# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for ML / AI or Data engineering or Data analysis or Security: 380 items.

> - ML / AI: Model training, evaluation and LLM application development.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.
- [Finance Toolkit MCP](https://hebbmind.com/mcp/financetoolkit.md): [MCP] From the FinanceToolkit author: computes ratios, valuation, risk and macro indicators with 500+ transparent formulas, for company comparisons and first-pass due diligence. Hosted, no install; enter a Financial Modeling Prep key on first connect (free tier: US stocks, 5 years). Verify results.
- [LM Studio CLI (lms)](https://hebbmind.com/cli/lms.md): [CLI] LM Studio's official CLI: list, load and unload local models, start and stop the local API server, and check status and logs; ls, ps and other commands support --json output for scripts and agents. Requires the LM Studio desktop app.
- [PySceneDetect](https://hebbmind.com/cli/pyscenedetect.md): [CLI] Detects shot changes in video and splits long footage into scenes, exporting cut lists and per-scene thumbnails, useful for shot analysis, organizing footage and finding edit points. Runs locally; needs Python 3.10+, plus FFmpeg or mkvmerge for splitting.
- [ExifTool](https://hebbmind.com/cli/exiftool.md): [CLI] Classic CLI for reading and writing metadata in hundreds of file types including images, video, audio and PDF, covering EXIF, GPS, IPTC, XMP and camera makers' proprietary tags, with batch editing, stripping and conversion. Requires Perl.
- [MCPorter](https://hebbmind.com/cli/mcporter.md): [CLI] CLI and TypeScript runtime for discovering and calling MCP servers from the terminal and scripts: list tool signatures and call tools directly, or generate a standalone CLI or typed client from a server. Auto-imports existing MCP configs from Claude Code, Codex and others.
- [YouPlot](https://hebbmind.com/cli/youplot.md): [CLI] Draws bar charts, histograms, line charts, scatter plots and box plots in the terminal from CSV/TSV on stdin, so you can glance at data distributions at the end of a shell pipeline. The command is uplot.
- [Auto-Empirical Research Skills (AERS)](https://hebbmind.com/skill/auto-empirical-research-skills.md): [Skill] Empirical social science skills from Stanford REAP and CoPaper.AI, bundling 77 in-house and third-party collections: topic selection, literature reviews, DID/RD/IV identification, regression tables in Python, Stata or R, robustness audits and paper writing. Stata flows need Stata installed.
- [AntV MCP Server Chart](https://hebbmind.com/mcp/mcp-server-chart.md): [MCP] Generates 26+ chart types with AntV, including line, bar, Sankey, word cloud, mind map and pivot table, returning image links. Officially maintained by Ant Group's AntV team; uses a public rendering service by default and can be self-hosted.
- [Gemini API Dev](https://hebbmind.com/skill/gemini-api-dev.md): [Skill] Teaches agents to code against the latest Gemini API and Python/TypeScript SDKs: multi-turn chat, function calling, structured output, and image and speech generation, while avoiding deprecated older models. Maintained by Google's Gemini team.
- [Gemini Skills](https://hebbmind.com/skill/gemini-skills.md): [Skill] Gemini API development skills: gemini-api-dev (core API and SDKs), gemini-live-api-dev (real-time bidirectional audio/video streaming) and gemini-omni-flash-api (Omni video generation and editing), filling in APIs released after model training cutoffs. Maintained by Google's Gemini team.
- [Excel MCP Server](https://hebbmind.com/mcp/excel-mcp-server.md): [MCP] Create, read and modify xlsx workbooks without Microsoft Excel installed: formulas, formatting and conditional formatting, charts, pivot tables and tables. Runs locally over stdio or as a remote HTTP service.
- [Nali](https://hebbmind.com/cli/nali.md): [CLI] Terminal tool for offline IP geolocation and CDN provider lookup, supporting QQwry, GeoIP2, ip2region and other databases. Pipe output from dig, nslookup and similar commands through it to annotate IPs automatically.
- [NotFair Plugin](https://hebbmind.com/plugin/notfair-plugin.md): [Plugin] Open-source marketing plugin with 48 skills: SEO and AI search optimization (GEO), GA4 and Search Console analysis, ad diagnostics for Google, Meta, X, LinkedIn, Reddit and TikTok, and WordPress upkeep. Some SEO skills need only a URL; live data requires NotFair OAuth and linked accounts.
- [AiPy](https://hebbmind.com/cli/aipyapp.md): [CLI] Knownsec's open-source Python-use agent: describe a task in plain language and it writes and runs Python on your machine, e.g. tidying Excel files, summarizing attendance or screening resumes. Needs Python 3.11+ and a model API key such as DeepSeek; code runs locally, so back up important files.
- [Hugging Face CLI](https://hebbmind.com/cli/huggingface-hub.md): [CLI] Hugging Face's official hf CLI: search, download and upload models and datasets, manage repos and storage buckets, and run jobs on Hugging Face's cloud. Output adapts automatically for agents, and hf skills add installs companion skills. Uploads and similar actions need a login.
