Security First
Skills with the best security audit scores
Showing 8,821–8,880 of 13,206 skills · Page 148 of 221
korotovsky / slack-mcp-server
1.9kThe most powerful MCP Slack Server with no permission requirements, Apps support, GovSlack, DMs, Group DMs and smart history fetch logic.
f / mcptools
1.6kA command-line interface for interacting with MCP (Model Context Protocol) servers using both stdio and HTTP transport.
BlackSnufkin / LitterBox
1.6kA self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.
zigansh1n / imnotarobot
50I am not a robot — a captcha solver for macOS: local model, Gemini vision, a stealth browser for checkbox captchas, RuCaptcha as the last resort. 2Captcha-compatible API and an MCP server.
zhixuli0406 / DuDuClaw
50Turn AI coding CLIs (Claude Code, Codex, Antigravity) into AI employees on LINE, Telegram, Discord, Slack and 7 more chat apps. A judge reviews each result, every cost is logged, memory stays on your machine. Also runs as a standalone MCP memory server. Self-hosted, Apache 2.0.
enessari / metabase-ai-assistant
48The most powerful MCP Server for Metabase - 111+ tools for AI SQL generation, dashboard automation & enterprise BI. Works with Claude, Cursor, ChatGPT.
angrysky56 / mcp-logic
47Fully functional AI Logic Calculator utilizing Prover9/Mace4 via Python based Model Context Protocol (MCP-Server)- tool for Windows, Linux, Claude App etc
EodHistoricalData / eodhd-claude-skills
47Claude Code plugin for EODHD financial data — 150k+ tickers, 70+ exchanges, OAuth MCP server with 80 tools, 7 workflow skills, financial-analyst agent, 5 slash commands. MIT.
BeppeTemp / cartographer
46A shared, git-backed wiki your team's AI agents maintain but can't break — Claude Code, Codex, OpenCode and any MCP client.
synaptiai / prompt-decorators
44A standardized framework for enhancing how LLMs process and respond to prompts through composable decorators, featuring an official open standard specification and Python reference implementation. Claude Code plugin and MCP server integration.
justadityaraj / shim-mcp
44WordPress MCP server plugin, live on WordPress.org. Connect Claude Code, Cursor, or any MCP client to WordPress over stdio (WP-CLI) or HTTP. 56 abilities, self-contained, no cloud.
nietus / anki-mcp
44MCP server for Anki: get quizzed, track retention, find leeches and manage your flashcards from Claude and other MCP clients (via AnkiConnect)
arjun988 / blender-skills
67194 specialist Blender skills for Cursor, Claude Code, Kiro & Codex -> MCP-powered production pipeline from blockout to engine export.
Microck / All Traditions Speaking as One
399Deploy universal wisdom voices from all traditions simultaneously - Hindu, Buddhist, Taoist, Abrahamic, Indigenous, Scientific - revealing their unified recognition of consciousness navigation.
Microck / backend-ai-guide
399Expert guide for Backend.AI distributed computing platform. Automatically activates when users ask about: - Backend.AI architecture, components (Manager, Agent, Storage Proxy, Webserver, App Proxy) - Features (session scheduling, Sokovan orchestrator, multi-tenancy, resource allocation) - APIs (REST…
Microck / blockchain-developer
399Expert blockchain developer specializing in smart contract development, DApp architecture, and DeFi protocols. Masters Solidity, Web3 integration, and blockchain security with focus on building secure, gas-efficient, and innovative decentralized applications.
Microck / claude-win11-speckit-update-skill
399This skill provides safe update capabilities for GitHub SpecKit installations, preserving customizations while applying template updates.
