# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for QA or DevOps / SRE or Data engineering or Data analysis or Security: 501 items.

> - QA: Functional testing, test automation and quality assurance.
> - DevOps / SRE: Deployment, monitoring, cloud resources and reliability.
> - Data engineering: Data pipelines, warehouse modeling, ETL and data quality.
> - Data analysis: Querying, statistical analysis, reporting and visualization.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [MarkItDown](https://hebbmind.com/cli/markitdown.md): [CLI] Converts PDF, Word, Excel, PowerPoint, HTML, images, audio and more into Markdown that keeps headings, lists and tables, ready for LLMs to read and analyze. Maintained by Microsoft; requires Python 3.10+.
- [Claude Code](https://hebbmind.com/cli/claude-code.md): [CLI] Anthropic's terminal coding agent: understands your codebase, edits code, runs commands and handles git workflows, with plugins, MCP and a headless mode (claude -p). Sign in with a Claude account or set an API key.
- [Code Review](https://hebbmind.com/plugin/code-review.md): [Plugin] Reviews pull requests with several parallel subagents, scores each finding by confidence to filter out false positives, and can post the results as PR comments. Official Anthropic plugin; requires a logged-in GitHub CLI.
- [Codex CLI](https://hebbmind.com/cli/openai-codex.md): [CLI] OpenAI's coding agent that runs locally, written in Rust: reads and writes code and runs commands inside an OS-level sandbox. Sign in with a ChatGPT plan or use an API key.
- [Browser Use](https://hebbmind.com/skill/browser-use.md): [Skill] Controls your local Chrome over CDP to navigate, click, type, take screenshots and scrape data, reusing logged-in sessions. Official browser-use skill; install the browser-use CLI with uv first.
- [Browser Use](https://hebbmind.com/cli/browser-use.md): [CLI] Open-source browser agent project. Its browser-use CLI lets Claude Code, Codex and other agents drive your logged-in local Chrome with Python snippets, or connect to a cloud browser; also ships a Python agent library. The cloud browser needs an API key.
- [Scientific Agent Skills](https://hebbmind.com/skill/scientific-agent-skills.md): [Skill] 166 research skills maintained by K-Dense (formerly Claude Scientific Skills), spanning bioinformatics, cheminformatics, clinical research, materials and physics, including unified access to 78 public databases such as PubChem and UniProt. Works with Claude Code, Codex and Cursor.
- [GitHub CLI](https://hebbmind.com/cli/gh.md): [CLI] GitHub's official CLI: manage pull requests, issues, releases and Actions workflows from the terminal. Most commands support --json output that agents can parse, and an official agent skill is available. Run gh auth login first.
- [Claude Security](https://hebbmind.com/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin.
- [DuckDB](https://hebbmind.com/cli/duckdb.md): [CLI] In-process analytical SQL database. Its CLI queries CSV, Parquet and JSON files directly with SQL, no import or server needed, so agents can sample and aggregate large files. Officially maintained.
- [Playwright MCP](https://hebbmind.com/mcp/playwright.md): [MCP] Lets agents drive a real browser through the accessibility tree: navigate, click, fill forms and take screenshots, without needing a vision model. Maintained by Microsoft.
- [GitHub MCP Server](https://hebbmind.com/mcp/github.md): [MCP] GitHub's official MCP server: lets agents read and write repositories and code, manage issues and pull requests, and check Actions workflows and code-scanning alerts. Use the hosted remote server or run it locally in Docker; needs a personal access token or OAuth.
- [MCP Toolbox for Databases](https://hebbmind.com/mcp/mcp-toolbox.md): [MCP] Google's open-source database MCP server with ready-made query and SQL tools for dozens of sources, including PostgreSQL, MySQL, BigQuery, Spanner and MongoDB. Define controlled custom queries in tools.yaml.
- [Trail of Bits Skills](https://hebbmind.com/skill/trailofbits-skills.md): [Skill] Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.
- [Cloudflare MCP Server](https://hebbmind.com/mcp/mcp-server-cloudflare.md): [MCP] Cloudflare's official remote MCP servers: manage Workers and bindings such as KV, R2 and D1, and query logs and observability, builds, DNS analytics and Radar data. Authorizes with Cloudflare OAuth; some features need a paid plan.
- [Test-Driven Development](https://hebbmind.com/skill/test-driven-development.md): [Skill] Forces red-green-refactor: write a test and watch it fail, then write the minimum code to pass. Any code written without a verified failing test gets deleted and redone. From the Superpowers workflow.
- [Diagnosing Bugs](https://hebbmind.com/skill/diagnosing-bugs.md): [Skill] A disciplined process for hard bugs and performance regressions: build a reliable reproduction loop, reproduce and minimize, form hypotheses, instrument to verify, then fix and add a regression test, redacting secrets in output. By Matt Pocock.
