Tools

Vercel's React Native and Expo best practices ranked by impact, covering list scrolling performance, Reanimated animations, navigation, UI patterns, state management and monorepo setup. Maintained by Vercel.

Runs the cognee memory engine as an MCP server whose remember, recall and forget tools write documents and conversations into a knowledge graph and vector store for cross-session retrieval. Start it with Docker or uv first; needs an LLM API key by default, or connect to Cognee Cloud.

Fast vulnerability scanner driven by YAML templates: uses a community template library to detect known vulnerabilities over HTTP, DNS, TCP, SSL and more, supports custom templates and plugs into CI/CD. Use only on targets you're authorized to test.

Writes conversations and business data into Graphiti's temporal knowledge graph so agents can retrieve long-term memory by entity, fact and time. Open source from Zep; start FalkorDB or Neo4j and the server with Docker first, and configure an LLM API key.

Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI.

Processes large tool outputs in a sandbox and returns only the results to context; logs session events in SQLite with FTS5 so work continues after context compaction. Supports Claude Code, Codex and a dozen other clients. ELv2 licensed.

Anthropic's official data skill that guides agents to write, translate and optimize SQL across Snowflake, BigQuery, Databricks, PostgreSQL and other warehouse dialects, including CTEs, window functions and analytical aggregations.

Generates people analytics reports from employee data: headcount snapshots, voluntary and involuntary attrition, diversity metrics, spans of control and flight risk, with findings and recommendations for leadership. Needs an uploaded employee CSV or a connected HRIS. Official from Anthropic.

Data analysis plugin: writes queries in each SQL dialect, explores datasets, runs statistical tests, charts with Python and builds interactive HTML dashboards, then reviews methods and conclusions before sharing. Connects to Snowflake, BigQuery and other warehouses. Official from Anthropic.

Turns campaign or channel data into weekly, monthly or quarterly marketing reports: executive summary, key metrics and period-over-period trends, wins and misses, and next-period priorities. Connect analytics tools or just paste tables or key numbers. From Anthropic's knowledge-work-plugins.

Everyday software engineering plugin: standup summaries, code review, structured debugging, architecture decision records, incident response and pre-deploy checks. Official from Anthropic, built mainly for Cowork but also usable in Claude Code.

For preclinical life sciences research: bundles MCP connectors for PubMed, bioRxiv, ChEMBL, Open Targets, ClinicalTrials and more, plus analysis skills for single-cell RNA QC, scvi-tools and nf-core pipelines. Official from Anthropic; some data sources need accounts.

Gives coding agents IDE-like symbol-level code search, editing and refactoring via language servers (LSP) across 40+ languages, with cross-session memory. An optional paid JetBrains plugin backend adds breakpoint debugging. Install with uv first.

Open-source infrastructure-as-code tool and community fork of Terraform: describe cloud resources declaratively, run plan to generate an execution plan, then apply changes, creating resources in parallel by dependency graph. Community-governed, MPL-2.0.

Turns websites and Electron desktop apps into deterministic CLIs, with built-in adapters for Reddit, Hacker News, Bilibili, Zhihu, Xiaohongshu and more, and lets agents operate any page through your signed-in Chrome. Needs its companion browser extension.

Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need.

Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi.

Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control.

Community-maintained modern replacement for ls (successor to exa) with colored output, tree view, Git status and file icons, plus .gitignore filtering for quickly scanning directory structures.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.