# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Full-stack / Indie or ML / AI or Data analysis or Security: 785 items.

> - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration.
> - ML / AI: Model training, evaluation and LLM application development.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [Firecrawl MCP Server](https://hebbmind.com/mcp/firecrawl-mcp-server.md): [MCP] Scrapes web pages into Markdown or structured data, with full-site crawling, sitemaps, web search and interaction with dynamic pages. Maintained by Firecrawl; the cloud needs an API key (self-hosting is possible), and the keyless hosted endpoint only offers scrape, search and parse.
- [Variant Analysis](https://hebbmind.com/skill/variant-analysis.md): [Skill] From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity.
- [Defending Code Reference Harness](https://hebbmind.com/skill/defending-code-reference-harness.md): [Skill] Anthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.
- [OpenCompass](https://hebbmind.com/cli/opencompass.md): [CLI] Open-source LLM evaluation platform: one opencompass command picks the model and datasets and runs the evaluation across hundreds of benchmarks. Works with local Hugging Face models and API models, with vLLM and LMDeploy for faster inference.
- [Build Web Data Visualization](https://hebbmind.com/plugin/build-web-data-visualization.md): [Plugin] OpenAI's official Codex plugin with 18 skills to choose, design, build, test and export web charts, maps, dashboards, Gantt charts and UML, using D3, Vega-Lite and Three.js with attention to accessibility and responsiveness. Codex only.
- [OpenAI Ads Conversions](https://hebbmind.com/plugin/openai-ads-conversions.md): [Plugin] OpenAI's official Codex plugin for adding the OpenAI Ads measurement pixel and optional Conversions API (CAPI) to a website, with local validation scripts plus key and deduplication guidance. Needs the site's source and an OpenAI Ads account; review manually before launch.
- [Life Science Research](https://hebbmind.com/skill/openai-skills-5.md): [Skill] OpenAI's official life-science skills: 49 skills query public databases such as UniProt, ClinVar, gnomAD and AlphaFold through Python scripts, with a router skill that breaks down questions, normalizes entities and compiles sourced evidence. Written mainly for Codex.
- [Data Analytics](https://hebbmind.com/skill/openai-skills.md): [Skill] OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime.
- [Linear (Codex plugin)](https://hebbmind.com/plugin/openai-linear.md): [Plugin] Linear's official plugin in OpenAI's Codex marketplace: search, create and update Linear issues, projects and initiatives from Codex, and draft PRDs, status updates and customer request summaries. Codex only; needs a Linear account and authorization.
- [Life Science Research](https://hebbmind.com/plugin/life-science-research.md): [Plugin] OpenAI's official Codex plugin with about 50 skills that route questions to genetics, omics, pathway, protein structure, chemistry and clinical evidence sources, can split the work across parallel subagents, and synthesize sourced conclusions.
- [OpenAI Codex Plugins](https://hebbmind.com/plugin/openai-plugins.md): [Plugin] OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install.
- [Jupyter Notebooks](https://hebbmind.com/skill/jupyter-notebook.md): [Skill] Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins.
- [Data Analytics](https://hebbmind.com/plugin/data-analytics.md): [Plugin] OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools.
- [Build Web Data Visualization](https://hebbmind.com/skill/openai-openai-skills.md): [Skill] OpenAI's official set of 18 web data visualization skills: chart selection and critique, D3, Canvas, Three.js, maps, statistical uncertainty, live dashboards, Gantt charts, UML and scrollytelling. Ships with a Codex plugin; installed alone, the plugin-level references are missing.
- [Frontend Testing Debugging](https://hebbmind.com/skill/playwright-interactive.md): [Skill] Tests and debugs a locally running frontend with Codex's Browser plugin or Playwright: checks blank pages, framework and console errors, captures screenshots, re-verifies after fixes and writes a QA report. Maintained by OpenAI; formerly playwright-interactive in openai/skills.
- [Life Sciences NGS Analysis](https://hebbmind.com/plugin/ngs-analysis.md): [Plugin] OpenAI's official Codex plugin that guides sequencing analysis from BCL/FASTQ: QC, RNA-seq differential expression, single-cell, variant calling and metagenomics, favoring nf-core and other public pipelines with reproducible run logs. Checks for local tools first. Research use only.
- [OpenAI Developers](https://hebbmind.com/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.
- [Build ChatGPT App](https://hebbmind.com/skill/chatgpt-apps.md): [Skill] Builds, refactors and debugs ChatGPT apps with the OpenAI Apps SDK: plans tools, scaffolds the MCP server and UI widgets, and checks the work against official docs. Maintained by OpenAI; formerly chatgpt-apps in openai/skills.
