AdYour product here, seen by people installing AI tools every day
AI Plugin Index
Sponsor slots open: 12 of 12, from $249 a month

Security

There are 4,378 security tools for AI assistants in this directory: 1,746 MCP servers and 2,632 skills. The highest scored are OpenWork MCP Gateway, Agents MCP, MCP Remote.

Category sponsorSponsor the security category from $99 a month. One sponsor per category.Available →
The best security MCP servers, compared →

Top picks

OpenWork MCP Gateway different-ai
94

Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.

AFA Remote 24k
Agents MCP electric-sql
94

Model Context Protocol registry, transports, and OAuth bridges for Electric Agents

AAA Local 10k
MCP Remote punkpeye
94

Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth

AAA Local 505k/wk
Agentmesh MCP Proxy microsoft
94

Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol

AAA Local 6.5k
NotFairnowork-studio
93

OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.

AAA Remote 4.0k
Plugin MCP UsefulSoftwareCo
93

Register [Model Context Protocol](https://modelcontextprotocol.io) servers as tool integrations for an executor. Supports both stdio-launched servers and remote (HTTP) servers, with optional OAuth.

AAA Local 18k/wk

MCP servers (287)

  1. 1OpenWork MCP Gateway different-ai · SecurityYour OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.AFAyesterday★ 24k94
  2. 2Agents MCP electric-sql · SecurityModel Context Protocol registry, transports, and OAuth bridges for Electric AgentsAAA14 days ago★ 10k94
  3. 3MCP Remote punkpeye · SecurityRemote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuthAAA3 days ago505k/wk94
  4. 4Agentmesh MCP Proxy microsoft · SecurityPublic Preview — Security proxy for MCP servers: The Firewall for Model Context ProtocolAAAtoday★ 6.5k94
  5. 5NotFair nowork-studio · SecurityOAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.AAAyesterday★ 4.0k93
  6. 6Plugin MCP UsefulSoftwareCo · SecurityRegister [Model Context Protocol](https://modelcontextprotocol.io) servers as tool integrations for an executor. Supports both stdio-launched servers and remote (HTTP) servers, with optional OAuth.AAAtoday18k/wk93
  7. 7Auth0 MCP Server auth0 · SecurityAuth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural languageAAB5 days ago4.1k/wk92
  8. 8OpenOSINT OpenOSINT · SecurityAI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.AAAyesterday★ 1.8k90
  9. 9Cyberstrike CyberStrikeus · SecurityThe first open-source AI agent built for offensive security. Autonomous pentesting from your terminal.ACA6 days ago★ 3.2k90
  10. 10MCP Remote geelen · SecurityRemote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuthAAA3 days ago★ 1.6k89
  11. ADYour product hereThis row is seen by people browsing security tools. Book it from $249 a month.See prices →
  12. 11MCP Remote geelen · SecurityRemote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuthAAA3 days ago★ 1.6k89
  13. 12squirrelscan squirrelscan · SecurityWebsite QA for your coding agent: audit SEO, performance, security, accessibility over MCP.AAByesterday★ 28688
  14. 13EchelonGraph CVE & Exposure echelongraph · SecurityCVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.AAC3 days ago1.3k/wk88
  15. 14Blitzstrike shinthink · SecurityBlitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.AAA2 days ago7.0k/wk88
  16. 15Modelcontextprotocol Core modelcontextprotocol · SecurityModel Context Protocol for TypeScript — public Zod schemas (spec + OAuth/OpenID) (with updated dependencies)AFAtoday★ 14k88
  17. 16Ecc Agentshield affaan-m · SecuritySecurity auditor for AI agent configurations. Scans Claude Code setups for vulnerabilities, misconfigs, and injection risks.AAA2 days ago9.0k/wk88
  18. 17Forestadmin MCP Server ForestAdmin · SecurityModel Context Protocol server for Forest Admin with OAuth authenticationAABtoday7.3k/wk88
  19. 18skylos duriantaco · SecurityDead code, security, secrets detection and code quality for Python, TypeScript, Go.AAAyesterday★ 84887
  20. 19HOL Guard hashgraph-online · SecurityLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.AAAyesterday★ 94087
  21. 20UniFi Network MCP sirkirby · SecurityManage UniFi Network devices, clients, firewall, VLANs, VPNs, and more via MCP.AAAyesterday★ 92687
  22. 21Dsh MCP Connector duhu2000 · SecurityDeepSeek Harness MCP Connector: connect servers, search tools across active connections, and troubleshoot discovery. Includes a continuously updated catalog; supports OAuth 2.0 PKCE, API keys, Streamable HTTP/stdio, and mcpServers JSON import.AABtoday4.9k/wk87
  23. 22Cybermes MCP Zyrexnn · SecurityZero-Go Model Context Protocol (MCP) Server for Cybermes Autonomous Security & Diagnostic FrameworkAAAyesterday★ 95087
  24. 23Ship Safe asamassekou10 · SecurityThe independent security agent for AI-written software. A deterministic engine finds issues across application code, AI agents, MCP servers, skills, dependencies, CI/CD, and secrets. An investigation layer traces whether each one is real and reports the eAAA3 days ago★ 86187
  25. 24NativeKeel AlicanAkyol · SecurityReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findingsAACyesterday4.3k/wk86
  26. 25OpenOSINT OpenOSINT · SecurityAI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.AAAyesterday★ 1.8k86
  27. 26Llxprt Code MCP vybestack · SecurityLLxprt Code MCP — Model Context Protocol client, OAuth, and token storageAAAtoday★ 70286
