# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for ML / AI or Data analysis or Security: 362 items. > - ML / AI: Model training, evaluation and LLM application development. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [Excel MCP Server](https://hebbmind.com/mcp/excel-mcp-server.md): [MCP] Create, read and modify xlsx workbooks without Microsoft Excel installed: formulas, formatting and conditional formatting, charts, pivot tables and tables. Runs locally over stdio or as a remote HTTP service. - [Nali](https://hebbmind.com/cli/nali.md): [CLI] Terminal tool for offline IP geolocation and CDN provider lookup, supporting QQwry, GeoIP2, ip2region and other databases. Pipe output from dig, nslookup and similar commands through it to annotate IPs automatically. - [AiPy](https://hebbmind.com/cli/aipyapp.md): [CLI] Knownsec's open-source Python-use agent: describe a task in plain language and it writes and runs Python on your machine, e.g. tidying Excel files, summarizing attendance or screening resumes. Needs Python 3.11+ and a model API key such as DeepSeek; code runs locally, so back up important files. - [NotFair Plugin](https://hebbmind.com/plugin/notfair-plugin.md): [Plugin] Open-source marketing plugin with 48 skills: SEO and AI search optimization (GEO), GA4 and Search Console analysis, ad diagnostics for Google, Meta, X, LinkedIn, Reddit and TikTok, and WordPress upkeep. Some SEO skills need only a URL; live data requires NotFair OAuth and linked accounts. - [Hugging Face CLI](https://hebbmind.com/cli/huggingface-hub.md): [CLI] Hugging Face's official hf CLI: search, download and upload models and datasets, manage repos and storage buckets, and run jobs on Hugging Face's cloud. Output adapts automatically for agents, and hf skills add installs companion skills. Uploads and similar actions need a login. - [Camelot](https://hebbmind.com/cli/camelot.md): [CLI] Open-source PDF table extraction with a camelot CLI: exports tables from financial reports, bank statements and statistical reports to Excel, CSV or Markdown, with an accuracy score. Needs Python 3.10+; handles text-based PDFs by default, scans need the ml and ocr extras. Double-check results. - [qsv](https://hebbmind.com/cli/qsv.md): [CLI] Fast Rust toolkit for tabular data with nearly 80 subcommands for querying, stats, cleaning, validation, joins and format conversion on CSV and Excel. Also offers an MCP server and a Claude Cowork plugin. - [Browserbase Skills](https://hebbmind.com/skill/browserbase-skills.md): [Skill] Browserbase's official skills: drive a local or cloud browser with the browse CLI for web scraping and search, turning site traffic into an OpenAPI spec, adversarial UI testing and competitor research. Cloud features need a Browserbase account. - [DBHub](https://hebbmind.com/mcp/dbhub.md): [MCP] One server connecting PostgreSQL, MySQL, MariaDB, SQL Server, Oracle and SQLite, exposing just two tools by default to save context, with read-only mode and SSH tunneling. From Bytebase. - [NVIDIA Agent Skills](https://hebbmind.com/skill/nvidia-skills.md): [Skill] NVIDIA's official, verified catalog of hundreds of skills covering CUDA-X libraries, NeMo training, NIM and Dynamo inference, RAG blueprints, Jetson, Omniverse and robotics simulation. The install adds only nvidia-skill-finder, which recommends other skills and installs them once you confirm. - [NVIDIA Agent Skills](https://hebbmind.com/plugin/nvidia-skills.md): [Plugin] NVIDIA's official plugin that finds and installs the right skills from NVIDIA's catalog for your task, spanning CUDA acceleration, NIM inference, NeMo training, RAG blueprints, Omniverse simulation and robotics. Listed in both the Claude and Codex official marketplaces. - [Google Analytics MCP Server](https://hebbmind.com/mcp/google-analytics-mcp.md): [MCP] Query Google Analytics 4 in natural language: read account and property info and run standard, funnel and realtime reports. Official from Google Analytics (experimental); requires Google Cloud Application Default Credentials. - [CTF Skills](https://hebbmind.com/skill/ctf-skills.md): [Skill] Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills. - [Finance Skills](https://hebbmind.com/plugin/finance-skills.md): [Plugin] Plugin marketplace for investment research: six plugin groups covering yfinance market data, earnings previews and recaps, DCF valuation, option payoff charts, ETF premiums, read-only news from X, Discord and other social sources, and