# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for QA or DevOps / SRE or ML / AI or Data analysis or Security: 595 items. > - QA: Functional testing, test automation and quality assurance. > - DevOps / SRE: Deployment, monitoring, cloud resources and reliability. > - ML / AI: Model training, evaluation and LLM application development. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [Feynman](https://hebbmind.com/cli/feynman.md): [CLI] Open-source research agent: one command runs literature reviews, deep research, paper reviews, paper-code consistency checks and replication plans, searching arXiv, PubMed and more with sources recorded. Good for grad students writing reviews. Run feynman setup to sign in to a model provider. - [SQLFluff](https://hebbmind.com/cli/sqlfluff.md): [CLI] Linter and formatter for 20+ SQL dialects that auto-fixes most issues and handles Jinja templating and dbt projects (dbt needs a plugin), suited to warehouse code review and CI. - [Mobile MCP](https://hebbmind.com/mcp/mobile-mcp.md): [MCP] Lets agents control iOS and Android simulators and real devices: reads the accessibility tree first and falls back to screenshot coordinates, and can swipe, install and uninstall apps, record the screen and read device logs. Requires Xcode or Android platform tools. - [AWS Billing and Cost Management MCP Server](https://hebbmind.com/mcp/billing-cost-management-mcp-server.md): [MCP] Lets agents query AWS bills, cost trends, budgets and spending anomalies, and recommends Savings Plans, Reserved Instances and rightsizing. Maintained by AWS; requires AWS credentials. - [AWS IaC MCP Server](https://hebbmind.com/mcp/aws-iac-mcp-server.md): [MCP] Official AWS MCP that validates CloudFormation templates for syntax and security compliance, diagnoses deployment failures, and searches CloudFormation and CDK docs, code samples and best practices. Replaces the deprecated Cloud Control API server; needs AWS credentials. - [Amazon EKS MCP Server](https://hebbmind.com/mcp/eks-mcp-server.md): [MCP] Official AWS MCP to create and manage EKS clusters, deploy apps, manage Kubernetes resources, and read pod logs and events for troubleshooting. Read-only by default; writes need --allow-write and reading logs needs --allow-sensitive-data-access. - [AWS Documentation MCP Server](https://hebbmind.com/mcp/aws-documentation-mcp-server.md): [MCP] Official AWS MCP that searches and reads AWS documentation, converts it to Markdown for agents to cite, and suggests related pages. No AWS credentials needed; requires uv. - [Amazon CloudWatch MCP Server](https://hebbmind.com/mcp/cloudwatch-mcp-server.md): [MCP] Official AWS MCP that queries CloudWatch metrics, alarms and logs, analyzes log anomaly patterns and recommends alarm settings, helping agents with root cause analysis. Requires AWS credentials. - [Privacy Legal](https://hebbmind.com/plugin/privacy-legal.md): [Plugin] Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic. - [AI Governance Legal](https://hebbmind.com/plugin/ai-governance-legal.md): [Plugin] Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice. - [garak](https://hebbmind.com/cli/garak.md): [CLI] NVIDIA's open-source LLM vulnerability scanner that probes for prompt injection, jailbreaks, data leakage, hallucination and harmful content, supporting OpenAI, Hugging Face, Bedrock and most REST-accessible models. Scanning cloud models needs their API keys. - [Airtest](https://hebbmind.com/cli/airtest.md): [CLI] NetEase's open-source cross-platform UI automation framework: locates elements by image recognition to automate games and apps on Android, iOS and Windows without touching their code. airtest run executes cases and airtest report builds HTML reports. - [PaperQA2](https://hebbmind.com/cli/paper-qa.md): [CLI] High-accuracy retrieval-augmented Q&A over paper PDFs, text and Office documents, filling in citation metadata, checking retractions and attaching traceable sources to answers. Provides the pqa CLI and a Python library. Needs an LLM API key by default; local models can be configured. - [VisiData](https://hebbmind.com/cli/visidata.md): [CLI] Terminal tool for exploring and wrangling tabular data: opens dozens of formats including CSV, JSON, Excel and SQLite for filtering, sorting, pivots and frequency counts. --batch mode replays actions headlessly or converts file formats. - [BrowserSkill](https://hebbmind.com/cli/browserskill.md): [CLI] Tencent's open-source browser bridge: through the bsk CLI and a Chrome/Edge extension, agents use your logged-in accounts in a separate visible window to browse, fill forms and take full-page screenshots, and correlate network requests with console output to debug sites. - [Harness](https://hebbmind.com/plugin/harness.md): [Plugin] Say build a harness for this project and it designs a domain-specific agent team, generating subagent definitions, companion skills and orchestration, validates them and keeps evolving them from feedback. Supports workflow orchestration, persistent agent teams and subagent delegation. - [Checkov](https://hebbmind.com/cli/checkov.md): [CLI] Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud. - [Scientific Figure Making](https://hebbmind.com/skill/scientific-figure-making.md): [Skill] Publication-quality matplotlib plotting skill from a Yale PhD student: bar charts, trends, heatmaps and multi-panel figures with consistent fonts, colors and export settings, plus real plotting scripts from papers published in venues like Nature Machine Intelligence. Needs Python. - [Atlas](https://hebbmind.com/cli/atlas.md): [CLI] Manage database schemas as code: declare the desired schema in SQL, HCL or your ORM and Atlas plans, lints and applies migrations, and can export existing databases as HCL, SQL or Mermaid ER diagrams. Supports PostgreSQL, MySQL and a dozen other databases. - [jc](https://hebbmind.com/cli/jc.md): [CLI] Converts the output of 100+ commands such as dig, ps, ls and ifconfig, plus common file formats, into JSON so agents can parse it reliably with jq or scripts. Also usable as a Python