- [Camelot](https://hebbmind.com/cli/camelot.md): [CLI] Open-source PDF table extraction with a camelot CLI: exports tables from financial reports, bank statements and statistical reports to Excel, CSV or Markdown, with an accuracy score. Needs Python 3.10+; handles text-based PDFs by default, scans need the ml and ocr extras. Double-check results.
- [qsv](https://hebbmind.com/cli/qsv.md): [CLI] Fast Rust toolkit for tabular data with nearly 80 subcommands for querying, stats, cleaning, validation, joins and format conversion on CSV and Excel. Also offers an MCP server and a Claude Cowork plugin.
- [Browserbase Skills](https://hebbmind.com/skill/browserbase-skills.md): [Skill] Browserbase's official skills: drive a local or cloud browser with the browse CLI for web scraping and search, turning site traffic into an OpenAPI spec, adversarial UI testing and competitor research. Cloud features need a Browserbase account.
- [DBHub](https://hebbmind.com/mcp/dbhub.md): [MCP] One server connecting PostgreSQL, MySQL, MariaDB, SQL Server, Oracle and SQLite, exposing just two tools by default to save context, with read-only mode and SSH tunneling. From Bytebase.
- [NVIDIA Agent Skills](https://hebbmind.com/plugin/nvidia-skills.md): [Plugin] NVIDIA's official plugin that finds and installs the right skills from NVIDIA's catalog for your task, spanning CUDA acceleration, NIM inference, NeMo training, RAG blueprints, Omniverse simulation and robotics. Listed in both the Claude and Codex official marketplaces.
- [NVIDIA Agent Skills](https://hebbmind.com/skill/nvidia-skills.md): [Skill] NVIDIA's official, verified catalog of hundreds of skills covering CUDA-X libraries, NeMo training, NIM and Dynamo inference, RAG blueprints, Jetson, Omniverse and robotics simulation. The install adds only nvidia-skill-finder, which recommends other skills and installs them once you confirm.
- [Google Analytics MCP Server](https://hebbmind.com/mcp/google-analytics-mcp.md): [MCP] Query Google Analytics 4 in natural language: read account and property info and run standard, funnel and realtime reports. Official from Google Analytics (experimental); requires Google Cloud Application Default Credentials.
- [CTF Skills](https://hebbmind.com/skill/ctf-skills.md): [Skill] Skills for solving CTF challenges across web, pwn, crypto, reverse engineering, forensics, OSINT and malware analysis, plus a script that installs common CTF tools in one go. Follows the Agent Skills spec and installs with npx skills.
- [Finance Skills](https://hebbmind.com/plugin/finance-skills.md): [Plugin] Plugin marketplace for investment research: six plugin groups covering yfinance market data, earnings previews and recaps, DCF valuation, option payoff charts, ETF premiums, read-only news from X, Discord and other social sources, and TradingView data. Research only, not investment advice.
- [Postgres MCP Pro](https://hebbmind.com/mcp/postgres-mcp.md): [MCP] PostgreSQL MCP server with database health checks, index tuning, EXPLAIN plan analysis and hypothetical index simulation, plus safe read-only SQL execution in restricted mode.
- [SQLMesh](https://hebbmind.com/cli/sqlmesh.md): [CLI] Framework for writing data transformation models in SQL or Python, with a Terraform-like plan/apply flow, virtual data environments, unit tests and table diffs, and transpilation across 10+ SQL dialects. A Linux Foundation project and an alternative to dbt.
- [Science Skills](https://hebbmind.com/skill/science-skills.md): [Skill] About 40 research skills from Google DeepMind: search arXiv, PubMed and OpenAlex, query UniProt, PDB, ClinVar, ChEMBL and more, run AlphaGenome variant analysis and render structures in PyMOL. Requires uv; AlphaGenome needs an API key, and keys raise limits for OpenAlex, ClinVar and others.
- [arXiv MCP Server](https://hebbmind.com/mcp/arxiv-mcp-server.md): [MCP] Search and download arXiv papers and read the authors' LaTeX source section by section, export BibTeX and follow topic updates, with papers cached locally. No API key needed.
- [Cloudflare Agents SDK](https://hebbmind.com/skill/agents-sdk.md): [Skill] Teaches agents to build, debug and review stateful AI agents with the Cloudflare Agents SDK: state sync, scheduled tasks, RPC, MCP servers, email and streaming chat, checking the latest official docs first. Maintained by Cloudflare.
- [Microsoft Agent Skills](https://hebbmind.com/skill/microsoft-skills.md): [Skill] Microsoft's official skill collection: 170+ skills focused on Azure SDKs (Python, .NET, TypeScript, Java, Rust) and Microsoft Foundry development, plus plugins, custom agents and MCP configs. Microsoft recommends picking skills per project rather than installing them all.
