# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Type Plugin, Resources for Data engineering or Data analysis or Security: 48 items. > - Data engineering: Data pipelines, warehouse modeling, ETL and data quality. > - Data analysis: Querying, statistical analysis, reporting and visualization. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [Claude Security](https://hebbmind.com/plugin/claude-security.md): [Plugin] Orchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin. - [ECC](https://hebbmind.com/plugin/ecc.md): [Plugin] A complete harness for coding agents: dozens of subagents, nearly 300 skills, hooks, rules, memory and continuous learning, plus the AgentShield security scanner. Built mainly for Claude Code, with Codex support. - [Security Guidance](https://hebbmind.com/plugin/security-guidance.md): [Plugin] Three layers of security checks on agent-written code: rule-based warnings on about 25 risky patterns during edits, a model review of the diff at turn end, and an agent tracing cross-file bugs like IDOR and SSRF at commit. Official Anthropic plugin; needs Python 3.8+ and model API access. - [Pyright LSP](https://hebbmind.com/plugin/pyright-lsp.md): [Plugin] Connects Claude Code to the Pyright language server for static type checking and code intelligence in Python. Install pyright first with npm, pip or pipx. Official Anthropic plugin. - [Machine Learning Ops](https://hebbmind.com/plugin/machine-learning-ops.md): [Plugin] MLOps plugin from the wshobson/agents marketplace: data scientist, ML engineer and MLOps engineer subagents and a /ml-pipeline command that runs the pipeline in phases from data analysis and training to deployment and monitoring, plus ML pipeline and recommender system skills. - [Business Analytics](https://hebbmind.com/plugin/business-analytics.md): [Plugin] Business analytics plugin from the wshobson/agents marketplace: KPI dashboard design and data storytelling skills plus a business analyst subagent to choose metrics, plan dashboard layouts and turn data into reports executives or investors understand. Methods and templates only; no data connections. - [Security Scanning](https://hebbmind.com/plugin/security-scanning.md): [Plugin] Security plugin from the wshobson/agents marketplace: commands for SAST, dependency vulnerability scanning and hardening, security auditor and threat modeling subagents, and threat analysis skills such as STRIDE and attack trees. - [Data Engineering](https://hebbmind.com/plugin/data-engineering.md): [Plugin] Data engineering plugin from the wshobson/agents marketplace: a data engineer subagent, a data pipeline command, and skills for Airflow DAGs, dbt transformations, Spark tuning and data quality, to help build ETL and data warehouses. - [Quantitative Trading](https://hebbmind.com/plugin/quantitative-trading.md): [Plugin] Quant trading plugin from the wshobson/agents marketplace: quant analyst and risk manager subagents plus backtesting and risk metrics skills for strategy backtests, portfolio optimization and risk measures like VaR, Sharpe ratio and max drawdown. Needs local Python; not investment advice. - [wshobson/agents](https://hebbmind.com/plugin/wshobson-agents.md): [Plugin] Multi-host plugin marketplace with 90+ single-purpose plugins, 200+ subagents and 180+ skills covering language-specific development, ops, security, data and multi-agent orchestration. Installing a plugin loads only that plugin's content. - [Data](https://hebbmind.com/plugin/data.md): [Plugin] Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic. - [Bio Research](https://hebbmind.com/plugin/bio-research.md): [Plugin] For preclinical life sciences research: bundles MCP connectors for PubMed, bioRxiv, ChEMBL, Open Targets, ClinicalTrials and more, plus analysis skills for single-cell RNA QC, scvi-tools and nf-core pipelines. Official from Anthropic; some data sources need accounts. - [Google Skills](https://hebbmind.com/plugin/google-skills.md): [Plugin] Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others. - [Hugging Face Skills](https://hebbmind.com/plugin/huggingface-skills.md): [Plugin] Lets agents work with the Hugging Face Hub through the hf CLI: search and download models and datasets, manage repos and Spaces, and run training and evaluation jobs on cloud GPUs, with more workflow skills installable as needed. Maintained by Hugging Face. - [Privacy Legal](https://hebbmind.com/plugin/privacy-legal.md): [Plugin] Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic. - [AI Governance Legal](https://hebbmind.com/plugin/ai-governance-legal.md): [Plugin] Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice. - [Trail of Bits Skills](https://hebbmind.com/plugin/trailofbits-skills.md): [Plugin] Plugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too. - [Build Web Data