structured extraction, tool calling and a plugin system. - [Infracost](https://hebbmind.com/cli/infracost.md): [CLI] Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available. - [Dust](https://hebbmind.com/cli/dust.md): [CLI] A du replacement written in Rust that shows disk usage as a directory tree with proportion bars, making large files and folders easy to spot. Filter by depth, count or regex, and output JSON with -j for agents to parse. - [Trae Agent](https://hebbmind.com/cli/trae-agent.md): [CLI] ByteDance's open-source, general software engineering agent: trae-cli edits files and runs commands from natural language, supports multiple model providers and MCP, and records full execution trajectories. Transparent design suits agent research and customization. Needs your own model API key. - [Claude Skills (Fullstack Dev Skills)](https://hebbmind.com/plugin/jeffallan-claude-skills.md): [Plugin] Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP). - [Arize Phoenix MCP Server](https://hebbmind.com/mcp/phoenix-mcp.md): [MCP] Connects to the Arize Phoenix observability platform so agents can query LLM traces and sessions, manage prompts, browse datasets and read experiment evaluation results. Maintained by Arize; needs a self-hosted or cloud Phoenix instance. - [Presidio CLI](https://hebbmind.com/cli/presidio.md): [CLI] Scans files and directories for personal data such as names, emails and credit card numbers using Presidio Analyzer, with configurable entity types, confidence thresholds and ignore rules. Needs Python 3.10+ and a spaCy language model. - [GitHub Copilot CLI](https://hebbmind.com/cli/copilot-cli.md): [CLI] GitHub's official terminal coding agent, sharing its harness with the Copilot coding agent and shipping with the GitHub MCP built in. Work with repos, issues and PRs in natural language, approving each action before it runs. Requires a Copilot subscription. - [OSV-Scanner](https://hebbmind.com/cli/osv-scanner.md): [CLI] Google's official dependency vulnerability scanner: parses project lockfiles and container images, checks them against the OSV.dev database to find affected dependencies, and can suggest upgrade fixes (experimental). - [Hugging Face LLM Trainer](https://hebbmind.com/skill/huggingface-llm-trainer.md): [Skill] Lets agents fine-tune language and vision models with TRL or Unsloth on Hugging Face Jobs cloud GPUs, supporting SFT, DPO, GRPO and reward models, and convert results to GGUF for local use. Requires an HF Pro or higher paid plan. Maintained by Hugging Face. - [Hugging Face Skills](https://hebbmind.com/skill/huggingface-skills.md): [Skill] Hugging Face's official skills: manage Hub models and datasets with the hf CLI, fine-tune language and vision models, run model evaluations, and build Gradio apps deployed to Spaces. Needs an HF account; cloud training on HF Jobs requires a paid plan. - [Hugging Face CLI (hf-cli)](https://hebbmind.com/skill/hf-cli.md): [Skill] Teaches agents the Hugging Face Hub CLI hf: search and download models, manage datasets, Spaces, Buckets and repos, and run Jobs and inference endpoints. The skill content is generated from your local CLI, so install hf first. Maintained by Hugging Face. - [Hugging Face Skills](https://hebbmind.com/plugin/huggingface-skills.md): [Plugin] Lets agents work with the Hugging Face Hub through the hf CLI: search and download models and datasets, manage repos and Spaces, and run training and evaluation jobs on cloud GPUs, with more workflow skills installable as needed. Maintained by Hugging Face. Next page: https://hebbmind.com/tools.md?page=5&profession=devops%2Calgorithm%2Csecurity%2Csupport