- [Awesome Finance Skills](https://hebbmind.com/skill/awesome-finance-skills.md): [Skill] Finance skills for US, Hong Kong and China A-share markets: news from 10+ sources, quotes and fundamentals, sentiment analysis, time-series forecasts, signal tracking, impact-chain diagrams and reports. Needs Python; some skills download PyTorch models. Not investment advice.
- [Rebiber](https://hebbmind.com/cli/rebiber.md): [CLI] Replaces arXiv preprint entries in your .bib file with the official published versions from DBLP and ACL Anthology, keeping citation keys, to tidy references before camera-ready. Overwrites the file by default, so preview with --dry-run. Mainly covers CS venues; needs Python 3.10+.
- [Rill](https://hebbmind.com/cli/rill.md): [CLI] Open-source, agent-friendly BI: define metrics and dashboards in YAML and SQL, and rill init generates project instructions and MCP config for Claude Code so agents can build business dashboards and answer questions in natural language. Local use is free; publishing to Rill Cloud needs an account.
- [Agent Toolkit for AWS](https://hebbmind.com/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials.
- [JADX AI MCP](https://hebbmind.com/mcp/jadx-ai-mcp.md): [MCP] A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.
- [Supabase Postgres Best Practices](https://hebbmind.com/skill/supabase-postgres-best-practices.md): [Skill] Postgres rules ranked by impact: query optimization, indexing, connection pooling, RLS security, schema design and lock troubleshooting, with wrong-vs-right SQL examples, applicable to any Postgres. Maintained by Supabase.
- [Paper Search MCP](https://hebbmind.com/mcp/paper-search-mcp.md): [MCP] Unified search across 20+ academic sources including arXiv, PubMed, bioRxiv, Semantic Scholar and OpenAlex, returning deduplicated, normalized results and downloading full text via open-access channels first. Most sources need no API key.
- [EdgarTools](https://hebbmind.com/mcp/edgartools.md): [MCP] Python library with a built-in MCP server for US SEC EDGAR data: search 10-K, 10-Q, 8-K and other filings and read XBRL-standardized financial statements, Form 4 insider trades and 13F holdings. Free with no API key; just set an EDGAR_IDENTITY.
- [Bright Data MCP](https://hebbmind.com/mcp/brightdata-mcp.md): [MCP] Bright Data's official MCP: web search (Google, Bing, Yandex), any page to Markdown, structured data extraction from e-commerce, social and other platforms, and remote browser control. Needs an API token; includes 5,000 free requests a month.
- [ScanCode Toolkit](https://hebbmind.com/cli/scancode-toolkit.md): [CLI] Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.
- [shot-scraper](https://hebbmind.com/cli/shot-scraper.md): [CLI] Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use.
- [x64dbg MCP Server](https://hebbmind.com/mcp/x64dbg-mcp-server.md): [MCP] A native x64dbg plugin that works as an MCP server, exposing dozens of debugging tools: agents can set breakpoints, step through code, read and write memory, analyze PE structure and locate the OEP of packed binaries. Windows only; install the plugin in x64dbg, then connect with a token.
- [MFLUX](https://hebbmind.com/cli/mflux.md): [CLI] Runs open image models like FLUX, Qwen Image and Z-Image locally on a Mac: text-to-image, reference-based edits, inpainting and upscaling, all on-device. Needs Apple Silicon and uv; the first run downloads models and is slow. Check each model's license before commercial use.
- [Tavily MCP Server](https://hebbmind.com/mcp/tavily-mcp.md): [MCP] Four tools for real-time web search, page content extraction, site mapping and full-site crawling, available as a remote server or run locally. Maintained by Tavily; needs an API key or OAuth sign-in, and a free account is available.
- [Apify Agent Skills](https://hebbmind.com/skill/apify-agent-skills.md): [Skill] Apify's official skill collection: picks from 130+ curated Actors to scrape public data from social networks, maps, e-commerce sites and more, and can also build, package and deploy Actors. Needs an Apify account; a free tier is available.
- [MiniMax CLI (mmx)](https://hebbmind.com/cli/minimax-ai-cli.md): [CLI] MiniMax's official CLI, built for agents: chat with MiniMax models from the terminal and generate images, video and speech, plus speech transcription, image understanding and web search. Works with the international platform. Requires a MiniMax Token Plan subscription.
- [sqlite-utils](https://hebbmind.com/cli/sqlite-utils.md): [CLI] A CLI and Python library by Simon Willison: imports JSON and CSV straight into SQLite with automatic table creation, runs in-memory SQL queries over files, and supports full-text search and table transformations.
- [OSS Review Toolkit (ORT)](https://hebbmind.com/cli/ort.md): [CLI] The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.
- [Intercom CLI (Printing Press)](https://hebbmind.com/cli/intercom.md): [CLI] Unofficial Intercom CLI built with Printing Press, covering the full REST API: sync conversations and contacts for offline search, bulk-tag conversations about one incident, see customer overviews and SLA reports, and pull or push help articles. US, EU and AU regions; needs an access token.

Next page: https://hebbmind.com/tools.md?page=6&profession=algorithm%2Cdata-engineering%2Cdata%2Csecurity