- [ECC](https://hebbmind.com/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support.
- [Hermes Agent](https://hebbmind.com/cli/hermes-agent.md): [CLI] Self-improving agent from Nous Research with built-in memory and a learning loop that turns experience into skills. Works with any model provider; the hermes command has a terminal UI, and a gateway connects it to Telegram, Slack and more and runs scheduled tasks.
- [webapp-testing](https://hebbmind.com/skill/webapp-testing.md): [Skill] Drives local web apps with Python Playwright scripts to verify features, debug the UI, take screenshots and read browser logs. Includes helper scripts to start and stop dev servers. Official Anthropic skill.
- [XLSX](https://hebbmind.com/skill/xlsx.md): [Skill] Creates, edits and analyzes Excel spreadsheets: formulas, formatting, charts and data cleaning, plus conversion between CSV, TSV and other tabular formats. The official Anthropic skill behind Claude's document features; source-available, not open source.
- [Hookify](https://hebbmind.com/plugin/hookify.md): [Plugin] Generates hook rules from a one-line description or by analyzing recent conversations. Rules are Markdown files with match conditions that block or warn on dangerous commands and unwanted patterns, and take effect without a restart. Official Anthropic plugin.
- [PR Review Toolkit](https://hebbmind.com/plugin/pr-review-toolkit.md): [Plugin] Six specialized review subagents that check comment accuracy, test coverage, silent failures, type design, code style and simplification opportunities. Run them individually or all at once. Official Anthropic plugin.
- [gstack](https://hebbmind.com/skill/gstack.md): [Skill] Skill pack from YC president Garry Tan: slash commands such as /office-hours, /plan-ceo-review, /review, /qa and /ship play CEO, engineering manager, designer, QA and release engineer. Needs Git and Bun; clone the repo and run ./setup as the README describes.
- [Browser Use MCP](https://hebbmind.com/mcp/browser-use-mcp.md): [MCP] Local MCP server built into Browser Use: lets agents navigate, click, type and extract page content, or hand multi-step tasks to the built-in browser agent. Bring your own OpenAI or Anthropic API key.
- [Agent Skills](https://hebbmind.com/plugin/agent-skills.md): [Plugin] Addy Osmani's production-grade engineering skill pack covering spec, planning, implementation, testing, review and shipping, with commands like /spec, /plan, /build, /test, /review and /ship. Supports both Claude Code and Codex.
- [Agent Skills (Addy Osmani)](https://hebbmind.com/skill/addyosmani-agent-skills.md): [Skill] Engineering skill collection spanning define, plan, build, verify, review and ship, with /spec, /plan, /build, /test, /review and /ship commands, including TDD, code review and web performance audits. By Addy Osmani.
- [Gemini CLI](https://hebbmind.com/cli/gemini-cli.md): [CLI] Google's official open-source terminal agent using Gemini models with a 1M-token context. Built-in Google Search, file and shell tools, plus MCP support. Personal Google accounts get a free quota.
- [Playwright](https://hebbmind.com/cli/playwright.md): [CLI] Microsoft's cross-browser end-to-end testing framework: one API drives Chromium, Firefox and WebKit, npx playwright test runs tests in parallel and isolation, with auto-waiting and trace replay for debugging failures.
- [vLLM](https://hebbmind.com/cli/vllm.md): [CLI] High-throughput LLM inference and serving engine: vllm serve starts an OpenAI- and Anthropic-compatible server in one command. Supports 200+ model architectures from Hugging Face, quantization and distributed inference. Aimed mainly at NVIDIA, AMD and other GPUs.
- [PaddleOCR](https://hebbmind.com/cli/paddleocr.md): [CLI] Baidu PaddlePaddle's official OCR and document parsing tool: the paddleocr command reads text from images and parses PDFs and scans into Markdown or JSON, supporting 100+ languages with models that run locally.
- [uv](https://hebbmind.com/cli/uv.md): [CLI] Astral's extremely fast Python package and project manager written in Rust, replacing pip, pipx, poetry, pyenv and more. Supports lockfiles and multiple Python versions, and uvx runs Python tools without installing them.
- [Scrapling](https://hebbmind.com/mcp/scrapling.md): [MCP] MCP server built into the adaptive Python scraping framework Scrapling: supports plain HTTP requests, browser rendering and stealth fetching, and uses CSS selectors to pass only the target content to the AI, saving tokens and filtering out prompt injection.
- [Scrapling](https://hebbmind.com/cli/scrapling.md): [CLI] Adaptive web scraping framework: scrapling extract turns a page into Markdown, text or HTML in one command, with CSS selectors and browser rendering for dynamic pages, plus an MCP server (needs the ai extra). Needs Python 3.10+ and a browser install on first use.