TradingView data. Research only, not investment advice. - [SQLMesh](https://hebbmind.com/cli/sqlmesh.md): [CLI] Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt. - [Science Skills](https://hebbmind.com/skill/science-skills.md): [Skill] About 40 research skills from Google DeepMind: search arXiv, PubMed and OpenAlex, query UniProt, PDB, ClinVar, ChEMBL and more, run AlphaGenome variant analysis and render structures in PyMOL. Requires uv; AlphaGenome needs an API key, and keys raise limits for OpenAlex, ClinVar and others. - [arXiv MCP Server](https://hebbmind.com/mcp/arxiv-mcp-server.md): [MCP] Search and download arXiv papers and read the authors' LaTeX source section by section, export BibTeX and follow topic updates, with papers cached locally. No API key needed. - [Microsoft Agent Skills](https://hebbmind.com/skill/microsoft-skills.md): [Skill] Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all. - [Cloudflare Agents SDK](https://hebbmind.com/skill/agents-sdk.md): [Skill] Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare. - [Awesome Finance Skills](https://hebbmind.com/skill/awesome-finance-skills.md): [Skill] Finance skills for US, Hong Kong and China A-share markets: news from 10+ sources, quotes and fundamentals, sentiment analysis, time-series forecasts, signal tracking, impact-chain diagrams and reports. Needs Python; some skills download PyTorch models. Not investment advice. - [Rebiber](https://hebbmind.com/cli/rebiber.md): [CLI] Replaces arXiv preprint entries in your .bib file with the official published versions from DBLP and ACL Anthology, keeping citation keys, to tidy references before camera-ready. Overwrites the file by default, so preview with --dry-run. Mainly covers CS venues; needs Python 3.10+. - [Rill](https://hebbmind.com/cli/rill.md): [CLI] Open-source, agent-friendly BI: define metrics and dashboards in YAML and SQL, and rill init generates project instructions and MCP config for Claude Code so agents can build business dashboards and answer questions in natural language. Local use is free; publishing to Rill Cloud needs an account. - [Agent Toolkit for AWS](https://hebbmind.com/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials. - [JADX AI MCP](https://hebbmind.com/mcp/jadx-ai-mcp.md): [MCP] A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv. - [Paper Search MCP](https://hebbmind.com/mcp/paper-search-mcp.md): [MCP] Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key. - [EdgarTools](https://hebbmind.com/mcp/edgartools.md): [MCP] Python library with a built-in MCP server for US SEC EDGAR data: search 10-K, 10-Q, 8-K and other filings and read XBRL-standardized financial statements, Form 4 insider trades and 13F holdings. Free with no API key; just set an EDGAR_IDENTITY. - [Bright Data MCP](https://hebbmind.com/mcp/brightdata-mcp.md): [MCP] Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month. - [ScanCode Toolkit](https://hebbmind.com/cli/scancode-toolkit.md): [CLI] Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews. - [shot-scraper](https://hebbmind.com/cli/shot-scraper.md): [CLI] Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use. - [x64dbg MCP Server](https://hebbmind.com/mcp/x64dbg-mcp-server.md): [MCP] A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token. - [MFLUX](https://hebbmind.com/cli/mflux.md): [CLI] Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use. - [Apify Agent Skills](https://hebbmind.com/skill/apify-agent-skills.md): [Skill] Apify's official skill collection: picks from 130+ curated Actors to scrape public data from social networks, maps, e-commerce sites and more, and can also build, package and deploy Actors. Needs an Apify account; a free tier is available. - [Tavily MCP Server](https://hebbmind.com/mcp/tavily-mcp.md): [MCP] Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available. - [MiniMax CLI (mmx)](https://hebbmind.com/cli/minimax-ai-cli.md): [CLI] MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription. - [sqlite-utils](https://hebbmind.com/cli/sqlite-utils.md): [CLI] A CLI and Python library by Simon Willison: imports JSON and CSV straight into SQLite with automatic table creation, runs in-memory SQL queries over files, and supports full-text search and table transformations. - [OSS Review Toolkit (ORT)](https://hebbmind.com/cli/ort.md): [CLI] The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings. - [Intercom CLI (Printing Press)](https://hebbmind.com/cli/intercom.md): [CLI] Unofficial