913 skills found · Page 18 of 31
LeoYeAI / agent-teams-simplify-and-hardenImplementation + audit loop using parallel agent teams with structured simplify, harden, and document passes. Spawns implementation agents to do the work, then audit agents to find complexity, security gaps, and spec deviations, then loops until code compiles cleanly, all tests pass, and auditors fi…
LeoYeAI / agentaudit-skillAutomatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
LeoYeAI / skill-scannerScan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
LeoYeAI / Justin RooschComprehensive compliance and security self-assessment for AI agents. 14-check framework producing a structured threat model + compliance report with RED/AMBER/GREEN ratings across security, governance, EU AI Act readiness, oversight quality, and NIST alignment domains.
mcp-router / mcp-routerMCP Router — development, support and security updates ended 2026-09-18. Historical source and final release for existing users.
uber / ADRADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.
Leanmcp / vuln-reproEnd-to-end methodology for reproducing AND patching publicly disclosed, already-fixed vulnerabilities: sourcing the advisory and the fix commit, reading the patch diff, rebuilding a pinned offline lab, building a vulnerable-vs-patched contrast harness with proper controls, minimizing the trigger, de…
Leanmcp / security-reproBuild safe, local, defensive reproductions of ALREADY-PATCHED, publicly disclosed security vulnerabilities (CVEs, vendor advisories, AI-agent incidents) for whitepapers, control testing, and education.
vmoranv / jshookmcpA search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.
CYB3RMX / Qu1cksc0peAll-in-One malware analysis tool.
maxritter / upstream-auditAudit and update Pilot Shell upstream dependencies in installer/upstreams.yaml. Checks npm, PyPI, brew, and curl-pipe entries for newer stable versions, known security advisories, and sha256 drift. Verifies each update installs successfully before committing
mcollina / oauthImplements OAuth 2.0/2.1 authorization flows in Fastify applications — configures authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection/revocation endpoints
mcollina / octocatUse this skill whenever the prompt contains any `github.com` URL, even if the user only pastes a link and gives no GitHub-specific keywords. Handles git and GitHub operations using the gh CLI.
mcollina / fastify-best-practicesGuides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript
aipoch / file-security-toolkitEncrypt/decrypt local files, redact sensitive information in documents, and validate password strength when handling private data or preparing files for sharing.
OpenOSINT / OpenOSINTThe OSINT toolkit for AI agents: Agent Skill, MCP server and CLI. Passive by default, no API keys to start, every finding cites its tool call.
stripe / stripe-best-practicesGuides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, tax and registrations (S…
benchflow-ai / senior-javaWorld-class Java and Spring Boot development skill for enterprise applications, microservices, and cloud-native systems. Expertise in Spring Framework, Spring Boot 3.x, Spring Cloud, JPA/Hibernate, and reactive programming with WebFlux.
benchflow-ai / senior-securityComprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation
a5c-ai / mcp-csp-investigationComprehensive Content Security Policy audit for MCP Apps in sandboxed iframes. Discovers all network origins, traces them to source, and generates CSP configuration for registerAppResource.
0xSteph / pentest-aiOpen-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
miscusi-peek / cheatengine-mcp-bridgeConnect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.
mukul975 / cve-mcp-serverProduction-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
cbrock84 / chief-legal-and-risk-officerOwns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness.
cbrock84 / chief-information-security-officerOwns the security posture of the organization — architecture, program strategy, risk acceptance, incident command, and the authority to stop work that creates unacceptable exposure.
cbrock84 / identity-lifecycle-administrationExecutes joiner, mover and leaver processes — provisioning, group membership, access changes on role change, and complete deprovisioning.
cbrock84 / incident-responseRuns a security incident from detection to closure — triage, containment, investigation, communication, and the review afterward.
cbrock84 / security-architecture-reviewReviews a design or change for security before it ships — authentication and authorization, data handling, secrets, dependencies, and the secure-development practices around it.
rmyndharis / code-review-ai-ai-reviewCombine static analysis with model-assisted code review to assess security, performance, correctness, and architecture
rmyndharis / deployment-pipeline-designDesign multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration
