Tools

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need.

Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi.

Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control.

Community-maintained modern replacement for ls (successor to exa) with colored output, tree view, Git status and file icons, plus .gitignore filtering for quickly scanning directory structures.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.

Google's official GKE basics skill: creating clusters, choosing Autopilot or Standard, getting kubectl credentials, configuring Workload Identity and deploying workloads, plus a list of common gotchas. Needs gcloud and a GCP project.

Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.

Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project.

Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch.

AI2's tool for converting PDFs and scans to Markdown with a vision LLM, handling equations, tables, handwriting and multi-column layouts, suited to bulk digitizing papers and archives. Local runs need an NVIDIA GPU with 12GB+ VRAM; otherwise use a paid OpenAI-compatible remote endpoint.

Style and convention linter for Swift, with most rules built on SwiftSyntax. Configure it with .swiftlint.yml, auto-correct with --fix, and run it in an Xcode build phase or as a SwiftPM plugin.

Browser control from the browser-use team: an editable CDP connection lets agents drive the Chrome you are already using, writing missing helper functions as they go and keeping them for reuse. Also offers an MCP server. Allow remote debugging in Chrome on first use.

Sealos's Kubernetes lifecycle CLI: one sealos run deploys a highly available cluster across multiple servers, and cluster images install databases, middleware and other apps, with offline delivery support. Linux only.

Context and harness engineering skills covering context compression and optimization, multi-agent architectures, memory systems, tool design and LLM-as-judge evaluation, activated automatically by task. Aimed at building production-grade agent systems.

Context and harness engineering skills: context fundamentals, degradation diagnosis and compression, multi-agent architectures, memory systems, tool design, LLM-as-judge evaluation and self-improvement loops. Focused on principles and design patterns, not tied to any agent platform.

Lets Claude Code push ML research forward unattended: literature review, topic selection, experiment deployment, cross-model review loops and paper writing through rebuttal, in 80+ skills. Codex acts as the independent reviewer by default; other model pairings work too.

Alibaba's open-source offline data sync tool: JSON job configs batch-sync between heterogeneous sources like MySQL, Oracle, PostgreSQL, Hive, HDFS and MaxCompute, run with python datax.py. Needs JDK 1.8+ and Python; download and unpack the official toolkit.

AWS's official unified CLI for managing EC2, S3, IAM and every other AWS service with one set of commands, with --query (JMESPath) filtering and JSON output that agents can use to inspect and change cloud resources. Run aws configure to set credentials first.

Vercel's official CLI: deploy frontend and full-stack projects with one command and manage preview environments, environment variables, domains and logs. Requires a Vercel account (free tier available).

Programmable software delivery engine: write build, test and release pipelines with SDKs in Go, Python, TypeScript and five other languages, all running in containers so local and CI behave the same, with built-in OpenTelemetry tracing. Needs a container runtime such as Docker.