# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for DevOps / SRE or ML / AI or Data analysis or Security or Finance / Accounting: 644 items.

> - DevOps / SRE: Deployment, monitoring, cloud resources and reliability.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.
> - Finance / Accounting: Bookkeeping, reconciliation, financial statements, budgets and tax.

- [Variant Analysis](https://hebbmind.com/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity.
- [Research Paper Writing Skills](https://hebbmind.com/skill/research-paper-writing-skills.md): [Skill] Turns Peng Sida's public research-writing notes into a skill: revises abstracts, introductions, methods and experiments of ML/CV/NLP papers from a reviewer's view, checks that each claim has experimental evidence, and runs a pre-submission self-check. Pure methodology, no API key.
- [stable-diffusion.cpp](https://hebbmind.com/cli/stable-diffusion-cpp.md): [CLI] Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.
- [Defending Code Reference Harness](https://hebbmind.com/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.
- [kubectl-ai](https://hebbmind.com/cli/kubectl-ai.md): [CLI] Manage Kubernetes clusters in natural language: translates intent into kubectl operations and runs them, and can serve as an MCP server for other agents. Uses Gemini by default (API key required) and also supports OpenAI and local models. Maintained by Google Cloud.
- [Build Web Data Visualization](https://hebbmind.com/skill/openai-openai-skills.md): [Skill] OpenAI's official set of 18 web data visualization skills: chart selection and critique, D3, Canvas, Three.js, maps, statistical uncertainty, live dashboards, Gantt charts, UML and scrollytelling. Ships with a Codex plugin; installed alone, the plugin-level references are missing.
- [Codex Security](https://hebbmind.com/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.
- [Data Analytics](https://hebbmind.com/skill/openai-skills.md): [Skill] OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime.
- [Jupyter Notebooks](https://hebbmind.com/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins.
- [Life Sciences NGS Analysis](https://hebbmind.com/plugin/ngs-analysis.md): [Plugin] OpenAI's official Codex plugin that guides sequencing analysis from BCL/FASTQ: QC, RNA-seq differential expression, single-cell, variant calling and metagenomics, favoring nf-core and other public pipelines with reproducible run logs. Checks for local tools first. Research use only.
- [Build Web Data Visualization](https://hebbmind.com/plugin/build-web-data-visualization.md): [Plugin] OpenAI's official Codex plugin with 18 skills to choose, design, build, test and export web charts, maps, dashboards, Gantt charts and UML, using D3, Vega-Lite and Three.js with attention to accessibility and responsiveness. Codex only.
- [OpenAI Developers](https://hebbmind.com/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.
- [Life Science Research](https://hebbmind.com/plugin/life-science-research.md): [Plugin] OpenAI's official Codex plugin with about 50 skills that route questions to genetics, omics, pathway, protein structure, chemistry and clinical evidence sources, can split the work across parallel subagents, and synthesize sourced conclusions.
- [Life Science Research](https://hebbmind.com/skill/openai-skills-5.md): [Skill] OpenAI's official life-science skills: 49 skills query public databases such as UniProt, ClinVar, gnomAD and AlphaFold through Python scripts, with a router skill that breaks down questions, normalizes entities and compiles sourced evidence. Written mainly for Codex.
- [Data Analytics](https://hebbmind.com/plugin/data-analytics.md): [Plugin] OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools.
- [Public Equity Investing](https://hebbmind.com/plugin/public-equity-investing.md): [Plugin] OpenAI's official Codex plugin for equity investors: earnings previews and recaps, DCF, three-statement and comps valuation, model updates, long/short pitches, catalyst calendars, sizing and hedging, and investment memos. Works with FactSet and PitchBook (paid) or uploads and public sources.
- [OpenCompass](https://hebbmind.com/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference.
- [sd](https://hebbmind.com/cli/sd.md): [CLI] A more intuitive find-and-replace tool than sed: uses JavaScript/Python-style regex syntax, supports literal string mode and in-place file edits, which suits agents doing bulk text rewrites.
- [Jupytext](https://hebbmind.com/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip.