  28. 27Server Lazy Auth modelcontextprotocol · SecurityMCP App example demonstrating lazy (on-demand) OAuth: public tools work unauthenticated, protected tools return 401 + WWW-Authenticate so the host runs the OAuth flow only when neededAFA25 days ago★ 3.0k86
  29. 28GitHits githits-com · SecuritySearch public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.AAByesterday★ 11585
  30. 29mcp-ssh-manager bvisible · SecuritySSH server management for agents, with per-server read-only and allowlist security modesAAA11 days ago2.2k/wk85
  31. 30hexvero maximilianfeix · SecurityElectron release diff for security review: what changed in IPC, contextBridge, windows and hosts.AACyesterday3.1k/wk85
  32. 31Oauth mcp-z · SecurityMulti-account orchestration and secure token storage for OAuth-based MCP serversAAC7 days ago3.1k/wk85
  33. 32Mcpjam CLI MCPJam · SecurityTest, debug, and validate MCP servers — health checks, OAuth conformance, tool-surface diffing, and structured triage from the terminal or CIAFAtoday3.8k/wk85
  34. 33Coach Watts hdkiller · SecurityRemote MCP server for training, nutrition, wellness, and performance data with OAuth 2.0.AAB7 days ago★ 10084
  35. 34Xsuaa Auth arc-mcp · SecurityXSUAA / OAuth authentication + BTP principal propagation for Model Context Protocol (MCP) servers built on Express and @modelcontextprotocol/sdk.AACyesterday2.1k/wk84
  36. 35Agent Warden ShivShankarDash · SecurityA firewall for AI agents. Detects and blocks prompt injection in email, web pages, documents and MCP tool results before they reach your model.AACyesterday2.4k/wk84
  37. 36Osv Scanner MCP tedorigawa001 · SecurityMCP server that wraps Google's OSV-Scanner to scan Java projects for known vulnerabilitiesAAC2 days ago2.4k/wk84
  38. 37Agentguard GoPlusSecurity · SecurityGoPlus AgentGuard — Security guard for AI agents. Blocks dangerous commands, prevents data leaks, protects secrets. 20 detection rules, runtime action evaluation, trust registry.AAByesterday1.2k/wk84
  39. 38flightclaw flightclaw · SecuritySearch ~300 airlines and book flights with a checkout link. OAuth sign-in by email code.AAB15 days ago★ 7583
  40. 39wireshark-mcp bx33661 · SecurityProfessional network analysis with tshark. Security audits, deep-dives, and threat detection.AAB2 days ago★ 33683
  41. 40Transloadit Media Processing transloadit · SecurityProcess video, audio, images and documents with Transloadit Robots. Connect by URL with OAuth.AAByesterday1.7k/wk83
  42. 41zn-gate usezn · SecurityThe local security layer for coding agents: secret redaction, injection checks and an MCP proxy.AACyesterday1.7k/wk83
  43. 42virustotal w0h1v · SecurityMCP server for querying VirusTotal API with comprehensive security analysis tools.AAB4 days ago1.6k/wk83
  44. 43Ziggs ZiggsAI · SecurityZiggs delegate MCP: chat, agreements, context, payments via OAuth or operator key.AACyesterday1.7k/wk83
  45. 44Auth agentfront · SecurityAuthentication and authorization for FrontMCP servers: auth modes, OAuth 2.1 (local and remote), JWT and session checks, authorities and the credential vaultAABtoday1.5k/wk83
  46. 45Lighthouse MCP danielsogl · SecurityA comprehensive Model Context Protocol (MCP) server that provides web performance auditing, accessibility testing, SEO analysis, security assessment, and Core Web Vitals monitoring using Google Lighthouse. Enables LLMs and AI agents to perform detailed weAAByesterday1.9k/wk83
  47. 46Papercliped OpenSourcx · SecurityPapercliped — connect Claude, ChatGPT and any MCP app to your Paperclip: control agents, sync, report. MCP server + hosted multi-tenant OAuth bridge + public stats API.AAC4 days ago1.9k/wk83
  48. 47Auth paoloricciuti · SecurityOAuth 2.1 authorization helper for TMCP with MCP specification complianceAAB4 days ago1.8k/wk83
  49. 48mcp node-man · Security30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.AFCyesterday1.4k/wk82
  50. 494da-mcp-server 4DA-Systems · SecurityUpgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.AACyesterday1.2k/wk82
  51. 50mcp-niubiz codespar · SecurityMCP server for Niubiz — Peru card acquirer: security token, session, authorize, reverseAAB23 days ago★ 27382
  52. 51CrowdStrike Falcon MCP Server CrowdStrike · SecurityConnects AI agents with CrowdStrike Falcon for security analysis and automation.AAB12 days ago★ 27182
  53. 52guardvibe goklab · SecurityDeterministic security layer your AI can't be. 606 rules, 39 tools, CLI + doctor + host audit.AAC2 days ago1.3k/wk82
  54. 53sphior-code-mcp Toraastrta · SecurityDeterministic SAST/SCA findings + fix guidance for your AI agent. Runs locally, no account needed.AACyesterday1.3k/wk82
  55. 54mikrotik-mcp wiresage · SecurityMCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH.AAByesterday★ 30382
  56. 55mcp snyk · SecurityEasily find and fix security issues in your applications leveraging Snyk platform capabilities.AAB5 days ago★ 5882
  57. 56Skilltotal pezhik · SecurityStatic security scanner for MCP servers, agent skills and npm/PyPI packages. Runs the skilltotal Python engine through uvx, pipx or an installed Python.AACtoday1.1k/wk82
  58. 57MCP Maigret w0h1v · SecurityMCP server that lets AI agents run maigret, an OSINT tool that searches a username across thousands of sitesAAB4 days ago860/wk82
  59. 58Testing vinkius-labs · SecurityIn-memory MVA lifecycle emulator for MCP Fusion. Runs the full pipeline (Zod Input → Middlewares → Handler → Egress Firewall) without network transport. Returns structured MvaTestResult objects — zero coupling to Jest/Vitest.AAB1 month ago444/wk82
  60. 59Reversecore MCP sjkim1127 · SecuritySecurity-first MCP server for reverse engineering, malware analysis, forensics, and SAST.AAB3 days ago★ 21181
