Tools

Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.

Fly.io's official CLI (fly): sign in, create and deploy apps, and list apps and check their status, reading fly.toml in the current directory to identify the app. Needs a Fly.io account.

Manages stacked branches and dependent pull requests with the gh stack GitHub CLI extension: splits work into layered branches with one PR each, then handles push, submit, sync, rebase and merge, using flags that keep commands non-interactive for agents. Official GitHub skill.

MathWorks' official server that lets agents start your local MATLAB, write and run scripts and unit tests, and check code style and potential errors, for computing, simulation and data analysis. Needs a licensed MATLAB R2021a+ and the downloaded server binary.

Econometrician Pedro Sant'Anna's academic Claude Code setup (fork the repo to use it): Beamer/Quarto lecture slides, paper review and mock refereeing, R/Python analysis and replication packages, with specialist subagents and quality gates. Needs Git and Python; slides need XeLaTeX and Quarto.

One plugin bundling skills and subagents for deep research, fixing GitHub issues and reviewing PRs, Codex handoff, Gemini or GPT image generation, translation and YouTube transcript extraction, plus settings.json templates for various providers (manual setup). Some skills need API keys.

Docker's official MCP gateway (the docker mcp CLI plugin): runs servers from the Docker MCP Catalog in isolated containers, manages secrets, OAuth and tool toggles centrally, and gives multiple clients one endpoint. Built into Docker Desktop 4.59+; Docker CE and other setups must build the plugin.

Microsoft's official Azure skill set: deployment prep and validation, deployment, production diagnostics, AKS, quota lookup, compliance audits, cloud migration and Foundry; the plugin version also connects the Azure MCP Server. Needs an Azure account and az login.

Microsoft's official Azure plugin: bundles 20+ skills such as azure-prepare, azure-deploy, azure-diagnostics and azure-cost, and connects the Azure MCP and Foundry MCP to query resources, estimate costs, deploy and troubleshoot. Needs an Azure subscription and az login.

Uses the Qdrant vector database as a semantic memory layer for agents: store information and retrieve it by meaning, connecting to a remote instance or a local path, with FastEmbed generating embeddings by default. Maintained by Qdrant.

Web search through DuckDuckGo plus fetching and parsing page content, with built-in rate limiting and LLM-friendly result formatting. No API key needed; runs with a single uvx command.

Uses unified rule files in a .rulesync directory as the source to generate rules, MCP, commands, subagents, skills and hooks configs for dozens of AI coding tools including Claude Code, Cursor, Copilot and Codex. Can also import existing configs or convert directly between tools.

Brings the Brave Search API to agents: web, news, image, video and local business and place search, plus LLM-ready page context and AI summaries. Maintained by Brave; needs an API key.

Connects LLMs to ROS and ROS 2 robots: publish and subscribe to topics, call services and actions, set parameters, and read sensor and robot state, without changing robot code. The robot side needs rosbridge running.

Sets up and audits i18n for React, Next.js and Vue apps: replaces hard-coded strings with message keys, checks that English and Chinese keys are complete and consistent, and verifies plurals and date and number formats, with a key audit script. Needs a local codebase and Python.

A plugin marketplace with dozens of plugins: an enhanced skill-creator, scrapers for Bilibili, Douban and Feishu docs, China A-share news and US stock fundamentals, WeCom notifications, deep research and fact-checking, with docs in English and Chinese.

Adds voice conversations to Claude Code and other agents: speak, and it detects silence, transcribes, and reads replies aloud. Runs offline with local Whisper and Kokoro, or uses OpenAI's speech APIs; needs a microphone and speakers.

Gives agents controlled access to MySQL: list databases and tables, inspect schemas and sample data, and run SQL, with multi-database mode, SSL and SSH tunnels. Configure your own database user, ideally with least privilege.

Opens HTML, Markdown or localhost pages in the browser via npx human-review so you can edit text directly and leave anchored comments, then sends every edit and comment back to the agent in one batch to apply to the source.

Web search and page reading for agents through a self-hosted or trusted SearXNG metasearch instance, with no paid search API key. Requires a SearXNG instance with JSON output enabled.

Connects agents to live Jupyter notebooks: read, write, insert and execute cells and read multimodal outputs like charts, for interactive data analysis. Bring your own JupyterLab or JupyterHub; open source, maintained by Datalayer.

Pulls new papers from Hugging Face Daily Papers and arXiv, scores them by research area into a recommendation page, and writes deep-read Obsidian notes for key ones; can also batch-read Zotero collections. Needs Python 3, Obsidian and poppler; copy the whole skills folder per the README.

Plugin marketplace from obra, author of Superpowers: includes the superpowers engineering workflow, episodic-memory for searching past sessions, superpowers-chrome for browser control, elements-of-style writing guidance and more.

LangChain's official skill collection: framework selection, quickstarts, middleware, persistence, human-in-the-loop approval, RAG and eval design across LangChain, LangGraph and Deep Agents, in Python and TypeScript. Also installable as a Claude Code plugin. Still in early development.