Microck / create-plans
399Create hierarchical project plans optimized for solo agentic development
addyosmani / security-and-hardening
108.2kHardens code against vulnerabilities
sickn33 / 2slides-ppt-generator
47.9kAI-powered presentation generation via the 2slides API — create slides from text, match a reference image style, summarize documents into decks, add AI voice narration, and export pages/audio. Use for any \"make slides\", \"create a deck\", or \"slides from this document\" request.
sickn33 / accesslint-scan
47.9kAudit a live page for accessibility issues, locate each WCAG violation precisely, and return a selector-grounded fix worklist without editing.
sickn33 / anti-reversing-techniques
47.9kAnalyze anti-debugging, obfuscation, and anti-tamper techniques during authorized binary analysis and reverse engineering.
anthropics / claude-security
43.1kClaude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose)
anthropics / cardputer-buddy
43.1kIterate on the Cardputer-Adv MicroPython app bundle (Claude Buddy, Snake, Hello) after the device is already provisioned via m5-onboard
mukul975 / analyzing-active-directory-acl-abuse
34.7kDetect dangerous ACL misconfigurations in Active Directory using ldap3
mukul975 / analyzing-cobaltstrike-malleable-c2-profiles
34.7kParse and analyze Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike (profiles and beacon-payload configs) and pyMalleableC2 (AST parsing) to extract HTTP/DNS transforms, URIs, headers, sleep/jitter, and injection behavior, then generate network detection signatures
mukul975 / analyzing-malicious-pdf-with-peepdf
34.7kPerform static analysis of malicious PDF documents using peepdf, pdfid,
mukul975 / analyzing-network-packets-with-scapy
34.7kUse Scapy to craft, send, sniff, and dissect TCP/UDP/ICMP/DNS packets, analyze pcap files, implement SYN scans, and detect anomalous traffic such as fragmented or malformed packets
mukul975 / analyzing-persistence-mechanisms-in-linux
34.7kScan Linux systems for persistence mechanisms including crontab/systemd entries, LD_PRELOAD injection, shell profile modifications (.bashrc, .profile), and SSH authorized_keys backdoors, then correlate findings with auditd logs into an installation timeline.
mukul975 / analyzing-powershell-empire-artifacts
34.7kDetect PowerShell Empire post-exploitation framework artifacts in Windows Script Block Logging (Event ID 4104) and Module Logging (Event ID 4103), including the default launcher string, Base64-encoded WebClient/FromBase64String payloads, known module invocations (Invoke-Mimikatz, Invoke-Kerberoast),…
mukul975 / Transfer of funds
34.7kIdentify ransomware-related network indicators, including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange, by analyzing Zeek conn.log and NetFlow data
mksglu / ctx-purge
31.0kPurge the context-mode knowledge base. Permanently deletes all indexed content and resets session stats. This is destructive and cannot be undone. Trigger: /context-mode:ctx-purge
nanocoai / add-onecli
31.0kInstall or refresh OneCLI as NanoClaw's gateway provider
alirezarezvani / minimalist
28.4kUse when the user asks to write code efficiently, avoid over-engineering, reduce dependencies, or prevent unnecessary abstractions. Enforces a strict efficiency ladder: YAGNI, reuse, stdlib, native platform, existing deps — before writing any new code.
alirezarezvani / strict-api
28.4kUse when the user says 'no hallucinations', 'verify APIs', 'reality check', or 'don't invent functions'. Prevents the agent from calling methods, imports, or variables that do not provably exist in the user's installed version.
wanshuiyin / auto-paper-improvement-loop
17.7kAutonomously improve a generated paper via GPT-6-Astra xhigh review → implement fixes → recompile, for 2 rounds
wanshuiyin / paper-writing
17.7kWorkflow 3: Full paper writing pipeline that goes from a narrative report to a polished, submission-ready PDF
wanshuiyin / proof-writer
17.7kWrites rigorous mathematical proofs for ML/AI theory
wanshuiyin / research-lit
17.7kSearch and analyze research papers, find related work, summarize key ideas
reticlehq / agentic-tdd
831Test-driven development for behaviour a unit test cannot reach, by writing the expectation against the running app before writing the code. Declare the consequence first, watch it fail, implement, watch it pass
reticlehq / audit-my-app
831Sweep a whole running web app for what is broken, without writing a script or knowing the codebase. Clicks every reachable control and reports dead buttons, console errors, failed requests, and places where the API and the screen disagree.