  61. 60apimodels stimQQ · SecurityImage, video, chat and speech models with one account — local (npx) or hosted with OAuth sign-in.AAC10 days ago975/wk81
  62. 61MCP Stdio Oauth flujo-app · SecurityExperimental MCP extension for proactive third-party OAuth readiness discovery on local stdio servers.BAC1 month ago4.1k/wk81
  63. 62Theauth CLI glincker · SecurityCLI for theAuth: set up agent identity and MCP OAuth 2.1, run migrations, launch the admin dashboard, codemod from Kavach.AACyesterday892/wk81
  64. 63Aimcp rookieDJ · SecurityLocal coding MCP server for ChatGPT, Gemini Apps, Gemini CLI, Codex CLI, and other MCP clients with OAuth and Streamable HTTP.AAC11 days ago1.0k/wk81
  65. 64Agent Guard agent-util · SecuritySecurity policy enforcement and auditing for supported AI agent filesystem tools.AAC10 days ago910/wk81
  66. 6512 Apps MCP 12-apps · SecurityApp-agnostic MCP server core: generate one MCP tool per OpenAPI operation and proxy each call carrying the caller's bearer token (permission passthrough). Also ships the OAuth 2.1 authorization server (./oauth, ./hono: register/authorize/token, JWKS and bAFCtoday5.4k/wk81
  67. 66Agent Ready SOFTURE · SecuritySOFTURE AI agent-ready module: everything an AI agent uses to discover and connect to an app, from configuration plus its MCP server: API catalog, OpenAPI, Link header, OAuth discovery additions and auth.md, MCP server and A2A cards, Agent Skills, AI cataAACtoday819/wk81
  68. 67shodan BurtTheCoder · SecurityMCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.AAByesterday★ 17880
  69. 68virustotal BurtTheCoder · SecurityMCP server for querying VirusTotal API with comprehensive security analysis tools.AAB4 days ago★ 15180
  70. 69security-proxy GuardBee · SecurityMCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit logAACyesterday604/wk80
  71. 70mcp-observatory KryptosAI · SecurityMCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.AAB2 days ago630/wk80
  72. 71SonarQube MCP Server SonarSource · SecurityAnalyze code quality and security with SonarQube Server or Cloud directly in AI assistants.AFAyesterday★ 66580
  73. 72Taskade MCP taskade · SecurityTaskade projects, tasks and AI agents. Hosted OAuth server or local stdio package.AAByesterday★ 16980
  74. 73shodan w0h1v · SecurityMCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.AAByesterday661/wk80
  75. 74Electron MCP Server YawLabs · SecurityElectron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistantsAAC5 days ago610/wk80
  76. 75marketnow alicelabs-llc · Security68k+ security-audited MCP skills + free agent trust layer: signed ATC cards, tool gating, audits.AACyesterday103/wk80
  77. 76Obsidian MCP Brain a1ecbr0wn · SecurityMCP server exposing Obsidian vaults to remote clients (Claude Code, Claude Desktop) with OAuth discovery and path-level access controlAACtoday577/wk80
  78. 77Castov castovdev · SecurityCastov in your terminal: Model Context Protocol (MCP) server for Claude/Cursor, EADDRINUSE port inspector & killer, cryptographic .env secret generator, IPv4 CIDR subnet calculator, local secret scanner, terminal error healer, .cursorrules generator, UnixAACtoday672/wk80
  79. 78Testing agentfront · SecurityEnd-to-end testing for FrontMCP servers: Jest fixtures with a connected MCP client, MCP matchers, JWT and OAuth mocks, and HTTP mockingAABtoday526/wk80
  80. 79Express MCP brandon-svec · SecurityAdd MCP tools, OAuth, and a knowledge base to any Express app so AI clients can call your APIsAACyesterday585/wk80
  81. 80Narsil MCP postrv · SecurityA blazingly fast MCP server for code intelligence - multi-language parsing, semantic search, call graphs, security scanningAAB13 days ago445/wk80
  82. 81Shieldcortex Drakon-Systems-Ltd · SecurityTrustworthy memory and security for AI agents. Memory firewall for any host that writes through it; runtime tool gates on Claude Code, OpenClaw, and Hermes.AADtoday1.5k/wk80
  83. 82Guard basdotio · SecurityLocal, offline security scan for AI agent setups: audit the skills, MCP servers, hooks and permission grants an agent auto-loads, and vet one before installing it.AACtoday573/wk80
  84. 83Terraform Best Practices MCP Server DownAtTheBottomOfTheMoleHole · SecurityMCP server for Terraform cost, lint, security, and cloud best-practice guidance.AAC3 days ago607/wk80
  85. 84Quantum Safe MCP AnimeshShaw · SecurityModel Context Protocol server: lets coding agents audit a JavaScript/TypeScript project for quantum-vulnerable cryptography, choose a post-quantum algorithm suite, and look up quantum-safe-ts errors.AACtoday567/wk80
  86. 85ContrastAPI UPinar · Security55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.AACyesterday★ 3379
  87. 86Expense Budget Tracker kirill-markin · SecurityTrack expenses, budgets, balances, transfers, and multi-currency reports with OAuth-secured tools.AAC3 days ago★ 3379
  88. 87WARDEN — MCP Security Firewall alexar76 · SecurityMCP security firewall: stdio wrap proxy or inspection tools; zero runtime dependencies.AAC2 days ago555/wk79
  89. 88dvalincode arthurpanhku · SecurityDeterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.AAByesterday★ 11779
  90. 89mcpm getmcpm · SecurityMCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.AAC2 days ago564/wk79
  91. 90shellward jnMetaCode · SecurityAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.AAB21 days ago★ 13979
  92. 91fmsg markmnl · SecurityFederated messaging with your fmsg hosting provider. Connect with OAuth or an API key.AAC2 days ago432/wk79