- [arxiv-latex-cleaner](https://hebbmind.com/cli/arxiv-latex-cleaner.md): [CLI] Cleans a LaTeX project before arXiv submission: removes comments, auxiliary files and unused .tex files and images, and can compress images, so internal notes are not published with the source. From Google Research; installable with Homebrew on macOS.
- [Trafilatura](https://hebbmind.com/cli/trafilatura.md): [CLI] Python library and CLI for extracting main web content: fetches pages, crawls via sitemaps and RSS feeds, strips headers, footers and other noise, and outputs TXT, Markdown, JSON, XML and more with metadata. Also processes downloaded HTML offline.
- [zizmor](https://hebbmind.com/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.
- [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.
- [n8n Skills](https://hebbmind.com/skill/n8n-skills.md): [Skill] 14 n8n workflow skills: expression syntax, MCP tool usage, node configuration, validation and troubleshooting, Code nodes, AI Agent workflows and self-hosted n8n deployment. Meant to be used with the n8n-mcp server.
- [Lieflat Charts](https://hebbmind.com/skill/lieflat-charts.md): [Skill] Generates template-driven charts as single-file HTML: picks a chart from real Lupi, Basics, Glance, Maps and Interactive gallery implementations based on data shape, or fills one of 12 Chinese and English report templates. Defaults to Mono grayscale with semantic color presets. Written in Chinese.
- [csvkit](https://hebbmind.com/cli/csvkit.md): [CLI] Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files.
- [Ticker](https://hebbmind.com/cli/ticker.md): [CLI] Live stock and crypto quotes in the terminal with portfolio profit and loss tracking, using Yahoo Finance and Coinbase data. The main view is an interactive dashboard; ticker print exports holdings from your config at current prices as JSON or CSV for scripts and agents.
- [Google Agents CLI Skills](https://hebbmind.com/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.
- [Quarto](https://hebbmind.com/cli/quarto-cli.md): [CLI] Posit's open-source scientific and technical publishing system built on Pandoc: embed Python, R or Julia code in Markdown or Jupyter notebooks, then quarto render produces HTML, PDF, Word, slides, websites and books.
- [Beancount](https://hebbmind.com/cli/beancount.md): [CLI] Language and toolset for double-entry bookkeeping in text files: bean-check validates the ledger, bean-format normalizes it, and Fava or beanquery handle reports and queries. Plain-text ledgers are easy for agents to generate and keep in version control.
- [Docker CLI](https://hebbmind.com/cli/docker-cli.md): [CLI] Docker's official CLI for building images, running and managing containers, viewing logs and pushing to registries, a foundational tool for agents setting up isolated environments. Needs a local or remote Docker Engine such as Docker Desktop.
- [Ledger](https://hebbmind.com/cli/ledger.md): [CLI] Classic plain-text double-entry accounting CLI: entries live in a text file and it produces balance, register, budget and other reports directly, with no database or hidden state, so agents can easily read and write ledgers, reconcile and report.
- [pnpm](https://hebbmind.com/skill/pnpm.md): [Skill] Reference for pnpm 12: CLI, pnpm-workspace.yaml settings, monorepo workspaces, catalogs, overrides, patches, supply-chain settings such as build approval, task orchestration, CI setup and migration from npm, Yarn or older pnpm. Generated by Anthony Fu from the official docs.
- [Claude Scholar](https://hebbmind.com/skill/claude-scholar.md): [Skill] Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin.
- [Ghidra MCP Server](https://hebbmind.com/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.
- [Claude Scholar](https://hebbmind.com/plugin/claude-scholar.md): [Plugin] Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist.
- [ezBookkeeping](https://hebbmind.com/mcp/ezbookkeeping.md): [MCP] Self-hosted open-source bookkeeping app with a built-in MCP server: AI logs expenses in natural language and queries transactions, balances, categories, tags and exchange rates, keeping data on your server. Deploy via Docker or package, set enable_mcp, and create a token in security settings.
- [ezBookkeeping Agent Skill](https://hebbmind.com/skill/ezbookkeeping.md): [Skill] Official skill for the open-source, self-hosted ezBookkeeping app: lets agents log transactions and query records in natural language, and read accounts, categories, tags and exchange rates. Deploy ezBookkeeping first (Docker supported) and configure its URL and API token.
