# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for ML / AI or Data analysis or Security, Tagged `hooks`: 10 items. > - ML / AI: Model training, evaluation and LLM application development. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [ECC](https://hebbmind.com/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [Plugin Dev](https://hebbmind.com/plugin/plugin-dev.md): [Plugin] Toolkit for building Claude Code plugins: 7 skills on plugin structure, hooks, MCP integration, commands, subagents and skill writing, a guided eight-phase create command, and subagents for agent generation, plugin validation and skill review. Maintained by Anthropic. - [Ruflo](https://hebbmind.com/cli/ruflo.md): [CLI] Multi-agent orchestration framework formerly called Claude Flow: ruflo init gives Claude Code nearly 100 specialized subagents, swarm coordination, cross-session vector memory and hooks; add --codex to configure Codex instead. Also works as a standalone MCP server or plugin marketplace. - [Security Guidance](https://hebbmind.com/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [CC Safety Net](https://hebbmind.com/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+. - [Oh My Paper](https://hebbmind.com/plugin/oh-my-paper.md): [Plugin] A research plugin for Claude Code: commands like /omp:survey, /omp:experiment and /omp:write chain literature review, topic selection, experiments, writing and self-review, with 5 specialized agents and 34 research skills that remember project progress across sessions. Experiments lean toward ML. - [phd-skills](https://hebbmind.com/plugin/phd-skills.md): [Plugin] Research guardrails for PhD students: reproduce arXiv papers, debug training anomalies with evidence, compare runs at matched epochs, check paper-code consistency, verify BibTeX, find literature gaps and predict reviewer comments. No MCP or extra dependencies; mostly for ML research. - [SonarQube](https://hebbmind.com/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker. - [Langfuse Observability Plugin](https://hebbmind.com/plugin/claude-observability-plugin.md): [Plugin] Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+. - [Semgrep Guardian](https://hebbmind.com/plugin/semgrep-plugin.md): [Plugin] Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.