Visualization](https://hebbmind.com/plugin/build-web-data-visualization.md): [Plugin] OpenAI's official Codex plugin with 18 skills to choose, design, build, test and export web charts, maps, dashboards, Gantt charts and UML, using D3, Vega-Lite and Three.js with attention to accessibility and responsiveness. Codex only. - [Codex Security](https://hebbmind.com/plugin/codex-security.md): [Plugin] Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access. - [Life Sciences NGS Analysis](https://hebbmind.com/plugin/ngs-analysis.md): [Plugin] OpenAI's official Codex plugin that guides sequencing analysis from BCL/FASTQ: QC, RNA-seq differential expression, single-cell, variant calling and metagenomics, favoring nf-core and other public pipelines with reproducible run logs. Checks for local tools first. Research use only. - [Data Analytics](https://hebbmind.com/plugin/data-analytics.md): [Plugin] OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools. - [Life Science Research](https://hebbmind.com/plugin/life-science-research.md): [Plugin] OpenAI's official Codex plugin with about 50 skills that route questions to genetics, omics, pathway, protein structure, chemistry and clinical evidence sources, can split the work across parallel subagents, and synthesize sourced conclusions. - [NotFair Plugin](https://hebbmind.com/plugin/notfair-plugin.md): [Plugin] Open-source marketing plugin with 48 skills: SEO and AI search optimization (GEO), GA4 and Search Console analysis, ad diagnostics for Google, Meta, X, LinkedIn, Reddit and TikTok, and WordPress upkeep. Some SEO skills need only a URL; live data requires NotFair OAuth and linked accounts. - [Finance Skills](https://hebbmind.com/plugin/finance-skills.md): [Plugin] Plugin marketplace for investment research: six plugin groups covering yfinance market data, earnings previews and recaps, DCF valuation, option payoff charts, ETF premiums, read-only news from X, Discord and other social sources, and TradingView data. Research only, not investment advice. - [Agent Toolkit for AWS](https://hebbmind.com/plugin/agent-toolkit-for-aws.md): [Plugin] AWS's generally available agent toolkit and plugin marketplace: plugins such as aws-core, aws-agents and aws-data-analytics bundle the AWS MCP Server with evaluated skills for IaC, serverless, containers and billing. Calling AWS APIs requires configured credentials. - [CC Safety Net](https://hebbmind.com/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+. - [MATLAB Agentic Toolkit](https://hebbmind.com/plugin/matlab-agentic-toolkit.md): [Plugin] MathWorks' official toolkit: set up the MCP server via the MATLAB installer so agents can run code, run tests and do static checks; domain skill sets for signal processing, controls, statistics and machine learning install as Claude Code plugins. Needs MATLAB R2021a+. - [dbt Agent Skills](https://hebbmind.com/plugin/dbt-agent-skills.md): [Plugin] dbt Labs' official plugin marketplace with dbt and dbt-migration plugins: write models and unit tests, build semantic-layer metrics, govern with dbt Mesh, debug failed jobs, and handle version upgrades and cross-platform migrations. Most skills need an existing dbt project. - [Life Sciences](https://hebbmind.com/plugin/life-sciences.md): [Plugin] Anthropic's official life sciences plugin marketplace: install MCP plugins such as PubMed, BioRender, Synapse, ChEMBL and 10x Genomics, plus research skills for single-cell RNA QC, Nextflow pipelines and scvi-tools. Some data sources need an account or subscription. - [Astronomer Data Agents](https://hebbmind.com/plugin/astronomer-agents.md): [Plugin] Astronomer's official data engineering plugin: write Airflow DAGs to best practices, debug pipeline failures, trace data lineage, profile warehouse tables and migrate from Airflow 2 to 3, with a built-in Airflow MCP server and session hooks. - [Databricks Agent Skills](https://hebbmind.com/plugin/databricks-agent-skills.md): [Plugin] Official Databricks plugin with skills for the CLI and auth, Genie data queries, Apps, Lakebase, Lakeflow jobs and pipelines, Model Serving and DABs deployment, plus hooks for prompt routing, session context and auth failure hints. Needs a Databricks account. - [NetSuite AI Companion](https://hebbmind.com/plugin/netsuite-ai-companion.md): [Plugin] Official Oracle NetSuite plugin for the AI Connector: has AI use standard reports and saved searches first, applies debit/credit, multi-subsidiary consolidation and currency rules, and safety-checks SuiteQL to avoid reporting errors. Needs NetSuite with AI Connector; finance should verify. - [Firecrawl Plugin for Claude Code](https://hebbmind.com/plugin/firecrawl-claude-plugin.md): [Plugin] Firecrawl's official plugin: brings the Firecrawl CLI in as skills so Claude Code can search the web, scrape pages to Markdown, map site links or crawl whole sites. Install firecrawl-cli and set an