Tools

Turns 18 kinds of sources, including doc sites, GitHub repos, PDFs and videos, into skill packages for Claude and other platforms, or exports RAG chunks and vector store data. Optional MCP server, and it can call a local agent like Claude Code to enrich content. Needs Python 3.10+.

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Audits a whole React codebase read-only: runs a React Doctor scan as evidence, vets findings across bugs, performance, accessibility, security and maintainability, ranks them by leverage, then writes self-contained plans other agents can execute. Never edits source.

Runs React Doctor via npx to scan React code for security, performance, correctness, accessibility and architecture issues with a 0-100 health score; checks changed code for regressions, and on /doctor fetches the official triage playbook to fix issues.

Writes precise prompts for a specific AI tool: identifies the target tool, extracts your intent, asks at most three questions if details are missing, then outputs a lean, paste-ready prompt. Covers dozens of tools including ChatGPT, Claude Code, Cursor, Midjourney and Sora.

Companion skill for the official Playwright CLI: short commands to open pages, click and fill forms, take snapshots and screenshots, and write and debug Playwright tests, using less context than the MCP approach. Maintained by Microsoft; needs Node.js.

Microsoft Playwright's official browser CLI for coding agents: open pages, click and type, take screenshots and manage sessions, and install the companion skills in one step. Uses fewer tokens than Playwright MCP. Needs Node.js 18+.

Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test.

Nearly 100 skills spanning the AI research workflow: ideation and literature review, fine-tuning and post-training, distributed training, inference serving, evaluation, interpretability and paper writing, tied together by an autoresearch orchestration skill.

Plugin marketplace for AI research with nearly 100 skills in 23 categories, from ideation, fine-tuning and post-training to distributed training, inference serving, evaluation and paper writing, coordinated end to end by the autoresearch skill.

MiniMax's official skill plugin with dev guides for frontend, full-stack, Android, iOS, Flutter, React Native and GLSL shaders, plus PDF, PowerPoint, Excel and Word document skills and image, video and music generation. Media skills need a MiniMax API key. Still in beta.

MiniMax's official skill collection covering frontend, full-stack, Android, iOS, Flutter, React Native and GLSL shader development, plus PDF, Word, Excel and PowerPoint document generation. Some media skills need a MiniMax API key. Still in beta.

Customizes the Claude Code status line to show model, Git branch, token and context usage, session and weekly limits at the bottom of the terminal. Configured through an interactive TUI with Powerline styling. Claude Code only.

Runs an extremely strict maintainability review of the current branch: hunts for restructurings that make the change dramatically simpler and flags files pushed past 1,000 lines, ad-hoc conditionals, thin wrappers and needless casts. From Cursor's official plugins; invoke manually.

Lets agents decompile, disassemble and query cross-references in IDA Pro, and rename variables, change types and add comments, including headless idalib mode. Requires IDA Pro 8.3+ (IDA Free is not supported); the author now recommends Hex-Rays' official IDA MCP instead.

Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.

Wraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only.

curl for gRPC: call any gRPC method with JSON, including bidirectional streaming, browse service definitions via server reflection, proto source files or protosets, with TLS and mutual TLS support.

Simon Willison's LLM CLI and Python library: call OpenAI, Claude, Gemini and local models from the terminal, with conversations logged to SQLite automatically, plus embeddings, structured extraction, tool calling and a plugin system.

From Zilliz: indexes your codebase as vectors in Milvus or Zilliz Cloud so coding agents find relevant code by semantic search, cutting context costs in large repos. Needs an embedding model (OpenAI, VoyageAI, Ollama and others) and a vector database.

Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available.

A du replacement written in Rust that shows disk usage as a directory tree with proportion bars, making large files and folders easy to spot. Filter by depth, count or regex, and output JSON with -j for agents to parse.

Lets agents call thousands of ready-made scrapers and automation Actors from Apify Store to pull data from social media, search engines, maps, e-commerce sites and more. Maintained by Apify; needs an Apify account (OAuth) or API token.

ByteDance's open-source, general software engineering agent: trae-cli edits files and runs commands from natural language, supports multiple model providers and MCP, and records full execution trajectories. Transparent design suits agent research and customization. Needs your own model API key.