Tools

Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Generates single-file HTML slide decks with horizontal paging and two built-in visual systems (editorial magazine and Swiss International style), plus presenter mode with speaker notes. Can also make slide illustrations and covers for various platforms. By Guizang.

Turns an article or Markdown into a set of slide images: drafts an outline and style first, then generates each page, and can merge them into PPTX or PDF. Comes with over ten visual presets. Needs a working image generation backend.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

Open-source e-book manager whose command-line tools (ebook-convert, ebook-meta, calibredb) batch-convert between EPUB, MOBI, AZW3, PDF, DOCX and more and manage library metadata. The install command is Linux-only; on macOS and Windows use the installer.

160+ specialized Claude Code subagents, packaged as plugins in 10 categories such as core development, languages, infrastructure, testing and security, and data and AI, so you install only what you need.

Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi.

Declarative diagram scripting language: describe architecture diagrams, flowcharts and sequence diagrams in concise text with automatic layout, then render with the d2 command to SVG, PNG, PDF or PPTX. Lets agents produce diagrams you can version-control.

Open-source Zapier alternative with a built-in MCP server: agents can build and test automations in plain language, manage tables, or call hundreds of apps like email, spreadsheets and chat. Use the cloud or self-host, enable the MCP server in settings and connect via OAuth.

Fast speech transcription built on faster-whisper, with word-level timestamps and speaker diarization, suited to meeting notes and subtitles. Diarization needs a Hugging Face token; GPU acceleration needs CUDA.

Community-maintained modern replacement for ls (successor to exa) with colored output, tree view, Git status and file icons, plus .gitignore filtering for quickly scanning directory structures.

Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project.

Skyvern's official MCP: drives a browser with vision LLMs to complete multi-step tasks like filling forms, downloading files and web research. Connect to Skyvern Cloud (OAuth or API key), or self-host Skyvern and run it as a local process.

From Firecrawl: converts Word, PowerPoint, Excel, PDF, EPUB, RTF and more into clean Markdown locally in milliseconds, keeping headings, tables, footnotes and formulas so agents can read attachments. Needs Node.js; optional Firecrawl cloud OCR for scans uploads the whole file.

Offline speech transcription and translation based on Whisper; audio never leaves your machine. buzz add exports lectures, interviews and meeting recordings to TXT, SRT or VTT. pip install needs Python 3.12 and FFmpeg; a desktop app is also available. Check transcripts manually.

Continuously records your screen and audio locally, extracting on-screen text and transcribing speech, so agents can search pages, docs and meetings you saw and summarize your day. Data stays local. Needs screenpipe running: source is free for personal use, desktop app is a subscription.

Google's official skill library and plugin marketplace: nearly 150 skills focused on Google Cloud (GKE, BigQuery, Cloud Run, IAM and more), plus 17 product plugins pairing skills with MCP for Cloud SQL, Spanner, AlloyDB, BigQuery, GCS and others.

Google's official GKE basics skill: creating clusters, choosing Autopilot or Standard, getting kubectl credentials, configuring Workload Identity and deploying workloads, plus a list of common gotchas. Needs gcloud and a GCP project.

Google's official skill that queries account data through the Google Ads MCP server to diagnose conversion drops, falling leads and impression share lost to bids, budgets or ad rank. Needs a Google Ads account, API credentials (developer token and OAuth) and Python 3.12.

Google's official skill library, focused on Google Cloud: 100+ skills for gcloud, Cloud Run, GKE, BigQuery, IAM, monitoring and logging, and the Well-Architected Framework, plus Ads and Analytics.

Manages BigQuery datasets, tables and jobs with the bq and gcloud CLIs, runs SQL queries and loads data, with references for client libraries, MCP and Terraform. Google's official skill; requires a Google Cloud project.

Industrial-grade open-source speech recognition toolkit from Alibaba's ModelScope, with an agent-friendly funasr command that turns audio into text, JSON or SRT subtitles in one step, with speaker diarization and timestamps. Strong on Chinese. Requires PyTorch.

Official MCP from the FunASR project: transcribes audio files locally with the SenseVoice model, supporting Mandarin, Cantonese, English, Japanese and Korean, with optional segment timestamps. Local inference needs no API key and audio stays on your machine. Docker image available.