168 skills found · Page 4 of 6
SepineTam / mcp-for-stataStata-MCP: A MCP server for integrating Stata into your agent loop with a safety-first design.
cordwainersmith / Claudoscopenative macOS app that gives you a real-time dashboard for your Claude Code and Cowork sessions, with analytics, conversation history, security hardening, real time secrets detection and project insights.
AgriciDaniel / pyaPYA (Protect Your Ass): security audit plugin for Claude Code. 9 specialist agents, a dated threat feed, verified findings, offline by default.
azrtydxb / procoderSenior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call unfinished work done, and a lessons loop that closes each escaped bug's class. One Go binary, no runtime deps, works with 20+ agents.
bjgreenberg / senior-engineering-partnerA stack-agnostic Claude Code skill: strict code reviewer, pair programmer, debugger, and mentor (Python/Bash/Apps Script/JS/Swift). Security-first, phase-aware engineering discipline with a spec→plan→TDD→verify workflow.
VibePod / vibepod-cliUnified CLI for running AI coding agents in isolated containers. Includes built-in local metrics collection, HTTP traffic tracking, and an analytics dashboard to track agent actions.
x-glacier / kali-pentestKali Linux penetration testing skill for AI agents (Claude Code, OpenClaw, Hermes Agent). 200+ CLI tools, 15 scenario playbooks. Autonomously plans attack paths, selects tools, and integrates results across phases to adapt the penetration strategy — with human approval gates for high-risk actions.
skymanbp / cc-treeClaude Code plugin: universal radial-tree exploration engine. One tree skill + swappable presets (brainstorm / attack / design / code-audit) for divergent ideation, adversarial critique, and design-space exploration. 12 framings × hard-ban-on-incomplete-leaves × stable convergence.
Synvoya / codeinspectusLocal-first MCP security scanner for AI-generated apps: four open-source engines plus the Synvoya engine. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.
mythos-agent / mythos-agentThe AI security agent guards your code.
Spade-sec / jsowlJsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交互式 HTML 报告，是渗透测试、红队信息收集与 Web 安全测试的高效自动化方案。
panther-labs / mcp-pantherWrite detections, investigate alerts, and query logs from your favorite AI agents
2alf / HeimdallTamper-evident integrity monitor for the MCP config & server files your local AI agents load.
smorky850612 / AurakitOne command. Full stack. Zero compromise. — All-in-one Claude Code skill with 33 modes, 6-layer security, 23 hooks, and 75% token savings. Works on Codex, Cursor, Manus, Windsurf.
frangelbarrera / osint-agent-skillsOSINT knowledge base + MCP server for autonomous AI agents — Claude Code, Cursor, Kimi K3, recon & threat intel playbooks.
backblaze-labs / claude-skill-b2-cloud-storageClaude Skill for Backblaze B2 Cloud Storage management from the terminal. Manage buckets, list and search files, audit storage usage, detect stale or large objects, review security posture, and safely clean up data using natural language.
Robotti-io / copilot-security-instructions✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
appsecco / pentesting-mcp-servers-checklistA practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained by Appsecco and licensed for remixing.
robert-auger / safer-dependenciessafer-dependencies is a security layer for Claude Code that audits packages before they’re added to your project. It detects and fixes risky dependencies, including CVEs, typosquats, abandoned packages, version-age issues, and adds package-cooldown violations across npm, PyPI, RubyGems, Maven, Go, a…
bjeans / homelab-mcpModel Context Protocol (MCP) servers for managing homelab infrastructure through Claude Desktop. Monitor Docker/Podman containers, Ollama AI models, Pi-hole DNS, Unifi networks, and Ansible inventory. Includes security checks, templates, and automated pre-push validation.
SaadRahman01 / claude-moodle-devMoodle development toolkit for AI coding assistants. Skills for XMLDB, Hooks API, PHPUnit, Behat, AMD, privacy/GDPR, security, accessibility. Native Claude Code plugin + adapters.
bridge-mind / BridgeWardTrust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, refusal templates, and a read-only injection auditor. MIT.
erevusobolus / THERION-SYSTEMThe Mindset Your AI Is Missing Like hiring an entire team. Except it's free. 67 specialists across 12 professional fields — security auditor, business strategist, project manager, database architect, DevOps engineer, and more. Your AI reads your question and the right specialist responds. No menus.
martinholovsky / SOTA-skillsEngineering best practices that AI coding agents actually apply — 40+ skills, from secure coding and cloud to compliance and UX writing. BUILD + AUDIT modes. Measured: best-practice coverage 59% → 98% vs. the same model unguided.
omermaksutii / RugProofSmart contract security auditor for Claude Code — vuln detection, exploit PoCs, mainnet-fork simulation, audit cards, on-chain certificates. Solidity + Vyper · 38 commands · 19 agents · 33 skills · 9 MCP servers.
MSApps-Mobile / claude-pluginsfree, open-source plugins for Claude Code & Cowork — Google Drive, WhatsApp, YouTube, WordPress, Apollo & more. Built on the SOSA™ security framework.
localden / mcp-auth-servers🔒 Reference MCP servers that demo how authentication works with the current Model Context Protocol spec.
ginkida / sallyportA security-first bridge between Claude Code (MCP) and Chrome — HMAC pairing, domain allowlist, per-domain evaluate opt-in.
xmartlabs / vytalLinkVytalLink is a digital health platform connecting personal health data—including Apple Health, Google Fit, and wearables—with AI assistants like ChatGPT and Claude. Includes a Flutter app, Node.js MCP server, and Firebase landing page. Focused on privacy and user control.
docxology / codomyrmexModular Python coding and agent platform — LLM agents, graph RAG, static analysis, git ops, cloud and container deployment, all exposed as Model Context Protocol tools. uv-managed, with a zero-mock test suite.