- [Build Web Apps](https://hebbmind.com/plugin/build-web-apps.md): [Plugin] OpenAI's official Codex plugin for building frontend apps and generating visual assets, testing and debugging in a browser, plus best-practice skills for React, shadcn/ui, Stripe payments and Supabase databases. Codex only.
- [Codex Security](https://hebbmind.com/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.
- [notion-spec-to-implementation](https://hebbmind.com/skill/notion-spec-to-implementation.md): [Skill] Turns a Notion PRD or feature spec into an implementation plan page and tasks, flagging open questions and linking spec, plan and tasks while tracking progress. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP connected.
- [sd](https://hebbmind.com/cli/sd.md): [CLI] A more intuitive find-and-replace tool than sed: uses JavaScript/Python-style regex syntax, supports literal string mode and in-place file edits, which suits agents doing bulk text rewrites.
- [Waza](https://hebbmind.com/plugin/waza.md): [Plugin] Tw93's lean pack of engineering-habit skills: /think to pressure-test plans, /hunt for root causes, /check to review diffs, /ui for frontend interfaces, /write to polish Chinese and English prose, and more (8 skills). Works with both Claude Code and Codex.
- [BrowserTools MCP](https://hebbmind.com/mcp/browser-tools-mcp.md): [MCP] Hands your current browser session to the agent through a Chrome extension: read console logs and network requests, take screenshots, and run Lighthouse performance, accessibility and SEO audits without signing in again.
- [Jupytext](https://hebbmind.com/cli/jupytext.md): [CLI] Converts and two-way syncs Jupyter notebooks with plain Python scripts or Markdown, so agents can edit research and teaching notebooks like ordinary text and diffs stay readable. Needs a local Python environment; install with pip.
- [arxiv-latex-cleaner](https://hebbmind.com/cli/arxiv-latex-cleaner.md): [CLI] Cleans a LaTeX project before arXiv submission: removes comments, auxiliary files and unused .tex files and images, and can compress images, so internal notes are not published with the source. From Google Research; installable with Homebrew on macOS.
- [Backlog.md](https://hebbmind.com/cli/backlog-md.md): [CLI] Turns any folder into a Markdown task board: Claude Code or Codex break work into tasks with acceptance criteria for review before coding, managed from the terminal or a browser board. Works without Git for personal plans too. Runs locally with no account; needs Node.js or Homebrew.
- [Trafilatura](https://hebbmind.com/cli/trafilatura.md): [CLI] Python library and CLI for extracting main web content: fetches pages, crawls via sitemaps and RSS feeds, strips headers, footers and other noise, and outputs TXT, Markdown, JSON, XML and more with metadata. Also processes downloaded HTML offline.
- [zizmor](https://hebbmind.com/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.
- [Dev Browser](https://hebbmind.com/skill/dev-browser.md): [Skill] Lets coding agents control real Chrome with short Puppeteer scripts, with named pages that keep state across calls, accessibility-tree snapshots and screenshots for self-testing web changes. Install the dev-browser CLI globally first; macOS and glibc Linux only.
- [n8n Skills](https://hebbmind.com/skill/n8n-skills.md): [Skill] 14 n8n workflow skills: expression syntax, MCP tool usage, node configuration, validation and troubleshooting, Code nodes, AI Agent workflows and self-hosted n8n deployment. Meant to be used with the n8n-mcp server.
- [n8n-skills](https://hebbmind.com/plugin/n8n-skills.md): [Plugin] 14 skills plus a hook-based reminder layer for use with n8n-mcp: teaches agents to write correct n8n expressions, configure nodes, apply workflow patterns, fix validation errors and deploy self-hosted n8n. Requires n8n-mcp to be set up first.
- [csvkit](https://hebbmind.com/cli/csvkit.md): [CLI] Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files.
- [Lieflat Charts](https://hebbmind.com/skill/lieflat-charts.md): [Skill] Generates template-driven charts as single-file HTML: picks a chart from real Lupi, Basics, Glance, Maps and Interactive gallery implementations based on data shape, or fills one of 12 Chinese and English report templates. Defaults to Mono grayscale with semantic color presets. Written in Chinese.
- [Vale](https://hebbmind.com/cli/vale.md): [CLI] A prose linter that checks docs against style guides: use ready-made packages like Microsoft and Google or write your own YAML rules. It parses Markdown, AsciiDoc and other formats before checking, runs fully offline, and plugs into editors and CI.