  93. 92agent-security-scanner-mcp sinewaveai · SecuritySecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.AAB2 days ago327/wk79
  94. 93synter-ads Synter-Media-AI · SecurityRun ads across 16 ad platforms from any MCP client. Hosted OAuth at mcp.synterai.com.AAC2 days ago473/wk79
  95. 94npm Registry MCP Server YawLabs · Securitynpm registry MCP server — package intelligence, security audits, dependency analysisAAC5 days ago429/wk79
  96. 95Prooflayer Agent Security sinewaveai · SecuritySecurity scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1700+ vulnerability rules with AST & taint analysis, LLM-powered semantic code review, auto-fix. For Claude Code, Cursor, WindsuAAB2 days ago450/wk79
  97. 96Firewalla MCP Server amittell · SecurityModel Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 read-only tools, plus 11 opt-in write tools, compatible with any MCP clientAAC9 days ago489/wk79
  98. 97MCP Scan Abanoub-Rodolf · SecurityOpen-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.AAC9 days ago467/wk79
  99. 98Qamcp CLI QAmcp · SecurityTest any MCP server: connection, tools, security, login, resources and prompts. Hard facts, no AI judging.AACyesterday502/wk79
  100. 99Drupal MCP Connector Wilkes-Liberty · SecurityMulti-site MCP server for Drupal over JSON:API and GraphQL, with governed writes and an SSH Drush bridge. Hosted HTTPS is an OAuth resource server that introspects every authenticated call at the issuer. The shared bearer is gone in 4.0. init writes a cliAACtoday556/wk79
  101. 100Slack Stdio MCP epdlr · SecurityAgent-agnostic MCP stdio bridge to https://mcp.slack.com/mcp (user OAuth, PKCE, token refresh, tool proxy, local file download overlay)AAC27 days ago508/wk79
  102. 101Fullcourtdefense CLI fullcourtdefense-bot · SecurityFull Court Defense CLI — security scanning for AI agents from your terminalAC1.4k/wk79
  103. 102Agent Passport System agent-passport-system · SecurityEnforcement and accountability layer for AI agents. Bring your own identity (did:key, did:web, SPIFFE, OAuth, did:aps). Gateway enforcement, monotonic narrowing, cascade revocation, earned reputation, wallet binding, attribution, signed receipts.AAB5 days ago511/wk79
  104. 103Connect lumea-labs · SecurityPolpo Connect contracts and client SDK for OAuth, API-key, and MCP connectionsAFC3 days ago3.5k/wk79
  105. 104Dsh Chatgpt Bridge jiezeng2004-design · SecurityMCP bridge: lets ChatGPT Web create, view, continue and control DeepSeek Harness (DSH) agent sessions through the official MCP protocol. The bridge only connects; DSH keeps its session, agent, tool, approval and workspace security model.AAC12 days ago494/wk79
  106. 105Vvedantb Server vvedantb · SecurityShared Convex backend helpers, MCP server scaffolding and Node-side MCP OAuth client helpers from one root import: query-limit errors, Clerk auth and token verification, Clerk-user lookups and ensure-user for Convex functions, bearer tokens, env, CORS, JSAACtoday559/wk79
  107. 1061Claw Vault 1clawAI · SecurityHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.AACyesterday390/wk78
  108. 107Slack aaronsb · SecurityRead and write Slack with session tokens — no OAuth, no bot, no admin approval.AAC12 days ago356/wk78
  109. 108Google Workspace (multi-account) bakissation · SecurityMulti-account Google Workspace MCP server: 942 tools, 29 services, discover-first, BYO OAuth.AAC2 days ago386/wk78
  110. 109pentest-mcp-server cyanheads · SecurityOffline methodology engine for authorized penetration testing, CTF, and security research.AAC2 days ago355/wk78
  111. 110MoneyMatter letehaha · SecurityPersonal finance tracker: accounts, transactions, budgets, investments and analytics over OAuth.ACByesterday★ 17878
  112. 111mcp-hub ni-c · SecurityMany stdio MCP servers from one container, published over HTTPS with OAuth 2.1 for any MCP clientAAC5 days ago345/wk78
  113. 112memory-pulse t-crew · SecurityGive any agent self-improving memory you can trust in production. Built-in memory security.AAC3 days ago402/wk78
  114. 113Qcc Dsh MCP Legal Oauth duhu2000 · SecurityDeepSeek Harness 插件：一键 OAuth 授权连接企查查（Qichacha）法律数据 MCP（法律产品：法规/reg 案例） / One-click OAuth connect to Qichacha Legal MCP (regulation & case)AAC4 days ago341/wk78
  115. 114Server MCP Oauth onivoro · SecurityDEPRECATED: use a dedicated authorization server with @onivoro/server-mcp-auth. Embedded OAuth 2.1 authorization server for MCP — wraps the MCP SDK auth router into NestJSAAC3 days ago306/wk78
  116. 115Ubon luisfer · SecuritySecurity scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.AAC23 days ago339/wk78
  117. 116MCP Server Zapsign ZapSign · SecurityOfficial ZapSign MCP server — remote OAuth (Cloudflare Workers) and local STDIO via npxAAC3 days ago333/wk78
  118. 117Nsauditor AI Agent Skill nsasoft · SecurityAI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows.AAC4 days ago328/wk78
  119. 118Vark MCP luveo · SecurityMCP adapter for @luveo-tech/vark — wrap Anthropic Model Context Protocol tools with vark's zero-trust security gates (no rewrites).AC855/wk78
  120. 119LLM Trust Guard nkratk · SecurityComprehensive security guards for LLM-powered and agentic AI applications - 35 guards covering OWASP Top 10 for LLMs 2025, Agentic Applications 2026, and MCP Security. All guards accessible via unified TrustGuard facade. Features prompt injection (PAP/perBAC2 months ago1.7k/wk78
  121. 120X MCP Server mobalab · SecurityFork of x-mcp-server for X (Twitter) integration — v2 API with OAuth 2.0 media uploadAAC3 days ago394/wk78
