# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Type Plugin, Resources for ML / AI or Security or Legal: 71 items. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. > - Legal: Contract drafting and review, legal research, litigation documents, compliance and IP. - [Claude Security](https://hebbmind.com/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [Knowledge Work Plugins](https://hebbmind.com/plugin/knowledge-work-plugins.md): [Plugin] Anthropic's knowledge-work plugin marketplace, bundling skills, commands and connectors by role: sales, support, product, marketing, legal, finance, HR, data and more, plus many partner plugins. Built mainly for Cowork; also works in Claude Code. - [ECC](https://hebbmind.com/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [prompts.chat](https://hebbmind.com/plugin/prompts-chat.md): [Plugin] Official Claude Code plugin for the prompts.chat library: search prompts and Agent Skills from your coding assistant, fill in variables and improve prompts with AI. Includes commands, subagents and a remote MCP; saving your own prompts needs an API key. - [Plugin Dev](https://hebbmind.com/plugin/plugin-dev.md): [Plugin] Toolkit for building Claude Code plugins: 7 skills on plugin structure, hooks, MCP integration, commands, subagents and skill writing, a guided eight-phase create command, and subagents for agent generation, plugin validation and skill review. Maintained by Anthropic. - [Agent SDK Dev](https://hebbmind.com/plugin/agent-sdk-dev.md): [Plugin] Scaffolds a Claude Agent SDK project in Python or TypeScript interactively with /new-sdk-app, then a verifier agent checks dependencies, config and code against official best practices. Maintained by Anthropic. - [Ruflo](https://hebbmind.com/plugin/ruflo.md): [Plugin] Multi-agent orchestration framework for Claude Code and Codex, formerly Claude Flow: swarm coordination, self-learning memory and cross-machine federated communication. The marketplace offers 30+ plugins; full features need npx ruflo init. - [career-ops](https://hebbmind.com/plugin/career-ops.md): [Plugin] Job search system that runs in your local AI coding CLI: scans job portals, scores roles with a structured A-H evaluation and a 1-5 rating, flags fake listings, tailors ATS resumes and cover letters, and tracks applications. Never submits for you. Needs Node.js. - [Session Report](https://hebbmind.com/plugin/session-report.md): [Plugin] Official Anthropic plugin that reads local session logs in ~/.claude/projects and generates an interactive HTML usage report covering tokens, cache hit rate, subagents, skills and the most expensive prompts, with optimization tips. Needs Node.js. - [Pyright LSP](https://hebbmind.com/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin. - [Skill Creator](https://hebbmind.com/plugin/skill-creator.md): [Plugin] Creates or improves Agent Skills from scratch: writes eval cases to test them, runs benchmarks with variance analysis, and tunes descriptions for more accurate triggering. Maintained by Anthropic. - [MCP Server Dev](https://hebbmind.com/plugin/mcp-server-dev.md): [Plugin] Designs and builds MCP servers: first picks a deployment model among remote HTTP, MCPB bundles and local stdio, then guides tool design, auth and in-chat interactive components. Maintained by Anthropic. - [Security Guidance](https://hebbmind.com/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [HR Legal Compliance](https://hebbmind.com/plugin/hr-legal-compliance.md): [Plugin] HR and compliance plugin with HR and legal advisor subagents plus employment contract and GDPR skills, for drafting hiring materials, onboarding, offboarding and performance policies, employment contracts, privacy policies, terms of service and DPAs. Mainly US and EU rules. - [wshobson/agents](https://hebbmind.com/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Security Scanning](https://hebbmind.com/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [Quantitative Trading](https://hebbmind.com/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice. - [LLM Application Dev](https://hebbmind.com/plugin/llm-application-dev.md): [Plugin] Plugin for building LLM apps: LangGraph agents with memory and tool use, hybrid-search RAG, vector index tuning, prompt optimization and LLM evaluation. Includes 3 subagents and 8 skills. - [Machine Learning