library. - [NextTrace](https://hebbmind.com/cli/ntrace-core.md): [CLI] Open-source visual traceroute that shows IP geolocation, AS number and carrier for every hop, with continuous MTR probing and JSON output; the full edition can also be deployed as an MCP server. - [xh](https://hebbmind.com/cli/xh.md): [CLI] HTTP client CLI that reimplements HTTPie's syntax in Rust with a focus on performance; key-value pairs on the command line are sent as JSON by default, making it quick to debug REST APIs. - [MLX-Audio](https://hebbmind.com/cli/mlx-audio.md): [CLI] Offline speech toolkit for Apple Silicon Macs: CLI text-to-speech (including Chinese and voice cloning) and speech-to-text, for voicing lessons and explainer videos or transcribing lectures and interviews, with data staying local. Needs an M-series Mac and Python 3.10+; MP3 export needs ffmpeg. - [dasel](https://hebbmind.com/cli/dasel.md): [CLI] Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq. - [App Store Connect CLI](https://hebbmind.com/cli/app-store-connect-cli.md): [CLI] asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key. - [Steampipe](https://hebbmind.com/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in. - [stable-diffusion.cpp](https://hebbmind.com/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source. - [Differential Review](https://hebbmind.com/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [Trail of Bits Skills](https://hebbmind.com/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [Supply Chain Risk Auditor](https://hebbmind.com/skill/supply-chain-risk-auditor.md): [Skill] Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended. - [Static Analysis](https://hebbmind.com/skill/static-analysis.md): [Skill] Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally. - [Variant Analysis](https://hebbmind.com/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity. - [Research Paper Writing Skills](https://hebbmind.com/skill/research-paper-writing-skills.md): [Skill] Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key. - [Agentic Actions Auditor](https://hebbmind.com/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks. - [Defending Code Reference Harness](https://hebbmind.com/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained. - [kubectl-ai](https://hebbmind.com/cli/kubectl-ai.md): [CLI] Manage Kubernetes clusters in natural language: translates intent into kubectl operations and runs them, and can serve as an MCP server for other agents. Uses Gemini by default (API key required) and also supports OpenAI and local models. Maintained by Google Cloud. - [Life Science Research](https://hebbmind.com/plugin/life-science-research.md): [Plugin] OpenAI's official Codex plugin with about 50 skills that route questions to genetics, omics, pathway, protein structure, chemistry and clinical evidence sources, can split the work across parallel subagents, and synthesize sourced conclusions. - [OpenAI Developers](https://hebbmind.com/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only. - [Life Science Research](https://hebbmind.com/skill/openai-skills-5.md): [Skill] OpenAI's official life-science skills: 49 skills query public databases such as UniProt, ClinVar, gnomAD and AlphaFold through Python scripts, with a router skill that breaks down questions, normalizes entities and compiles sourced evidence. Written mainly for Codex. - [Test Android Apps](https://hebbmind.com/plugin/test-android-apps.md): [Plugin] Reproduces issues on the Android emulator: installs builds, drives the UI with adb, dumps the UI tree, takes screenshots, captures logcat, and gathers performance evidence with Simpleperf and Perfetto. OpenAI's official Codex plugin; needs the Android SDK. - [Build Web Data Visualization](https://hebbmind.com/skill/openai-openai-skills.md): [Skill] OpenAI's official set of 18 web data visualization skills: chart selection and critique, D3, Canvas, Three.js, maps, statistical uncertainty, live dashboards, Gantt charts, UML and scrollytelling. Ships with a Codex plugin; installed alone, the plugin-level references are missing. - [Build Web Data Visualization](https://hebbmind.com/plugin/build-web-data-visualization.md): [Plugin] OpenAI's official Codex plugin with 18 skills to choose, design, build, test and export web charts, maps, dashboards, Gantt charts and UML, using D3, Vega-Lite and Three.js with attention to accessibility and responsiveness. Codex only. - [Data Analytics](https://hebbmind.com/plugin/data-analytics.md): [Plugin] OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools. - [Frontend Testing Debugging](https://hebbmind.com/skill/playwright-interactive.md): [Skill] Tests and debugs a locally running frontend with Codex's Browser plugin or Playwright: checks blank pages, framework and console errors, captures screenshots, re-verifies after fixes and writes a QA report. Maintained by OpenAI; formerly playwright-interactive in openai/skills. - [Codex Security](https://hebbmind.com/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. - [Data Analytics](https://hebbmind.com/skill/openai-skills.md): [Skill] OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime. - [Life Sciences NGS Analysis](https://hebbmind.com/plugin/ngs-analysis.md): [Plugin] OpenAI's official Codex plugin that guides sequencing analysis from BCL/FASTQ: QC, RNA-seq differential expression, single-cell, variant calling and metagenomics, favoring nf-core and other public pipelines with reproducible run logs. Checks for local tools first. Research use only. - [Jupyter Notebooks](https://hebbmind.com/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins. - [OpenCompass](https://hebbmind.com/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference. - [sd](https://hebbmind.com/cli/sd.md): [CLI] A more intuitive find-and-replace tool than sed: uses JavaScript/Python-style regex syntax, supports literal string mode and in-place file edits, which suits agents doing bulk text rewrites. Next page: https://hebbmind.com/tools.md?page=7&profession=qa%2Cdevops%2Calgorithm%2Cdata%2Csecurity