  122. 121Keycardai MCP keycardai · Security[Preview] High-security OAuth implementation for Model Context ProtocolAACtoday410/wk78
  123. 122Better Iam MCP Better-IAM · SecurityTool-level authorization for Model Context Protocol servers: Better IAM credentials, agents and OAuth tokens.AAC10 days ago325/wk78
  124. 123Opnsense MCP Server vespo92 · SecurityModel Context Protocol server for OPNSense firewall management with inter-VLAN routing diagnostics, ARP table, DNS filtering and HAProxy support via Claude DesktopAAB29 days ago154/wk78
  125. 124Pqc MCP AnimeshShaw · SecurityAlias of quantum-safe-mcp: a Model Context Protocol server that lets coding agents audit a JavaScript/TypeScript project for quantum-vulnerable cryptography and choose a post-quantum algorithm suite.AACtoday341/wk78
  126. 125Broberg MCP broberg-ai · SecurityGenuinely-reusable MCP-server toolkit for the broberg.ai fleet: composable transports (stdio + Streamable-HTTP + SSE), composable auth (static Bearer, hashed 3-tier, OAuth 2.1 PKCE), and one typed defineTool registry (kind write-guard + per-tool scopes +AACtoday370/wk78
  127. 126Black Duck Security Scanner blackducksoftware · SecurityAI-powered security scanning using Black Duck Signal for vulnerability detection.BAC1 month ago196/wk77
  128. 127cybersec-toolkit 26zl · SecurityAuthorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.AAByesterday★ 7677
  129. 128cloud-audit gebalamariusz · SecurityAWS security scanner with attack chain detection, IAM privilege escalation, and fixesAAB6 days ago★ 7277
  130. 129IPGeolocation.io MCP Server IPGeolocation · SecurityIP geolocation, security, ASN, abuse, time zones, astronomy, and user-agent parsing over stdio.AAC4 days ago253/wk77
  131. 130Dabble Me Journal parterburn · SecurityPrivate journal MCP server to search, analyze, and create Dabble Me entries securely via OAuth.AAB7 days ago★ 8077
  132. 131Repo Bridge MCP zcrossoverz · SecurityMCP server that turns ChatGPT Web into a real coding agent on your own repositories: read, search, edit, build, test, git, pull requests. OAuth 2.1. No OpenAI API key.BAC2 months ago1.4k/wk77
  133. 132Remnux MCP Server REMnux · SecurityMCP server for using the REMnux malware analysis toolkit via AI assistantsACByesterday464/wk77
  134. 133Toolgate RiskAverseTech · SecurityOpen auto mode for AI agents: a calibrated tool-call firewall powered by TypeSafe's Jev decision model (direct API, OpenRouter Decisions API, or Vercel AI Gateway). Ships as a Claude Code PreToolUse hook.AAC5 days ago281/wk77
  135. 134Offnadir Delta MCP Off-Nadir-Lab · SecurityLocal (stdio) MCP server for Off-Nadir Delta — live, geolocated world-event intelligence, a Daily World Brief, satellite-imagery search, and an OSINT/GEOINT analyst. Forwards to the hosted server with your API key.AACyesterday299/wk77
  136. 135Github MCP kevupton · SecurityGitHub MCP proxy server — bridges the official @modelcontextprotocol/server-github with Alfe OAuth credentials (Pattern A multi-account)AC623/wk77
  137. 136Exceptd Skills blamejs · SecurityAI security skills grounded in mid-2026 threat reality, not stale framework documentation. 51 skills, 11 catalogs (1764 CVEs / 241 CWEs / 794 ATT&CK + ICS / 174 ATLAS / 468 D3FEND / 8889 RFCs), 35 jurisdictions, 10-class catalog gap detector + budget gateAFCyesterday1.6k/wk77
  138. 137Chainpatrol CLI GitHub Actions · SecurityThe official ChainPatrol CLI — terminal interface for threat detectionAC591/wk77
  139. 138Sesame Julien-R44 · SecurityOAuth 2.1 + OIDC server for AdonisJSAAD9 days ago727/wk77
  140. 139Vantage MCP Server vantage-sh · SecuritySelf-hosted (local) MCP server that runs the same tools as the [hosted Vantage MCP](https://mcp.vantage.sh/mcp). Use this package when you need API-token auth without OAuth, or when you cannot reach the hosted endpoint.AABtoday242/wk77
  141. 140Aetherguard MCP Ranjeet2063 · SecurityAnthropic Model Context Protocol (MCP) Server for Mathematical Invariant Web3 AI FirewallAAC4 days ago259/wk77
  142. 141Node Red Contrib MCP Server flic · SecurityGeneric Model Context Protocol (MCP) server nodes for Node-RED: expose flows as MCP tools behind an OAuth-protected endpoint, with optional Node-RED admin (flow read/deploy) tools.AAC10 days ago237/wk77
  143. 142Agent MCP woojubb · SecurityMCP client for the Robota SDK: server definitions, activation, connections, tool catalog and OAuth sign-inACC2 days ago435/wk77
  144. 143spotdb aliengiraffe · SecurityEphemeral data sandbox for AI workflows with guardrails and securityAAC3 days ago★ 2176
  145. 144isMalicious threat intelligence for AI agents hexablob · SecurityReputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scansAAC15 days ago52/wk76
  146. 145MCP ZAP Server dtkmn · SecuritySafe, self-hosted ZAP operator for guided AI security scans and reports.AAB3 days ago★ 6776
  147. 146Vibe Prospecting explorium-ai · SecurityB2B company and contact data for lead lists, enrichment, research, and outreach. OAuth sign-in.BAB1 month ago★ 21176
  148. 147OpenClaw MCP Server freema · SecurityMCP server bridging Claude.ai/Desktop with self-hosted OpenClaw via OAuth 2.1.BAB1 month ago★ 18876
  149. 148kastell kastelldev · SecurityServer security audit (413 checks), hardening, and fleet management across 4 cloud providers.AAB14 days ago80/wk76
  150. 149eodly-mcp layergen · SecurityRead your team's end-of-day reports and roster from Eodly. Sign in with OAuth or use an API key.AAC13 days ago213/wk76
  151. 150Orbit Noveum · SecurityTask management for people and AI agents, with scoped OAuth access to issues, projects, and docs.AAByesterday★ 6676

