# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for Frontend or Security, Tagged `python`: 15 items. > - Frontend: Web and mobile-web interfaces: building, debugging and performance tuning. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [mcp-server-git](https://hebbmind.com/mcp/git.md): [MCP] Official MCP reference server for local Git repos: view status and diffs, stage and commit, create and switch branches, and search the commit log by date. Written in Python and runs with uvx; still in early development. - [Aider](https://hebbmind.com/cli/aider.md): [CLI] AI pair programming in your terminal: builds a repo map of the whole codebase, auto-commits changes to git, works with Claude, DeepSeek, OpenAI and almost any other model including local ones, and can run lint and tests after edits. - [IDA Pro MCP](https://hebbmind.com/mcp/ida-pro-mcp.md): [MCP] Lets agents decompile, disassemble and query cross-references in IDA Pro, and rename variables, change types and add comments, including headless idalib mode. Requires IDA Pro 8.3+ (IDA Free is not supported); the author now recommends Hex-Rays' official IDA MCP instead. - [HexStrike AI](https://hebbmind.com/mcp/hexstrike-ai.md): [MCP] Wraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only. - [Claude Skills (Fullstack Dev Skills)](https://hebbmind.com/plugin/jeffallan-claude-skills.md): [Plugin] Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP). - [Presidio CLI](https://hebbmind.com/cli/presidio.md): [CLI] Scans files and directories for personal data such as names, emails and credit card numbers using Presidio Analyzer, with configurable entity types, confidence thresholds and ignore rules. Needs Python 3.10+ and a spaCy language model. - [Ghidra MCP Server](https://hebbmind.com/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first. - [fontTools](https://hebbmind.com/cli/fonttools.md): [CLI] Font toolkit: pyftsubset subsets fonts to the characters you use and outputs WOFF2 to shrink web fonts, and ttx converts fonts to editable XML for inspection and edits. Needs Python 3.11+ and the woff extra for WOFF2; check the license before subsetting commercial fonts. - [Mistral Vibe](https://hebbmind.com/cli/mistral-vibe.md): [CLI] Mistral's official open-source terminal coding assistant: uses Mistral models to read and write code, run commands and search the codebase, with multiple agent profiles and subagents, plus Skills, MCP and a --prompt scripting mode. Needs a Mistral API key. - [ScanCode Toolkit](https://hebbmind.com/cli/scancode-toolkit.md): [CLI] Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews. - [shot-scraper](https://hebbmind.com/cli/shot-scraper.md): [CLI] Simon Willison's website screenshot CLI: batch screenshots from YAML, record demo videos, export PDF and HTML, run JavaScript in pages to extract data, and dump accessibility trees. Built on Playwright; install a browser on first use. - [MCP Server for WinDbg](https://hebbmind.com/mcp/mcp-windbg.md): [MCP] Lets agents drive WinDbg's CDB/KD to analyze crash dumps, debug user-mode processes remotely and debug kernels, and triage many dumps in a batch. Windows only; requires WinDbg or Debugging Tools for Windows. - [Python SEO Analyzer](https://hebbmind.com/cli/python-seo-analyzer.md): [CLI] Crawls an entire site, counts words and keywords per page, and checks technical SEO such as titles, meta descriptions, image alt text, H1s and social tags. Outputs JSON by default or an HTML report for agents to act on. Needs Python; the optional AI content review needs an API key. - [Claude Code LSPs](https://hebbmind.com/plugin/claude-code-lsps.md): [Plugin] Third-party LSP plugin marketplace with 30+ language server plugins, including TypeScript, Python, Rust, Go, Java, C/C++, Vue, Svelte, Elixir and Haskell, covering more languages than the official set. Requires Claude Code 2.1.50+; install the language servers yourself. - [Weblate Client (wlc)](https://hebbmind.com/cli/wlc.md): [CLI] Official CLI for Weblate, the open-source translation platform: check translation progress for projects and components, upload and download translation files, lock components, and commit or push repository changes. Hosted or self-hosted; needs the server URL, an API key and Python.