# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for DevOps / SRE or ML / AI or Data analysis or Security, Tagged `hooks`: 16 items. > - DevOps / SRE: Deployment, monitoring, cloud resources and reliability. > - ML / AI: Model training, evaluation and LLM application development. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [ECC](https://hebbmind.com/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [Hookify](https://hebbmind.com/plugin/hookify.md): [Plugin] Generates hook rules from a one-line description or by analyzing recent conversations. Rules are Markdown files with match conditions that block or warn on dangerous commands and unwanted patterns, and take effect without a restart. Official Anthropic plugin. - [Plugin Dev](https://hebbmind.com/plugin/plugin-dev.md): [Plugin] Toolkit for building Claude Code plugins: 7 skills on plugin structure, hooks, MCP integration, commands, subagents and skill writing, a guided eight-phase create command, and subagents for agent generation, plugin validation and skill review. Maintained by Anthropic. - [RTK (Rust Token Killer)](https://hebbmind.com/cli/rtk.md): [CLI] Rust CLI proxy that filters and compresses command output before it reaches the agent's context, covering git, tests, grep, ls and 100+ other commands and cutting bash output by up to about 90%. Hooks automatically rewrite commands run by Claude Code, Codex and others. - [Ruflo](https://hebbmind.com/cli/ruflo.md): [CLI] Multi-agent orchestration framework formerly called Claude Flow: ruflo init gives Claude Code nearly 100 specialized subagents, swarm coordination, cross-session vector memory and hooks; add --codex to configure Codex instead. Also works as a standalone MCP server or plugin marketplace. - [Claude Plugins Official](https://hebbmind.com/plugin/claude-plugins-official.md): [Plugin] Anthropic's official plugin marketplace, built into Claude Code by default, with 300+ official and partner plugins for development, security, design and office collaboration. Browse and install with /plugin. - [Claude Code Setup](https://hebbmind.com/plugin/claude-code-setup.md): [Plugin] Scans your codebase and recommends the best hooks, skills, MCP servers, subagents and slash commands by category. Analysis only, no file changes; a quick way to set up Claude Code for a project. Official Anthropic plugin. - [Security Guidance](https://hebbmind.com/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [pre-commit](https://hebbmind.com/cli/pre-commit.md): [CLI] Multi-language git hook manager: declare formatting, lint, secret scanning and other hooks in .pre-commit-config.yaml to run automatically before each commit, or have the agent self-check with pre-commit run --all-files before committing. - [Build with Claude](https://hebbmind.com/plugin/buildwithclaude.md): [Plugin] Community plugin marketplace bundling hundreds of subagents, slash commands, hooks and skills by category, installable individually or all at once, with the buildwithclaude.com site for browsing community plugins and MCP servers. - [CC Safety Net](https://hebbmind.com/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+. - [Oh My Paper](https://hebbmind.com/plugin/oh-my-paper.md): [Plugin] A research plugin for Claude Code: commands like /omp:survey, /omp:experiment and /omp:write chain literature review, topic selection, experiments, writing and self-review, with 5 specialized agents and 34 research skills that remember project progress across sessions. Experiments lean toward ML. - [phd-skills](https://hebbmind.com/plugin/phd-skills.md): [Plugin] Research guardrails for PhD students: reproduce arXiv papers, debug training anomalies with evidence, compare runs at matched epochs, check paper-code consistency, verify BibTeX, find literature gaps and predict reviewer comments. No MCP or extra dependencies; mostly for ML research. - [SonarQube](https://hebbmind.com/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker. - [Langfuse Observability Plugin](https://hebbmind.com/plugin/claude-observability-plugin.md): [Plugin] Langfuse's official plugin: uses hooks to send prompts, model calls, token usage and cost, tool calls and subagents from Claude Code sessions to Langfuse as traces for monitoring and review. Needs Langfuse keys (self-hosting supported) and uv or Python 3.10+. - [Semgrep Guardian](https://hebbmind.com/plugin/semgrep-plugin.md): [Plugin] Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.