Skills (93)

  1. 1reverse-skill-router zhaoxuya520 · SecurityUse the reverse-skill repository from Codex for authorized reverse engineering, security analysis, CTF, and defensive testing tasks. Requires the reverse-skill repository to be available as the current workspace or an explicitly supplied local path.AAA28 days ago★ 43k84
  2. 2slack-bot-builder sickn33 · SecurityBuild Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration.AAAyesterday★ 48k84
  3. 3reviewing-msbuild-code dotnet · SecurityReviews MSBuild code changes using a 24-dimension methodology. Activates for code review, PR review, pull request analysis, design review, architecture review, code quality assessment, or style check of MSBuild code. Covers backwards compatibility, ChangeWave discipline, performance, allocation awareness, test coverage, error message quality, logging, string comparison, API surface, target authoring, cross-platform correctness, code simplification, concurrency, naming, SDK integration, evaluation model integrity, correctness, dependency management, security, and build infrastructure.AAAtoday★ 5.5k82
  4. 4osint-operator-specialist-methods BitterSecurity · SecurityEvidence-led osint operator technical methods and evidence interpretation for the relevant environment.AAAtoday★ 6.4k82
  5. 5game-server-security gmh5225 · SecurityReview multiplayer authority, RPCs, sessions, authorization, replication, inventory, economy, purchases, retries, and replay. Use when server or backend state is the security boundary.AAAtoday★ 3.6k80
  6. 6supply-chain-security microsoft · SecurityActivate when reviewing or modifying dependency resolution, lockfile schema, package downloaders, signature/integrity checks, file integration cleanup, or anything that could expose APM to dependency confusion, typosquatting, malicious packages, or token leakage.AAAtoday★ 4.1k80
  7. 7security-audit davepoon · SecurityDeep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, and secrets scanning. Delegates to the Centinela (QA) agent.AAAyesterday★ 3.7k80
  8. 8security-issue xrplevm · SecurityCreate a security finding in the private peersyst/security repo with proper labels and format. Use when reporting a security vulnerability, concern, or observation found during audits or ad-hoc review.AAA4 days ago★ 1.4k80
  9. 9security-sweep androoAGI · SecuritySweep a codebase for secrets, injection, and missing permission checks — each finding demonstrated and ranked.AAA4 days ago★ 1.5k79
  10. 10memstack davepoon · Security127 production skills across 10 categories (Security, Deployment, Dev, Business, Content, SEO, Marketing, Product, Automation, Core). Skills auto-load based on your task. Includes localhost dashboard with Agent Runner, Burn Report, and session diary.AAAyesterday★ 3.7k78
  11. 11vibe-review KhazP · SecurityReview a proposed change against requirements, regressions, verification evidence, and relevant security risks.AAA16 days ago★ 3.2k77
  12. 12deslop foryourhealth111-pixel · SecurityRemove AI-generated code slop from a branch: unnecessary comments, redundant defensive checks, boilerplate, style drift, and type casts. Use for cleanup of AI-written code, not for broad code review, security audit, TDD, or final verification.AAAtoday★ 3.7k77
  13. 13code-review vstorm-co · SecurityReview Python code for quality, security, and best practicesAAAyesterday★ 1.1k77
  14. 14recon-for-sec yaklang · SecurityEntry P1 category router for reconnaissance and methodology. Use when mapping scope, drawing an attack surface from one application, discovering assets, fingerprinting technology, building endpoint inventory, and choosing the first high-value security testing path.BAA1 month ago★ 2.5k77
  15. 15Vulnerability prioritization Sec-Link · SecurityPrioritize vulnerabilities using asset criticality, exploitability, exposure, known exploitation, compensating controls, and business impact. Do not invent CVEs or affected versions.AAAyesterday★ 1.2k76
  16. 16Security Audit Reporter AgentEra · SecurityTriage raw security-scan findings (hardcoded secrets, injection patterns, vulnerable dependencies) into a prioritized, actionable security audit report. Use for security audit, code audit, vulnerability triage, and risk review.AAA7 days ago★ 1.7k75
  17. 17code-review vstorm-co · SecuritySystematic code review for bugs, security, style, and performanceAAAyesterday★ 1.1k75
  18. 18review digital-go-jp · SecurityReview changed code in this repo against the project's review checklist (readability, maintainability, performance, security, consistency).AAAtoday★ 67675
  19. 19security-check alibaba · Security提交或推送前的安全检查，扫描 API Key、访问令牌等敏感信息。AAB4 days ago★ 2.2k75
  20. 20cloudflare-security automateyournetwork · SecurityMonitor Cloudflare WAF, firewall events, audit logs, and threat intelligence.AAA2 days ago★ 68475
  21. 21connect-apps EvolvingAgentsLabs · SecurityConnect an administrator-enabled SaaS app for a user with a one-time OAuth consent link.AABtoday★ 45674
  22. 22authentication Zyrexnn · SecurityAssesses authentication flows, OAuth2 / OIDC implementations, session lifecycle management, and JWT security.AAAyesterday★ 95074
  23. 23cve-report Doezer · SecurityReport which CVEs were fixed in each Questarr release by diffing package-lock.json across version tags and checking OSV.devACAtoday★ 69274
  24. 24repo-overview alpha-omega-security · SecurityRun `brief --json` to produce a structured overview of the repository. Used by other skills as orientation.AABtoday★ 25574
  25. 25doc-only-threat-notes yaojingang · SecurityKeep reference notes about threat patterns for future security writing.AAA6 days ago★ 1.3k73
  26. 26ar-security-triage-external ArweaveTeam · SecurityReformat, evaluate against the Arweave threat model, and post an assessment on an externally reported security-tracker issue. Use only when the user explicitly invokes this skill with an issue URL.ACA4 days ago★ 1.1k73
  27. 27code-review timwuhaotian · SecurityComprehensive code review with security and performance checksAAByesterday★ 38373
  28. 28maintain c-hive · SecurityPeriodic health pass over this project — dependencies, security, CI, errors, runtime. Use when asked to maintain the project, do maintenance, or check its health.AAB19 days ago★ 40273