- [Crawl4AI](https://hebbmind.com/cli/crawl4ai.md): [CLI] Open-source, LLM-friendly web crawler that turns pages into clean Markdown for RAG and agents. Ships the crwl CLI and supports deep crawling and question-driven data extraction (extraction needs an LLM key). Free to self-host.
- [Archify](https://hebbmind.com/skill/archify.md): [Skill] Turns natural-language descriptions, Mermaid or a real code repo into interactive single-file HTML diagrams: architecture, flowcharts, sequence diagrams, data flows and state machines. Validates output automatically and exports PNG or SVG.
- [RTK (Rust Token Killer)](https://hebbmind.com/cli/rtk.md): [CLI] Rust CLI proxy that filters and compresses command output before it reaches the agent's context, covering git, tests, grep, ls and 100+ other commands and cutting bash output by up to about 90%. Hooks automatically rewrite commands run by Claude Code, Codex and others.
- [fzf](https://hebbmind.com/cli/fzf.md): [CLI] General-purpose command-line fuzzy finder for any text input, such as file lists, command history or processes. Besides the interactive UI it has a non-interactive --filter mode, plus shell key bindings and completion.
- [MinerU](https://hebbmind.com/cli/mineru.md): [CLI] Document parser from OpenDataLab that turns PDFs, images and Office files into Markdown or JSON, handling tables, formulas and complex layouts well, with page-by-page reading and citation anchors for agents. Parses locally by default; needs Python 3.10+.
- [Tesseract OCR](https://hebbmind.com/cli/tesseract.md): [CLI] Classic open-source OCR engine and CLI that reads text from images and outputs plain text, hOCR, searchable PDF or TSV. Supports 100+ languages; install the language data for each language you need.
- [OpenBB MCP Server](https://hebbmind.com/mcp/openbb-finance-mcp-server.md): [MCP] Official OpenBB MCP server exposing the OpenBB Platform's equity, ETF, macroeconomic, crypto and news data to agents; enable only the tool categories you need to save context. Needs uv locally; some data sources need your own API keys. Not investment advice.
- [OpenBB Platform CLI](https://hebbmind.com/cli/openbb-finance-cli.md): [CLI] Command-line edition of the open-source OpenBB investment research platform: query stock prices, financial statements, macroeconomic and other financial data from the terminal, and automate data pulls with Routine scripts. Officially maintained; some sources need API keys.
- [act](https://hebbmind.com/cli/act.md): [CLI] Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed.
- [Ansible](https://hebbmind.com/cli/ansible.md): [CLI] Agentless IT automation: uses SSH and playbooks for configuration management, app deployment, cloud orchestration and ad hoc commands at scale, with nothing to install on target machines. Maintained primarily by Red Hat.
- [Cline CLI](https://hebbmind.com/cli/cline-cli.md): [CLI] Official Cline CLI sharing its agent core with the VS Code extension: plan/act modes, MCP, checkpoints and subagents; --yolo and --json run it unattended in CI and scripts. Sign in with Cline or a ChatGPT subscription, or bring your own API key.
- [ripgrep](https://hebbmind.com/cli/ripgrep.md): [CLI] Fast regex search across directories (command rg) that respects .gitignore, skips hidden and binary files by default and filters by file type. A go-to command for coding agents searching a codebase.
- [Docling](https://hebbmind.com/cli/docling.md): [CLI] Parses PDF, DOCX, PPTX, XLSX, HTML, images and audio, recovering layout, reading order, tables and formulas, and exports Markdown, HTML or lossless JSON. Started by IBM Research, now hosted by the LF AI & Data Foundation; runs fully locally.
- [tldr-pages](https://hebbmind.com/cli/tldr.md): [CLI] Community-maintained simplified command help with example-first pages for common CLI tools, easier to read than man. Install an official client (Python, Rust or Node.js), then run tldr followed by a command name.
- [bat](https://hebbmind.com/cli/bat.md): [CLI] A cat replacement with syntax highlighting, line numbers and Git change markers, plus --line-range to print specific lines. Falls back to plain text in pipes and other non-interactive use, and pairs with git diff or tail -f for code and logs.
- [rclone](https://hebbmind.com/cli/rclone.md): [CLI] 'rsync for cloud storage': sync and copy files across dozens of providers such as S3, Google Drive, OneDrive and Alibaba Cloud OSS, with encryption and mounting. Set up remotes with rclone config before use.

Next page: https://hebbmind.com/tools.md?page=2&profession=qa%2Cdevops%2Cdata-engineering%2Cdata%2Csecurity
