# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Full-stack / Indie or ML / AI or Data engineering or Security or HR: 791 items. > - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration. > - ML / AI: Model training, evaluation and LLM application development. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - HR: Screening, interviews, onboarding, training and employee relations. - [Thermo-Nuclear Code Quality Review](https://hebbmind.com/skill/thermo-nuclear-code-quality-review.md): [Skill] Runs an extremely strict maintainability review of the current branch: hunts for restructurings that make the change dramatically simpler and flags files pushed past 1,000 lines, ad-hoc conditionals, thin wrappers and needless casts. From Cursor's official plugins; invoke manually. - [MiniMax Skills](https://hebbmind.com/skill/minimax-ai-skills.md): [Skill] MiniMax's official skill collection covering frontend, full-stack, Android, iOS, Flutter, React Native and GLSL shader development, plus PDF, Word, Excel and PowerPoint document generation. Some media skills need a MiniMax API key. Still in beta. - [MiniMax Skills](https://hebbmind.com/plugin/minimax-ai-skills.md): [Plugin] MiniMax's official skill plugin with dev guides for frontend, full-stack, Android, iOS, Flutter, React Native and GLSL shaders, plus PDF, PowerPoint, Excel and Word document skills and image, video and music generation. Media skills need a MiniMax API key. Still in beta. - [pgcli](https://hebbmind.com/cli/pgcli.md): [CLI] PostgreSQL command-line client with smart autocompletion and syntax highlighting. Compatible with psql environment variables, and -c runs a statement and exits, so agents can query databases non-interactively. - [ccstatusline](https://hebbmind.com/cli/ccstatusline.md): [CLI] Customizes the Claude Code status line to show model, Git branch, token and context usage, session and weekly limits at the bottom of the terminal. Configured through an interactive TUI with Powerline styling. Claude Code only. - [IDA Pro MCP](https://hebbmind.com/mcp/ida-pro-mcp.md): [MCP] Lets agents decompile, disassemble and query cross-references in IDA Pro, and rename variables, change types and add comments, including headless idalib mode. Requires IDA Pro 8.3+ (IDA Free is not supported); the author now recommends Hex-Rays' official IDA MCP instead. - [Grype](https://hebbmind.com/cli/grype.md): [CLI] Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore. - [HexStrike AI](https://hebbmind.com/mcp/hexstrike-ai.md): [MCP] Wraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only. - [Apify MCP Server](https://hebbmind.com/mcp/apify-mcp-server.md): [MCP] Lets agents call thousands of ready-made scrapers and automation Actors from Apify Store to pull data from social media, search engines, maps, e-commerce sites and more. Maintained by Apify; needs an Apify account (OAuth) or API token. - [LLM](https://hebbmind.com/cli/llm.md): [CLI] Simon Willison's LLM CLI and Python library: call OpenAI, Claude, Gemini and local models from the terminal, with conversations logged to SQLite automatically, plus embeddings, structured extraction, tool calling and a plugin system. - [Claude Context](https://hebbmind.com/mcp/claude-context.md): [MCP] From Zilliz: indexes your codebase as vectors in Milvus or Zilliz Cloud so coding agents find relevant code by semantic search, cutting context costs in large repos. Needs an embedding model (OpenAI, VoyageAI, Ollama and others) and a vector database. - [Dust](https://hebbmind.com/cli/dust.md): [CLI] A du replacement written in Rust that shows disk usage as a directory tree with proportion bars, making large files and folders easy to spot. Filter by depth, count or regex, and output JSON with -j for agents to parse. - [Trae Agent](https://hebbmind.com/cli/trae-agent.md): [CLI] ByteDance's open-source, general software engineering agent: trae-cli edits files and runs commands from natural language, supports multiple model providers and MCP, and records full execution trajectories. Transparent design suits agent research and customization. Needs your own model API key. - [Claude Skills (Fullstack Dev Skills)](https://hebbmind.com/plugin/jeffallan-claude-skills.md): [Plugin] Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP). - [mycli](https://hebbmind.com/cli/mycli.md): [CLI] MySQL terminal client with smart autocompletion and syntax highlighting, also compatible with MariaDB and TiDB. Supports --execute and batch mode with CSV or table output, so agents can run SQL directly. - [Arize Phoenix MCP Server](https://hebbmind.com/mcp/phoenix-mcp.md): [MCP] Connects to the Arize Phoenix observability platform so agents can query LLM traces and sessions, manage prompts, browse datasets and read experiment evaluation results. Maintained by Arize; needs a self-hosted or cloud Phoenix instance. - [PAL MCP](https://hebbmind.com/mcp/pal-mcp-server.md): [MCP] Lets Claude Code, Codex and other agents call Gemini, GPT, Ollama and other models to collaborate on code review, debugging, planning and multi-model consensus, and can bridge to other CLI agents. Configure at least one provider (API key or local