Intercom CLI built with Printing Press, covering the full REST API: sync conversations and contacts for offline search, bulk-tag conversations about one incident, see customer overviews and SLA reports, and pull or push help articles. US, EU and AU regions; needs an access token. - [MCP Memory Service](https://hebbmind.com/mcp/mcp-memory-service.md): [MCP] Self-hostable long-term memory for agents, offering MCP, a REST API and a web dashboard: semantic search, knowledge graph and automatic memory consolidation. Embeddings are computed locally; choose SQLite, Cloudflare or Milvus as the backend. - [stock-api](https://hebbmind.com/cli/stock-api.md): [CLI] Fetches US, Hong Kong and China A-share stock data with zero runtime dependencies: real-time quotes, daily, weekly and monthly candles and search as JSON, falling back across Tencent, Sina and Eastmoney sources. Also runs as an MCP server. Unofficial public APIs, no stability guarantee. - [Math Modeling Skill](https://hebbmind.com/skill/math-modeling-skill.md): [Skill] A three-stage workflow for math modeling contests like MCM/ICM and CUMCM: analysis, solving and plotting in Python or MATLAB, and a Word (optionally LaTeX) paper, with stage-check subagents and OpenAlex plus AnySearch literature search. Generated papers are for reference only. - [ToolUniverse](https://hebbmind.com/mcp/tooluniverse.md): [MCP] From Harvard Medical School's Zitnik Lab: one MCP connecting 1,000+ scientific tools and databases for drugs and targets, genes and proteins, clinical trials, FDA data and PubMed, for biomedical and drug research. Runs with uv; some sources need API keys; medical conclusions need expert review. - [evil-read-arxiv](https://hebbmind.com/skill/evil-read-arxiv.md): [Skill] Recommends daily papers from arXiv and Semantic Scholar by research interest, reads them and writes illustrated Obsidian notes and a paper graph; can also search venues like CVPR and NeurIPS. Needs Python 3, Obsidian, a vault path and an interests config; the web app needs an Anthropic API key. - [CC Safety Net](https://hebbmind.com/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+. - [MATLAB MCP Server](https://hebbmind.com/mcp/matlab-mcp-core-server.md): [MCP] MathWorks' official server that lets agents start your local MATLAB, write and run scripts and unit tests, and check code style and potential errors, for computing, simulation and data analysis. Needs a licensed MATLAB R2021a+ and the downloaded server binary. - [My Claude Code Setup (claude-code-my-workflow)](https://hebbmind.com/skill/claude-code-my-workflow.md): [Skill] Econometrician Pedro Sant'Anna's academic Claude Code setup (fork the repo to use it): Beamer/Quarto lecture slides, paper review and mock refereeing, R/Python analysis and replication packages, with specialist subagents and quality gates. Needs Git and Python; slides need XeLaTeX and Quarto. - [MCP Server for WinDbg](https://hebbmind.com/mcp/mcp-windbg.md): [MCP] Lets agents drive WinDbg's CDB/KD to analyze crash dumps, debug user-mode processes remotely and debug kernels, and triage many dumps in a batch. Windows only; requires WinDbg or Debugging Tools for Windows. - [Qdrant MCP Server](https://hebbmind.com/mcp/mcp-server-qdrant.md): [MCP] Uses the Qdrant vector database as a semantic memory layer for agents: store information and retrieve it by meaning, connecting to a remote instance or a local path, with FastEmbed generating embeddings by default. Maintained by Qdrant. - [ROS MCP Server](https://hebbmind.com/mcp/ros-mcp-server.md): [MCP] Connects LLMs to ROS and ROS 2 robots: publish and subscribe to topics, call services and actions, set parameters, and read sensor and robot state, without changing robot code. The robot side needs rosbridge running. - [MySQL MCP Server](https://hebbmind.com/mcp/mysql-mcp-server.md): [MCP] Gives agents controlled access to MySQL: list databases and tables, inspect schemas and sample data, and run SQL, with multi-database mode, SSL and SSH tunnels. Configure your own database user, ideally with least privilege. - [Jupyter MCP Server](https://hebbmind.com/mcp/jupyter-mcp-server.md): [MCP] Connects agents to live Jupyter notebooks: read, write, insert and execute cells and read multimodal outputs like charts, for interactive data analysis. Bring your own JupyterLab or JupyterHub; open source, maintained by Datalayer. Next page: https://hebbmind.com/tools.md?page=6&profession=algorithm%2Cdata%2Csecurity