- [21st MCP (formerly Magic MCP)](https://hebbmind.com/mcp/magic-mcp.md): [MCP] 21st.dev's official MCP: lets agents search and fetch UI components, themes and template code from the 21st.dev community, and generate components from a description once AI access is enabled. Absorbs the former Magic MCP; requires a free API key from 21st.dev.
- [Google Agents CLI Skills](https://hebbmind.com/skill/google-skills.md): [Skill] Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.
- [Taskwarrior](https://hebbmind.com/cli/taskwarrior.md): [CLI] Veteran command-line task manager with projects, tags, priorities, due dates and custom reports, JSON export, and a rich ecosystem of hooks and extensions, well suited for agents that record and track tasks.
- [Quarto](https://hebbmind.com/cli/quarto-cli.md): [CLI] Posit's open-source scientific and technical publishing system built on Pandoc: embed Python, R or Julia code in Markdown or Jupyter notebooks, then quarto render produces HTML, PDF, Word, slides, websites and books.
- [Docker CLI](https://hebbmind.com/cli/docker-cli.md): [CLI] Docker's official CLI for building images, running and managing containers, viewing logs and pushing to registries, a foundational tool for agents setting up isolated environments. Needs a local or remote Docker Engine such as Docker Desktop.
- [ZCF (Zero-Config Code Flow)](https://hebbmind.com/cli/zcf.md): [CLI] Zero-config CLI that sets up Claude Code and Codex in one go: an interactive menu handles installation, workflow imports, API and CCR proxy setup and common MCP servers, with model provider presets and bilingual English/Chinese configuration.
- [JiraCLI](https://hebbmind.com/cli/jira-cli.md): [CLI] Full-featured Jira CLI: filter, create, transition, assign and link issues and manage epics and sprints, with --plain text output that agents can read. Works with Cloud and self-hosted Jira; set up an API token and run jira init.
- [MCP Atlassian](https://hebbmind.com/mcp/mcp-atlassian.md): [MCP] Community-maintained MCP for Jira and Confluence: search with JQL/CQL and create or update issues, pages and comments. Supports both Cloud and Server/Data Center deployments; needs an API token or personal access token.
- [Antfu Conventions](https://hebbmind.com/skill/antfu.md): [Skill] Applies Anthony Fu's conventions for JavaScript and TypeScript projects: file organization, explicit imports, Vitest style, @antfu/ni, @antfu/eslint-config with antislop, Knip, tsdown and a single ci script, mirroring the antfu/starter-ts template for new projects.
- [Nuxt](https://hebbmind.com/skill/nuxt.md): [Skill] Reference for Nuxt 5, the full-stack Vue framework: directory layout, file-based routing, useFetch, auto-imports, server routes, rendering modes, SSR and hydration pitfalls, modules and layers, with notes on the move to Nitro v3 and Vite 8. Generated by Anthony Fu from the official docs.
- [Vite](https://hebbmind.com/skill/vite.md): [Skill] Reference for Vite 8: vite.config.ts, features like import.meta.glob and asset queries, the plugin API, library mode and SSR, the Environment API, and migrating to the Rolldown bundler and Oxc transformer. Prefers TypeScript config and ESM. Generated by Anthony Fu from the official docs.
- [Vitest](https://hebbmind.com/skill/vitest.md): [Skill] Reference for Vitest 5: config, CLI, the test, describe and expect APIs, hooks, mocking with vi, snapshots, coverage, fixtures, concurrency, filtering and tags, reporters, benchmarks, test environments, type testing and multi-project setups. Generated by Anthony Fu from the official docs.
- [Nitro](https://hebbmind.com/skill/nitro.md): [Skill] Reference for Nitro v3, the server toolkit behind Nuxt: file routes with H3 v2 handlers, route rules, caching, KV storage, tasks, WebSockets and OpenAPI, plus deploy presets and v2 migration notes. Generated by Anthony Fu from the official docs.
- [pnpm](https://hebbmind.com/skill/pnpm.md): [Skill] Reference for pnpm 12: CLI, pnpm-workspace.yaml settings, monorepo workspaces, catalogs, overrides, patches, supply-chain settings such as build approval, task orchestration, CI setup and migration from npm, Yarn or older pnpm. Generated by Anthony Fu from the official docs.
- [Claude Scholar](https://hebbmind.com/skill/claude-scholar.md): [Skill] Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin.

Next page: https://hebbmind.com/tools.md?page=10&profession=fullstack%2Calgorithm%2Cdata%2Csecurity