- [Draw.io MCP Server](https://hebbmind.com/mcp/drawio-mcp.md): [MCP] draw.io's official MCP: opens XML, CSV or Mermaid diagrams generated by the agent directly in the draw.io editor, good for flowcharts and architecture diagrams. A no-install remote version can also render diagrams inline in the chat.
- [GitHub Agentic Workflows](https://hebbmind.com/cli/gh-aw.md): [CLI] GitHub's official gh extension for writing Actions workflows in Markdown that AI agents execute, compiled into standard Actions. Choose engines like Copilot, Claude Code or Codex; runs in a read-only sandbox by default. Requires gh.
- [Finance Toolkit MCP](https://hebbmind.com/mcp/financetoolkit.md): [MCP] From the FinanceToolkit author: computes ratios, valuation, risk and macro indicators with 500+ transparent formulas, for company comparisons and first-pass due diligence. Hosted, no install; enter a Financial Modeling Prep key on first connect (free tier: US stocks, 5 years). Verify results.
- [Build Iterated Agentic Loop](https://hebbmind.com/skill/build-iterated-agentic-loop.md): [Skill] Turns a repeatable agent task into a repo-local skill plus a GitHub Actions workflow that runs a coding agent (Claude Code, Codex, OpenCode or CodeLayer) on a schedule, with a prompt, memory file and one-open-PR bound. Reads the repo first, then walks you through cadence, scope and validation.
- [Design Control Loop](https://hebbmind.com/skill/design-control-loop.md): [Skill] Interviews you to design an agentic control loop for your codebase in control-theory terms: a set point, a sensor built from existing tooling, a controller that picks small low-risk changes, and a coding agent that opens PRs. Builds each part to run locally before wiring a scheduled CI workflow.
- [LM Studio CLI (lms)](https://hebbmind.com/cli/lms.md): [CLI] LM Studio's official CLI: list, load and unload local models, start and stop the local API server, and check status and logs; ls, ps and other commands support --json output for scripts and agents. Requires the LM Studio desktop app.
- [PySceneDetect](https://hebbmind.com/cli/pyscenedetect.md): [CLI] Detects shot changes in video and splits long footage into scenes, exporting cut lists and per-scene thumbnails, useful for shot analysis, organizing footage and finding edit points. Runs locally; needs Python 3.10+, plus FFmpeg or mkvmerge for splitting.
- [Home Assistant MCP Server (ha-mcp)](https://hebbmind.com/mcp/ha-mcp.md): [MCP] Lets agents operate Home Assistant: control devices, query state and history, create and debug automations and edit dashboards, with 80+ tools. Community-maintained (unofficial); requires your own Home Assistant instance, and running via uvx needs a long-lived access token.
- [ExifTool](https://hebbmind.com/cli/exiftool.md): [CLI] Classic CLI for reading and writing metadata in hundreds of file types including images, video, audio and PDF, covering EXIF, GPS, IPTC, XMP and camera makers' proprietary tags, with batch editing, stripping and conversion. Requires Perl.
- [WP-CLI](https://hebbmind.com/cli/wp-cli.md): [CLI] WordPress's official CLI: install and update plugins and themes, manage posts and users, import and export content, run database search-replace and configure multisite from the terminal, without opening wp-admin. Requires PHP 7.2.24 or later.
- [MCPorter](https://hebbmind.com/cli/mcporter.md): [CLI] CLI and TypeScript runtime for discovering and calling MCP servers from the terminal and scripts: list tool signatures and call tools directly, or generate a standalone CLI or typed client from a server. Auto-imports existing MCP configs from Claude Code, Codex and others.
- [YouPlot](https://hebbmind.com/cli/youplot.md): [CLI] Draws bar charts, histograms, line charts, scatter plots and box plots in the terminal from CSV/TSV on stdin, so you can glance at data distributions at the end of a shell pipeline. The command is uplot.

Next page: https://hebbmind.com/tools.md?page=8&profession=devops%2Calgorithm%2Cdata%2Csecurity%2Cfinance