  29. 29my-skill PentesterFlow · SecurityOne line on what this playbook does, then a "Use when ..." clause so the agent knows when to load it (e.g. "Use when the target exposes X / you see Y in requests"). Max 1024 chars. This description is the ONLY thing the model sees until it loads the skill — make the trigger conditions explicit, since there is no separate `triggers` list.BAA1 month ago★ 1.4k73
  30. 30poc gemini-cli-extensions · SecuritySets up the necessary workspace, directories, and dependencies to test a vulnerability and generates a Proof-of-Concept.BAA2 months ago★ 79573
  31. 31aqe-review-quality proffesor-for-testing · SecurityReview Agentic QE changes and issue an evidence-backed quality verdict. Use for code review, regression-risk assessment, release readiness, quality-gate evaluation, security/performance/testability review, or checking whether a change has sufficient verification. Do not use when the user primarily asks to implement a feature.AAAyesterday★ 50772
  32. 32radio-sdr dhicoc · SecurityUse for authorized RF/SDR security research including signal identification, replay feasibility study in shielded labs, and wireless protocol analysis outside classic Wi-Fi.AAB12 days ago★ 27272
  33. 33token-security dragonked2 · SecurityToken analysis — mint/burn authority, permit, fee-on-transfer, rebasing, hooks, upgradeability. Load for any token, especially ones used as collateral, vault assets, or bridge assets.AABtoday★ 35472
  34. 34security sipyourdrink-ltd · SecuritySecurity review - OWASP, auth, secrets, input validation.AAByesterday★ 1.3k72
  35. 35codex-image byungjunjang · SecurityGenerate images via Codex CLI's built-in image_gen tool (gpt-image-2). OAuth auth — no API key needed. Codex CLI의 내장 image_gen 도구로 이미지 생성. OAuth 인증으로 API 키 불필요. Usage: /codex-image cherry blossom hanok, /codex-image --size 1024x1536 space cat, /codex-image --quality high seoul nightAAB20 days ago★ 29072
  36. 36agent-review Tsuzat · SecurityPerforms a deep-dive technical review of code changes, focusing on intent, security, edge cases, and performance. Use this when the user asks for a "review" or "quality check".BAA2 months ago★ 67772
  37. 37security-hardening chmonitor · SecurityRBAC configuration, row policies, quotas, network security, audit logging, and access control best practices.ACByesterday★ 30572
  38. 38review morganlinton · SecurityReview a change for correctness, security, and missing tests.AAB15 days ago★ 23671
  39. 39scan 0sec-labs · SecurityRun a full foxguard security scan on the repository or a specific pathAAB2 days ago★ 30571
  40. 40security-review design-sparx · SecuritySecurity review checklist for commits and PRs. Use before merging security-sensitive changes.AAByesterday★ 38671
  41. 41scan-skill zai-org · SecurityDeep security analysis of an individual skill before installationBAB2 months ago★ 46571
  42. 42cybersecurity-assurance-method yangheng95 · SecurityBuild read-only cybersecurity assurance packs from scoped threat evidence, control coverage, and incident readiness. Use for posture reviews, control mapping, remediation planning, or security decision support that must preserve evidence, uncertainty, and human authority.AABtoday★ 30971
  43. 43research-first ZaxbyHub · SecurityCodex adapter for research-before-planning work. Use when a task depends on current external facts, unfamiliar libraries, APIs, standards, security advisories, release notes, product behavior, or repo behavior that must be verified before planning or implementation.AAAtoday★ 50970
  44. 44engineering-principles Azure · SecurityIngestion architecture and implementation principles. Use for design, review, meaningful refactoring, Azure integration, document security, testing, or operational changes.AABtoday★ 18870
  45. 45gcp-agent-model-armor-shield GoogleCloudPlatform · SecurityConfigures Model Armor security policies (Prompt Injection, Jailbreak, RAI filters).AAByesterday★ 37970
  46. 46cloud-security dragonked2 · SecurityCloud security assessment: IAM misconfigurations, S3 bucket exposure, SSRF via cloud metadata, container escape, and Kubernetes RBAC bypass.AABtoday★ 35270
  47. 47codebase-review-swarm ZaxbyHub · SecurityClaude Code adapter for running a rigorous, quote-grounded codebase review or security/QA/accessibility/performance/AI-slop/enhancement audit. Use for full-repo or large-subsystem review reports; not for normal implementation.AAAtoday★ 50970
  48. 48code-review agentjido · SecurityReviews code changes for quality, security, and best practices.AAB3 days ago★ 21170
  49. 49codexbar lizhelang · SecurityOperate Codexbar's bundled CLI for OpenAI OAuth account login, import, listing, and activation. Use when the user mentions codexbar, OpenAI OAuth login, add account, activate account, or switch account.AAByesterday★ 16270
  50. 50snyk TerminalSkills · SecurityFind and fix vulnerabilities in code and dependencies with Snyk. Use when a user asks to scan for security vulnerabilities, audit npm packages, check Docker images for CVEs, or integrate security into CI/CD.AAB6 days ago★ 17470
  51. 51android-security HoangNguyen0403 · SecuritySecure Android data at rest and authentication secrets. Use for auth tokens, encrypted storage, and app-data isolation; defer WebView/Intent/FileProvider to android-legacy-security and TLS/certificate pinning to android-networking.AAA3 days ago★ 57970
  52. 52homescript rusty4444 · SecurityHome automation scripting language. Write natural-language scripts that Hermes executes against your Home Assistant instance. Workspace-safe — scripts are audited via the HA security layer before execution.AAByesterday★ 8170
  53. 53moai-review modu-ai · SecurityCode review with security and @MX tag compliance checkAABtoday★ 1.2k69
  54. 54make-check openfga · SecurityRun full pre-commit validation (fmt, lint, test, security) and report resultsAABtoday★ 12969
  55. 55sentinel SparkDevNetwork · SecurityRun a read-only Rock security review with the Sentinel agent. Use when the user says "sentinel", "security review", "security check my changes", "is this secure", or "review the X feature for security". Works on a PR, a commit, uncommitted changes, a file, a folder, or a whole feature. Codex and Grok second opinions run automatically when installed; add "--no-cross-check" to skip them. Do NOT use for correctness or style review.AFAtoday★ 69369