API key first; self-hosting supported. - [MongoDB](https://hebbmind.com/plugin/mongodb.md): [Plugin] MongoDB's official plugin: runs the MongoDB MCP locally via npx and adds skills for query generation, index tuning, schema design, and full-text and vector search. Connects to self-hosted or Atlas databases with a connection string. - [SonarQube](https://hebbmind.com/plugin/sonarqube-agent-plugins.md): [Plugin] Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker. - [Google Ads API Developer Assistant](https://hebbmind.com/plugin/google-ads-api-developer-assistant.md): [Plugin] Official Google Ads API assistant: ask in plain language, generate and validate GAQL queries, run them to export account data to CSV, and debug offline conversion uploads. Account-changing code is generated, not run. Needs a developer token, credentials file and Python 3.10+. - [PostHog](https://hebbmind.com/plugin/ai-plugin.md): [Plugin] PostHog's official plugin with a built-in MCP and 30+ skills: query product analytics, feature flags, A/B experiments, dashboards and error tracking from chat, and optionally send Claude Code sessions to LLM Analytics. Needs OAuth sign-in with a PostHog account. - [Auth0](https://hebbmind.com/plugin/auth0.md): [Plugin] Helps agents add Auth0 authentication to apps: detects 35+ frameworks and covers login, MFA, SSO, RBAC, JWT validation, migration from other auth providers, and tenant security audits. Maintained by Auth0; needs an Auth0 account (free sign-up). - [EODHD Claude Skills](https://hebbmind.com/plugin/eodhd-claude-skills.md): [Plugin] EODHD's official plugin (remote MCP, 7 workflow skills, an analyst subagent): quotes, fundamentals and macro data from 70+ exchanges worldwide, company briefs, stock screening and portfolio risk analysis. Needs an EODHD account; free tier: 20 calls/day, basic US data only. Not investment advice. - [Supabase Agent Plugin](https://hebbmind.com/plugin/supabase-plugin.md): [Plugin] Supabase's official plugin: Supabase and Postgres best-practice skills plus the Supabase remote MCP to manage projects, run SQL, design schemas and RLS policies, and handle auth and storage. Needs a Supabase account. - [Amplitude](https://hebbmind.com/plugin/amplitude.md): [Plugin] Amplitude's official plugin with a remote MCP and nearly 30 analysis skills: build charts and dashboards in plain language, interpret A/B experiments, summarize user feedback, and generate daily or weekly data briefs. Needs an Amplitude account with data (free plan exists); browser sign-in. - [Snowflake Cortex Code](https://hebbmind.com/plugin/cortex-code.md): [Plugin] Snowflake's official plugin: detects Snowflake-related requests and hands them to the Cortex Code CLI, whose 55+ built-in skills handle SQL, dynamic tables, data governance and more. Needs the cortex CLI installed and a Snowflake connection configured. - [Amazon Selling Partner](https://hebbmind.com/plugin/selling-partner-agentic-toolkit.md): [Plugin] Amazon's official seller plugin (beta): connect Seller Central to check sales, traffic and inventory, get stockout alerts and restock suggestions, plan FBA inbound shipments and diagnose suppressed or unsearchable listings. Changes are drafted and need your approval. Needs a seller account. - [Pigment AI Plugins](https://hebbmind.com/plugin/ai-plugins.md): [Plugin] Pigment's official plugin: bundles the Pigment MCP and 30+ modeling skills to query business data and compare budget vs. actuals in plain language; with advanced mode on, build budget and forecast models, metrics and boards. Needs an enterprise Pigment workspace with MCP on; have finance review. - [Semgrep Guardian](https://hebbmind.com/plugin/semgrep-plugin.md): [Plugin] Semgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login. - [Vanta](https://hebbmind.com/plugin/vanta-mcp-plugin.md): [Plugin] Vanta's official plugin: from Claude Code, review control gaps for SOC 2, ISO 27001 and other frameworks, failing tests, vendor risk and policies, and generate fixes for code-level issues. Needs admin access to a paid Vanta account (browser auth); have compliance conclusions reviewed by an expert. - [Windsor.ai](https://hebbmind.com/plugin/claude-windsor-ai-plugin.md): [Plugin] Windsor.ai's official plugin: connects ad accounts on Google, Meta, TikTok and more plus 350+ data sources such as GA4 and CRMs for quick cross-channel performance reports and wasted-spend detection; asks before changing budgets or pausing ads. Needs a Windsor.ai account with data sources connected. - [Pendo Analytics](https://hebbmind.com/plugin/pendo-analytics.md): [Plugin] Pendo's official product analytics plugin: summarize account activity and feedback before customer meetings, analyze feature adoption, group user feedback into themes and find session replays. Needs a Pendo subscription; authorize via /mcp after install.