Ollama). Formerly Zen MCP. - [CodeBurn](https://hebbmind.com/cli/codeburn.md): [CLI] Reads local session files to report token usage and cost by project, model, task and branch for Claude Code, Codex, Cursor and dozens of other coding agents, no sign-up needed. Also offers config optimization tips, quota checks and spend-cap hooks. Needs Node.js 22.13+. - [Datasette](https://hebbmind.com/cli/datasette.md): [CLI] Publishes SQLite databases as browsable, queryable web pages and JSON APIs, with SQL queries, metadata and plugins, and deploys to Cloud Run and other platforms with datasette publish. Great for data exploration and data journalism. Needs Python 3.10+. - [Presidio CLI](https://hebbmind.com/cli/presidio.md): [CLI] Scans files and directories for personal data such as names, emails and credit card numbers using Presidio Analyzer, with configurable entity types, confidence thresholds and ignore rules. Needs Python 3.10+ and a spaCy language model. - [GitHub Copilot CLI](https://hebbmind.com/cli/copilot-cli.md): [CLI] GitHub's official terminal coding agent, sharing its harness with the Copilot coding agent and shipping with the GitHub MCP built in. Work with repos, issues and PRs in natural language, approving each action before it runs. Requires a Copilot subscription. - [OSV-Scanner](https://hebbmind.com/cli/osv-scanner.md): [CLI] Google's official dependency vulnerability scanner: parses project lockfiles and container images, checks them against the OSV.dev database to find affected dependencies, and can suggest upgrade fixes (experimental). - [Hugging Face CLI (hf-cli)](https://hebbmind.com/skill/hf-cli.md): [Skill] Teaches agents the Hugging Face Hub CLI hf: search and download models, manage datasets, Spaces, Buckets and repos, and run Jobs and inference endpoints. The skill content is generated from your local CLI, so install hf first. Maintained by Hugging Face. - [Hugging Face Skills](https://hebbmind.com/plugin/huggingface-skills.md): [Plugin] Lets agents work with the Hugging Face Hub through the hf CLI: search and download models and datasets, manage repos and Spaces, and run training and evaluation jobs on cloud GPUs, with more workflow skills installable as needed. Maintained by Hugging Face. - [Hugging Face LLM Trainer](https://hebbmind.com/skill/huggingface-llm-trainer.md): [Skill] Lets agents fine-tune language and vision models with TRL or Unsloth on Hugging Face Jobs cloud GPUs, supporting SFT, DPO, GRPO and reward models, and convert results to GGUF for local use. Requires an HF Pro or higher paid plan. Maintained by Hugging Face. - [Hugging Face Skills](https://hebbmind.com/skill/huggingface-skills.md): [Skill] Hugging Face's official skills: manage Hub models and datasets with the hf CLI, fine-tune language and vision models, run model evaluations, and build Gradio apps deployed to Spaces. Needs an HF account; cloud training on HF Jobs requires a paid plan. - [Codex Security](https://hebbmind.com/cli/codex-security.md): [CLI] OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key. - [MCP Inspector](https://hebbmind.com/cli/inspector.md): [CLI] The official MCP debugging tool: connect to any MCP server through a web UI, CLI or terminal UI to list and call its tools, resources and prompts. CLI mode outputs JSON, suited to scripts and CI smoke tests. - [company-values](https://hebbmind.com/skill/company-values.md): [Skill] Following Sahil Lavingia, author of The Minimalist Entrepreneur, helps founders define 3 to 5 concrete company values with real trade-offs before hiring, with example stories and counterexamples, and explains how to use them in hiring and daily work. Prompt-only; no account needed. - [GSD Core](https://hebbmind.com/plugin/get-shit-done.md): [Plugin] Spec-driven development and context engineering framework (formerly Get Shit Done): a five-step loop of discuss, plan, execute, verify and ship, handing heavy work to subagents with fresh context to avoid degradation in long sessions. Supports Claude Code, Codex and more. - [visual-explainer](https://hebbmind.com/plugin/visual-explainer.md): [Plugin] Turns terminal output like architecture explanations, diff reviews and plan comparisons into styled HTML pages or slides with zoomable interactive Mermaid diagrams, replacing hard-to-read ASCII diagrams and tables. No build step; open directly in a browser. - [visual-explainer](https://hebbmind.com/skill/visual-explainer.md): [Skill] Turns architecture explanations, diff reviews, plan reviews and data comparisons into self-contained HTML pages or slides with Mermaid diagrams and light and dark themes, replacing ASCII diagrams in the terminal. - [drawio-skill](https://hebbmind.com/skill/drawio-skill.md): [Skill] Generates editable draw.io architecture diagrams, ER diagrams, UML and BPMN flows from natural language or from Terraform, SQL DDL, OpenAPI specs and code repos, with incremental sync and multi-format export. Native export needs the draw.io desktop app. - [usql](https://hebbmind.com/cli/usql.md): [CLI] Universal psql-style SQL command line: one tool to connect to PostgreSQL, MySQL, SQLite, SQL Server, Oracle and dozens of other SQL and NoSQL