189 skills found ¡ Page 2 of 7
trailofbits / agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference.
FlorianBruniaux / claude-code-ultimate-guideThe most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.
awarexone / Agentic-Bug-HunterAI-powered bug bounty hunting toolkit that works with or without subscription.
FunnyWolf / ViperAdversary simulation and Red teaming platform with AI
elementalsouls / Claude-BugHunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
yvgude / lean-ctxLeanCTX is the Context Gateway for AI Systems. Select task-relevant context, apply supported controls, connect local knowledge and inspect recorded evidence. Open-source Engine: CLI, MCP, hooks and supported proxy paths.
beenuar / AiSOCOpen-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
davepoon / agentwhy-session-auditChecks which private files (.env, keys, secrets) Claude Code and its subagents reached in this project, whether a value came into an agent's context, and which key to change, by running the open source agentwhy CLI over the session records Claude Code already keeps on disk
davepoon / aurakitSonnet Amplified fullstack engine. 34 modes, SEC-01~15 OWASP security, 13 runtime hooks, 75% token reduction. Install: npx @smorky85/aurakit
ljagiello / ctf-ai-mlProvides AI and machine learning techniques for CTF challenges
zinja-coder / jadx-ai-mcpPlugin for JADX to integrate MCP server
jeremylongshore / anth-security-basics'Apply Anthropic Claude API security best practices for key management,
jeremylongshore / abridge-security-basicsReview Abridge deployment controls across data handling, identity, devices, EHR workflows, support, auditability, and incident response
jeremylongshore / apify-security-basicsSecure Apify API tokens, configure proxy access, and protect Actor data. Use when hardening API key management, setting up environment-specific tokens, rotating a leaked token, or auditing Apify security configuration.
jeremylongshore / alchemy-security-basicsAnalyze and secure Alchemy credentials, browser access, wallet authority, webhook verification, and untrusted chain data
jeremylongshore / analyzing-dependenciesAnalyze dependencies for known security vulnerabilities and outdated
stacklok / toolhiveToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
LeoYeAI / agentaudit-skillAutomatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
LeoYeAI / skill-scannerScan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis â no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
mcp-router / mcp-routerMCP Router â development, support and security updates ended 2026-09-18. Historical source and final release for existing users.
CYB3RMX / Qu1cksc0peAll-in-One malware analysis tool.
uber / ADRADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
vmoranv / jshookmcpA search-first, profile-aware reverse-engineering workspace for AI agents â 735 tools across 36 domains in one MCP server.
OpenOSINT / OpenOSINTOpen-source engine for passive OSINT checks: 21 tools as CLI, MCP server and web UI. Hosted Monitor & Diligence at app.openosint.tech.
0xSteph / pentest-aiOpen-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
miscusi-peek / cheatengine-mcp-bridgeConnect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.
mukul975 / cve-mcp-serverProduction-grade MCP server giving Claude 27 security intelligence tools across 21 APIs â CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
rmyndharis / code-review-ai-ai-reviewCombine static analysis with model-assisted code review to assess security, performance, correctness, and architecture
BlackSnufkin / LitterBoxA self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.
daymade / marketplace-health-checkRuns a 6-dimension evidence-based health audit of this skills marketplace repo â code safety, docs/SSOT, security/PII, PR/issue triage, manifest integrity â via a parallel workflow, then verifies findings by priority.