reticlehq / drive-desktop-app
831Drive and verify an Electron or Tauri desktop app from the inside, including the main-process and Rust IPC calls a browser tool cannot see
reticlehq / test-error-states
831Force the states a happy-path run never reaches (a failing API, an empty list, a slow request, a timeout, an expired session, a toast that auto-dismisses) and check the UI actually handles them
reticlehq / verify-login-logout
831Prove sign-in lands the user where they should be, sign-out really ends the session so a protected page sends them back to sign in, and an expired session asks to sign in again instead of breaking
reticlehq / verify-optimistic-update
831Prove a UI that updates before the server answers puts things back and says so when the request fails, and keeps the change when it succeeds
reticlehq / verify-pagination
831Prove the next page of a list, or the next batch of an infinite scroll, loads NEW rows from the server, repeats none, and that the end of the list is handled
Jeffallan / spec-miner
11.9kReverse-engineering specialist that extracts specifications from existing codebases
YaoApp / secret
8.2kAgents can read user-configured secrets at runtime using the `tai tool` CLI. Secrets are encrypted at rest (AES-256-GCM) and decrypted only when read.
Gentleman-Programming / comment-writer
7.9kWrite warm, direct collaboration comments. Trigger: PR feedback, issue replies, reviews, Slack messages, or GitHub comments.
Gentleman-Programming / systemic-issue-triage
7.9kTrigger: new issue, bug report, triage, backlog, issue flood, community report, root cause, dead-end, blocked user. Attack issues by root class, never one-by-one; fixes must shrink the system, not grow it.
Gentleman-Programming / issue-creation
7.9kTrigger: issue creation, bug reports, feature requests, or issue approval. Create and triage GitHub issues from repository evidence.
zenstory-ai / story-short-scan
7.8k短篇网文扫榜。分析知乎盐言、七猫、黑岩、点众等平台热门短篇数据，捕捉风口题材。触发方式：/story-short-scan、/短篇扫榜、「短篇什么火」「知乎故事排行」。
Devin-AXIS / ipollowork-presentations
7.1kCreate, revise, and verify slide presentations in an active iPolloWork Design session while retaining the selected template's visual and editable contracts.
Devin-AXIS / ipollowork-template-generation
7.1kCreate or update reusable iPolloWork templates through conversation for Design, Slides/native editable PPT, and HyperFrames Video
internet-court / agentic-wallet
6.8kCrypto wallet operations via the awal CLI — sign in, check balances, send USDC/ETH/POL/SOL, trade tokens, fund the wallet, and use the x402 payment protocol to discover paid services, pay for API calls, monetize an API, or query onchain data
internet-court / okx-dex-market
6.8kHARD BLOCK — never use for prediction-market/Polymarket UpDown queries; route to okx-dapp-discovery when a named DApp (Polymarket/Aave/Hyperliquid/PancakeSwap/Morpho) appears with a timeframe, or 涨跌/updown for BTC/ETH/SOL/XRP/BNB/DOGE/HYPE.
breaking-brake / workflow-schema-tuning
5.4kUse when modifying `resources/workflow-schema.json` in cc-wf-studio to influence how AI agents generate workflows via the cc-workflow-ai-editor skill. Triggers include "AIが特定のノードタイプを選んでくれない", "ワークフロー生成のバイアスを調整したい", "スキーマの description を変えたい", "新しいノードタイプを追加したい", "嘘の制約がスキーマに混じっていないか確認したい".
elementalsouls / hunt-html-injection
5.2kHunt HTML Injection — user-supplied input is rendered as raw HTML in the response without sanitisation, allowing an attacker to inject arbitrary HTML tags (but not necessarily JavaScript). Lower severity than XSS but enables phishing, UI manipulation, and credential harvesting via injected forms
AgriciDaniel / claude-blog-brain
2.5kScaffold and operate Claude Blog Brain, a source-cited Obsidian brain for blog content creation, optimization, and management dual-optimized for Google rankings (E-E-A-T, the 2026 core updates) and AI citations (GEO/AEO), spanning writing, rewriting and freshness, SERP-informed briefs and outlines,…
AgriciDaniel / blog-decay
2.5kCompare two Google Search Console page exports (current vs previous period) to flag pages whose clicks or impressions fell by a chosen threshold, with a triage hint (refresh, query shift, consolidate, prune). The 20% default is a screening heuristic, not proof of decay.