databases, with support for copying data between databases. - [Desktop Commander MCP](https://hebbmind.com/mcp/desktopcommandermcp.md): [MCP] Lets agents run terminal commands on your machine, manage long-running processes, and read, write, search and diff-edit files. Extends the official Filesystem server; collects pseudonymized telemetry by default (no file contents or command arguments), which you can turn off in config. - [Miller](https://hebbmind.com/cli/miller.md): [CLI] Processes CSV, TSV, JSON and other structured data like awk, sed, cut, join and sort, but by field name, for cleaning, aggregation, format conversion and pretty-printing. The command is mlr; written in Go with no runtime dependencies. - [Feynman](https://hebbmind.com/cli/feynman.md): [CLI] Open-source research agent: one command runs literature reviews, deep research, paper reviews, paper-code consistency checks and replication plans, searching arXiv, PubMed and more with sources recorded. Good for grad students writing reviews. Run feynman setup to sign in to a model provider. - [SQLFluff](https://hebbmind.com/cli/sqlfluff.md): [CLI] Linter and formatter for 20+ SQL dialects that auto-fixes most issues and handles Jinja templating and dbt projects (dbt needs a plugin), suited to warehouse code review and CI. - [AWS Documentation MCP Server](https://hebbmind.com/mcp/aws-documentation-mcp-server.md): [MCP] Official AWS MCP that searches and reads AWS documentation, converts it to Markdown for agents to cite, and suggests related pages. No AWS credentials needed; requires uv. - [AWS HealthLake MCP Server](https://hebbmind.com/mcp/healthlake-mcp-server.md): [MCP] Official AWS MCP for managing FHIR health data in AWS HealthLake: CRUD, advanced search, full patient records, and import and export, with a read-only mode to prevent changes. Needs an AWS account, a paid HealthLake data store and local AWS credentials; clinical conclusions need professional review. - [policy-drafting](https://hebbmind.com/skill/policy-drafting.md): [Skill] Drafts employee policies such as remote work, parental leave and PTO, generates state or country supplements where rules differ, and flags laws in flux. Mostly US states; needs web access for regulations and is best installed with the employment-legal plugin. Lawyer review required. By Anthropic. - [Employment Legal](https://hebbmind.com/plugin/employment-legal.md): [Plugin] Anthropic's official employment law plugin: reviews hiring and termination risk by jurisdiction, classifies workers, tracks leave deadlines, manages internal investigations, and drafts policies with state supplements. Focused on US state law; output needs attorney review. - [Privacy Legal](https://hebbmind.com/plugin/privacy-legal.md): [Plugin] Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic. - [termination-review](https://hebbmind.com/skill/termination-review.md): [Skill] Pre-termination check for high-risk factors (recent complaints, protected leave, discrimination or retaliation, thin documentation), reviews severance and separation agreements, and looks up state final-pay deadlines. US-focused; needs web or a legal database. Lawyer review required. By Anthropic. - [AI Governance Legal](https://hebbmind.com/plugin/ai-governance-legal.md): [Plugin] Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice. - [handbook-updates](https://hebbmind.com/skill/handbook-updates.md): [Skill] When revising an employee handbook, compares proposed changes clause by clause with the current version, finds knock-on effects (such as PTO changes affecting final pay) and state supplement changes, and flags risks of cutting existing benefits. US-focused; needs legal review. By Anthropic. - [Claude for Legal](https://hebbmind.com/plugin/claude-for-legal.md): [Plugin] Anthropic's official legal plugin marketplace: 13 plugins covering commercial contracts, privacy, product counsel, M&A, employment, regulatory, AI governance, litigation and IP, plus plugins for law school clinics and law students. All output is a draft for attorney review. - [wage-hour-qa](https://hebbmind.com/skill/wage-hour-qa.md): [Skill] Answers wage and hour questions for a specific state or country, such as worker classification, overtime, meal and rest breaks, leave and final pay, citing the law for each point and flagging when judgment is needed. US-focused; needs web or a legal database. Lawyer review required. By Anthropic. - [Defuddle](https://hebbmind.com/cli/defuddle.md): [CLI] Extracts the main content of a web page, stripping comments, sidebars, headers and footers, and outputs clean HTML or Markdown with metadata like title, author and publish date, saving tokens when agents read the web. Built for Obsidian Web Clipper by kepano; still in development. - [Apache SeaTunnel](https://hebbmind.com/cli/seatunnel.md): [CLI] Distributed data integration tool and Apache top-level project with 160+ connectors for batch, real-time and CDC sync. Define jobs in config files and run them on the built-in Zeta engine or on Flink or Spark. Requires Java. Next page: https://hebbmind.com/tools.md?page=9&profession=fullstack%2Calgorithm%2Cdata-engineering%2Csecurity%2Chr