# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Full-stack / Indie or ML / AI, Tagged `codex`, `code-review`: 5 items.

> - Full-stack / Indie: General software work: coding-agent workflows, code review, debugging and Git collaboration.
> - ML / AI: Model training, evaluation and LLM application development.

- [Agent Skills](https://hebbmind.com/plugin/agent-skills.md): [Plugin] Addy Osmani's production-grade engineering skill pack covering spec, planning, implementation, testing, review and shipping, with commands like /spec, /plan, /build, /test, /review and /ship. Supports both Claude Code and Codex.
- [Codex plugin for Claude Code](https://hebbmind.com/plugin/codex-plugin-cc.md): [Plugin] Calls Codex from Claude Code for read-only or adversarial code reviews, or delegates tasks to Codex to run in the background. Maintained by OpenAI; needs a ChatGPT account (the free tier works) or an API key.
- [Codex Security](https://hebbmind.com/cli/codex-security.md): [CLI] OpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key.
- [Plannotator](https://hebbmind.com/plugin/plannotator.md): [Plugin] Annotate and review agent-generated plans, docs and code diffs in the browser, then send feedback back to the agent in one click. Hooks into plan mode and supports Claude Code, Codex and other agents. Run the official install script to set up the CLI first.
- [Codex Security](https://hebbmind.com/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.