Tools

Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.

14 n8n workflow skills: expression syntax, MCP tool usage, node configuration, validation and troubleshooting, Code nodes, AI Agent workflows and self-hosted n8n deployment. Meant to be used with the n8n-mcp server.

Lets agents build, run, test and debug iOS and macOS projects and control simulators and physical devices, with a CLI mode too. Formerly XcodeBuildMCP, now maintained by Sentry; macOS only, requires Xcode 16 or later.

Veteran suite of CSV command-line tools: in2csv converts Excel and JSON to CSV, csvcut, csvgrep and csvsort filter and sort, csvstat computes statistics, and csvsql runs SQL directly against CSV files.

Generates template-driven charts as single-file HTML: picks a chart from real Lupi, Basics, Glance, Maps and Interactive gallery implementations based on data shape, or fills one of 12 Chinese and English report templates. Defaults to Mono grayscale with semantic color presets. Written in Chinese.

SwiftUI skill by Paul Hudson of Hacking with Swift: reviews and improves SwiftUI code, covering modern vs deprecated APIs, performance, navigation and layout, state management and VoiceOver accessibility, targeting iOS 26 and Swift 6.2.

Google's official skills for building ADK agents: dev workflow, scaffolding, the ADK Python API, evaluation with LLM judges and adaptive rubrics, deployment to Agent Runtime, Cloud Run or GKE, publishing and observability. Works with agents-cli; local dev needs only an AI Studio key.

Posit's open-source scientific and technical publishing system built on Pandoc: embed Python, R or Julia code in Markdown or Jupyter notebooks, then quarto render produces HTML, PDF, Word, slides, websites and books.

Docker's official CLI for building images, running and managing containers, viewing logs and pushing to registries, a foundational tool for agents setting up isolated environments. Needs a local or remote Docker Engine such as Docker Desktop.

Reference for pnpm 12: CLI, pnpm-workspace.yaml settings, monorepo workspaces, catalogs, overrides, patches, supply-chain settings such as build approval, task orchestration, CI setup and migration from npm, Yarn or older pnpm. Generated by Anthony Fu from the official docs.

Semi-automated research workflow for computer science and AI researchers: ideation, Zotero literature management, experiment analysis and reports, paper writing and polishing, and rebuttals, with optional Obsidian knowledge base. 40+ skills; also installable as a Claude Code plugin.

Semi-automated research assistant for CS and AI researchers that links ideation, Zotero literature management, experiment analysis and reporting, paper writing and reviewer responses, and keeps project knowledge in Obsidian. Branches for Codex and other agents exist.

The .NET team's official skill collection, grouped into plugins: ASP.NET Core, Blazor, MAUI, EF Core data access, MSBuild troubleshooting, performance diagnostics, testing, and framework upgrades and migrations. Maintained by Microsoft; install via the Claude Code or Codex plugin marketplace.

draw.io's official MCP: opens XML, CSV or Mermaid diagrams generated by the agent directly in the draw.io editor, good for flowcharts and architecture diagrams. A no-install remote version can also render diagrams inline in the chat.

Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview.

From the FinanceToolkit author: computes ratios, valuation, risk and macro indicators with 500+ transparent formulas, for company comparisons and first-pass due diligence. Hosted, no install; enter a Financial Modeling Prep key on first connect (free tier: US stocks, 5 years). Verify results.

GitHub's official gh extension for writing Actions workflows in Markdown that AI agents execute, compiled into standard Actions. Choose engines like Copilot, Claude Code or Codex; runs in a read-only sandbox by default. Requires gh.

Turns a repeatable agent task into a repo-local skill plus a GitHub Actions workflow that runs a coding agent (Claude Code, Codex, OpenCode or CodeLayer) on a schedule, with a prompt, memory file and one-open-PR bound. Reads the repo first, then walks you through cadence, scope and validation.

Interviews you to design an agentic control loop for your codebase in control-theory terms: a set point, a sensor built from existing tooling, a controller that picks small low-risk changes, and a coding agent that opens PRs. Builds each part to run locally before wiring a scheduled CI workflow.

Lingo.dev's official CLI: lingo push sends JSON, YAML, Markdown, PO, XLIFF, Android/Xcode strings and other files from your repo to its LLM localization engine, and lingo pull brings translations back; CI-ready. Needs a Lingo.dev account; usage-based pricing with a free sandbox.

macOS screenshot and UI automation CLI: capture the screen, read the accessibility tree for structured UI elements, then click, type, and switch windows and menus. Also runs as an MCP server for Claude Code and Codex. Needs macOS 15+ with Screen Recording and Accessibility permissions.

macOS screen capture, accessibility-tree inspection and native UI automation, served over MCP so agents can see the screen and click, type and operate menus. Requires macOS 15+ with Screen Recording and Accessibility permissions granted.

LM Studio's official CLI: list, load and unload local models, start and stop the local API server, and check status and logs; ls, ps and other commands support --json output for scripts and agents. Requires the LM Studio desktop app.

Detects shot changes in video and splits long footage into scenes, exporting cut lists and per-scene thumbnails, useful for shot analysis, organizing footage and finding edit points. Runs locally; needs Python 3.10+, plus FFmpeg or mkvmerge for splitting.