Ops](https://hebbmind.com/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills. - [Legal](https://hebbmind.com/plugin/legal.md): [Plugin] Plugin for in-house legal: reviews contracts clause by clause against your negotiation playbook with suggested redlines, triages NDAs green/yellow/red, handles compliance and privacy questions, assesses legal risk and writes briefs. Official from Anthropic; default playbook assumes US law. - [PDF Viewer](https://hebbmind.com/plugin/pdf-viewer.md): [Plugin] Anthropic's official plugin that opens PDFs in a local interactive viewer where Claude proposes highlights, comments and approval stamps in batches, walks you through form filling, places signature images and exports an annotated copy. Needs Node.js 18+; signatures are not digital certificates. - [Google Skills](https://hebbmind.com/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others. - [Agent Skills for Context Engineering](https://hebbmind.com/plugin/agent-skills-for-context-engineering.md): [Plugin] Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems. - [AI Research Skills](https://hebbmind.com/plugin/ai-research-skills.md): [Plugin] Plugin marketplace for AI research with nearly 100 skills in 23 categories, from ideation, fine-tuning and post-training to distributed training, inference serving, evaluation and paper writing, coordinated end to end by the autoresearch skill. - [Hugging Face Skills](https://hebbmind.com/plugin/huggingface-skills.md): [Plugin] Lets agents work with the Hugging Face Hub through the hf CLI: search and download models and datasets, manage repos and Spaces, and run training and evaluation jobs on cloud GPUs, with more workflow skills installable as needed. Maintained by Hugging Face. - [Law Student](https://hebbmind.com/plugin/law-student.md): [Plugin] Anthropic's official study plugin for law students: Socratic questioning, case briefs, outline building, IRAC essay feedback, flashcards and jurisdiction-specific bar prep plans. Deliberately guides thinking instead of writing for the student. - [Employment Legal](https://hebbmind.com/plugin/employment-legal.md): [Plugin] Anthropic's official employment law plugin: reviews hiring and termination risk by jurisdiction, classifies workers, tracks leave deadlines, manages internal investigations, and drafts policies with state supplements. Focused on US state law; output needs attorney review. - [Privacy Legal](https://hebbmind.com/plugin/privacy-legal.md): [Plugin] Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic. - [Corporate Legal](https://hebbmind.com/plugin/corporate-legal.md): [Plugin] Anthropic's official corporate legal plugin: tabular due diligence over data room files with cell-level citations and issue extraction, material contract disclosure schedules and closing checklists, board written consents, and entity compliance deadlines. Outputs are drafts for attorney review. - [Legal Clinic](https://hebbmind.com/plugin/legal-clinic.md): [Plugin] Anthropic's official plugin for US law school clinics: faculty set clinic rules once, then students use it for structured intake, first drafts, IRAC memo scaffolds, deadline tracking and end-of-term handoffs. It scaffolds; students analyze. Check data retention first; supervisors review output. - [Litigation Legal](https://hebbmind.com/plugin/litigation-legal.md): [Plugin] Anthropic's official litigation plugin: manages the case portfolio, deadlines, legal holds and outside counsel progress, and builds claim charts, fact chronologies, witness outlines, first-pass privilege logs and brief section drafts. Outputs are drafts for attorney review. - [Claude for Legal](https://hebbmind.com/plugin/claude-for-legal.md): [Plugin] Anthropic's official legal plugin marketplace: 13 plugins covering commercial contracts, privacy, product counsel, M&A, employment, regulatory, AI governance, litigation and IP, plus plugins for law school clinics and law students. All output is a draft for attorney review. - [Commercial Legal](https://hebbmind.com/plugin/commercial-legal.md): [Plugin] Commercial contracts plugin: reviews vendor agreements, NDAs and SaaS subscriptions against a sell-side or buy-side negotiation playbook, tracks renewal and cancellation deadlines, and drafts escalation approval requests. First use starts with an interview to build the playbook. By Anthropic. - [AI Governance Legal](https://hebbmind.com/plugin/ai-governance-legal.md): [Plugin] Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice. - [IP Legal](https://hebbmind.com/plugin/ip-legal.md): [Plugin] Anthropic's official IP plugin: trademark clearance screening, freedom-to-operate and infringement triage, invention disclosure intake, drafting or responding to cease-and-desist letters and DMCA takedowns, open-source license compliance checks and renewal deadline tracking. - [Product Legal](https://hebbmind.com/plugin/product-legal.md): [Plugin] Anthropic's official product counsel plugin: learns your risk calibration from past launch reviews, then reviews launches, checks marketing copy for claims needing substantiation and quickly answers is-this-OK questions. Connects to Jira, Linear and Slack; outputs are drafts for attorney review. - [Regulatory Legal](https://hebbmind.com/plugin/regulatory-legal.md): [Plugin] Anthropic's official regulatory compliance plugin: monitors sources like the Federal Register, compares new rules with your policy library to find gaps, tracks comment deadlines and open gaps, and drafts policy revisions and weekly regulatory digests. Outputs are drafts for attorney review. - [Legal Builder Hub](https://hebbmind.com/plugin/legal-builder-hub.md): [Plugin] Skill store in Anthropic's legal marketplace: asks your practice area, recommends legal skills from community libraries like lpm-skills and Lawvable, shows each SKILL.md and runs a heuristic prompt-injection scan, with manual approval for installs and updates. Lawyers must review output. - [Harness](https://hebbmind.com/plugin/harness.md): [Plugin] Say build a harness for this project and it designs a domain-specific agent team, generating subagent definitions, companion skills and orchestration, validates them and keeps evolving them from feedback. Supports workflow orchestration, persistent agent teams and subagent delegation. - [Trail of Bits Skills](https://hebbmind.com/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [OpenAI Developers](https://hebbmind.com/plugin/openai-developers.md): [Plugin] Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only. - [Outlook Email](https://hebbmind.com/plugin/outlook-email.md): [Plugin] OpenAI's official Codex plugin for Outlook mail: triages your inbox, summarizes threads, extracts action items, and drafts replies or forwards, for people who handle heavy email loads. Requires Codex with a ChatGPT sign-in and an authorized Microsoft account. - [SharePoint](https://hebbmind.com/plugin/sharepoint.md): [Plugin] OpenAI's official Codex plugin for SharePoint: summarizes organization sites, pages and files, finds document owners and status, and plans updates to documents, spreadsheets or decks. Requires Codex with a ChatGPT sign-in and a work Microsoft 365 account. - [Codex Security](https://hebbmind.com/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. - [Claude Scholar](https://hebbmind.com/plugin/claude-scholar.md): [Plugin] Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist. - [NVIDIA Agent Skills](https://hebbmind.com/plugin/nvidia-skills.md): [Plugin] NVIDIA's official plugin that finds and installs the right skills from NVIDIA's catalog for your task, spanning CUDA acceleration, NIM inference, NeMo training, RAG blueprints, Omniverse simulation and robotics. Listed in both the Claude and Codex official marketplaces. - [Agent Toolkit for AWS](https://hebbmind.com/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials. - [General Legal Assistant](https://hebbmind.com/plugin/general-legal-assistant.md): [Plugin] Contract review plugin: five parallel subagents score contracts and flag risky clauses, compare versions, spot missing terms, explain legalese and draft counterproposals, NDAs, terms of service and privacy policies with GDPR/CCPA gap checks. No account needed; US-law focused; needs lawyer review. - [Headcount Legal & Risk](https://hebbmind.com/plugin/legal-risk.md): [Plugin] The legal and risk department of headcount's company-style agent org: 8 skills for contracts and negotiation, governance, disputes and evidence, IP, privacy, compliance and a risk register; can vet other departments' work. Skills only, no account; laws vary by region, so have a lawyer review. - [CC Safety Net](https://hebbmind.com/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+. Next page: https://hebbmind.com/tools.md?page=2&type=plugin&profession=algorithm%2Csecurity%2Clegal