  56. 56hello-secure backbay-labs · SecurityA simple skill demonstrating clawdstrike securityAACyesterday★ 29869
  57. 57server-security majiayu000 · Security服务器安全审计与加固。扫描 SSH、防火墙、端口暴露、文件权限、暴力破解等安全问题，生成报告并提供一键修复。当用户说服务器安全、安全审计、安全检查、安全加固时使用AAByesterday★ 28869
  58. 58operate-isms kriss-b · SecurityOperate an ISO 27001 / ISO 42001 / NIS 2 information security management system stored as markdown in this repository. Use when the user asks to instantiate, review, update, or run compliance checks against their ISMS, policies, risk register, or Statement of Applicability.AAB2 days ago★ 6169
  59. 59migration_helper_format GoogleCloudPlatform · SecurityTake a source SIEM rule and format its content for readability, then insert it into a YARA-L rule template.AAB13 days ago★ 9469
  60. 60pentest-tools Unclecheng-li · Security渗透工具速查 — 编码解码、反向Shell、红队工具、漏洞利用、密码攻击、内网工具、凭据窃取、提权、隧道代理、系统命令、信息收集、域渗透、Web工具、Windows工具BAB1 month ago★ 49069
  61. 61convex-reviewer convex · SecurityConvex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.AAByesterday★ 13669
  62. 62cis-k8s-v1110-5.7.3 CyberStrikeus · SecurityApply Security Context to Your Pods and Containers (Manual)ACB6 days ago★ 3.2k69
  63. 63eks-discovery aws-samples · SecurityEKS cluster reconnaissance and environment discovery. Detects compute strategy, IaC tooling, CI/CD pipelines, add-on inventory, networking, security posture, and observability.AAByesterday★ 8568
  64. 64cve-remediation NVIDIA-AI-Blueprints · SecurityDiscoverability shim for the Retail-Agentic-Commerce CVE remediation Codex skill. Use for CVE, BDSA, GHSA, OSV, Dependabot, Black Duck, Snyk, npm, PyPI, or package advisory remediation.AAB6 days ago★ 8168
  65. 65b24phpsdk-developer bitrix24 · SecurityUse when writing product application code with bitrix24/b24phpsdk, integrating Bitrix24 webhooks or OAuth, choosing SDK service calls, handling SDK results, errors, pagination, batch calls, or tests outside the SDK repositoryAAB20 days ago★ 10268
  66. 66node openshift-eng · SecurityOpenShift Node team assistant. Covers kubelet, MCO, CRI-O, crun, conmonrs, Kueue operator, Jira (OCPNODE/OCPBUGS), Red Hat KB/support cases, Prometheus, and K8s/OCP docs. Triggers on OpenShift node-layer development, deployment, debugging, or team workflow tasks. For CVE/vulnerability triage, analysis, or reporting, defer to node-cve. For bug triage and assignment, defer to node-bug.AAByesterday★ 12068
  67. 67code-review skrun-dev · SecurityReview code for quality, bugs, security issues, and suggest improvements. Use when asked to review, audit, or improve code.AAB28 days ago★ 21068
  68. 68security-patterns Ch1nfo · SecuritySecurity pattern matching for code audit and content inspection: grep strings for source auditing, malicious-string signatures, PHP magic hashes, error-message patterns. Use for repository scanning, source-code auditing, and detecting dangerous functions or malicious content in files.AAB29 days ago★ 11768
  69. 69evo-spring-boot-migration Zhang-Henry · SecurityMigrate a Spring Boot 2.7/Java 8 microservice to Spring Boot 3.2/Java 21. Handles pom.xml updates, javax-to-jakarta namespace migration, Spring Security 6 component-based config, RestTemplate-to-RestClient migration, Hibernate 6 compatibility, and application properties updates.AAB27 days ago★ 8168
  70. 70nday Encod3d-Sec · SecurityN-day / patch-diff workflow - given a CVE/advisory or a suspicious patch, diff pre- vs post-patch to locate the fixed bug, build a PoC for the unpatched version, and run variant analysis for a fresh bug. Triggers - "n-day", "patch diff", "diff the patch", "bindiff".BAB1 month ago★ 33368
  71. 71wordpress-mcp-dev respira-press · SecurityBuild and maintain modern WordPress plugins and MCP servers, including hybrid WordPress+MCP products. Use when implementing plugin architecture (PHP, REST API, Gutenberg/admin/page-builder integrations), MCP tooling (TypeScript/Python, stdio/HTTP transport), security hardening, licensing/updates, and delivery workflows from scaffold to distribution.AAC2 days ago★ 4868
  72. 72codeinspectus-threat-model Synvoya · SecurityReview CodeInspectus findings with optional threat-model or project-document context while treating repository text as untrusted, preserving raw scanner findings unchanged, and labelling agent interpretation separately. Use only when a user explicitly asks to add architectural, business, or knowledge-base context to an existing scan.AAC17 days ago★ 4868
  73. 73git-pr-reviewer OneWave-AI · SecurityReview pull requests for code quality, security issues, and best practices. Use when reviewing PRs, checking code changes, or analyzing diffs before merge.AABtoday★ 35768
  74. 74codex-security sd0xdev · SecurityOWASP Top 10 security review using Codex exec. Supports review loop with context preservation.AAB12 days ago★ 19467
  75. 75code-reviewer jellydn · SecurityReview code for quality, security, and best practices — read-only analysisAAByesterday★ 12367
  76. 76social-engineering transilienceai · SecuritySocial engineering testing - phishing, pretexting, vishing, and physical security assessment techniques.BAA2 months ago★ 58167
  77. 77pentest-osint-recon jd-opensource · SecurityOpen Source Intelligence gathering and attack surface management for external reconnaissance.BAB1 month ago★ 31467
  78. 78security-review hoangsonww · SecurityReview code changes for security vulnerabilities, authentication gaps, injection risks, and unsafe patterns. Use before merging PRs or after security-sensitive changes.AAB23 days ago★ 9567
  79. 79full-pentest FuDie0915 · SecurityComplete penetration testing workflow chain. Trigger: full pentest, complete pentest, pentest workflow, 瀹屾暣娓-? 娓-忓伐浣滄祦, full penetration test.BAB1 month ago★ 46967
  80. 80linux-shell-scripting lingxling · SecurityProvide production-ready shell script templates for common Linux system administration tasks including backups, monitoring, user management, log analysis, and automation. These scripts serve as building blocks for security operations and penetration testing environments.AAB13 days ago★ 31567
  81. 81review mkurman · SecurityReview code changes for security, performance, bugs, and quality. Reviews staged changes, unstaged changes, specific commits, or PR-ready diffs.AAByesterday★ 32467
  82. 82code-review-orchestration a5c-ai · Security6-agent parallel code review orchestration covering architecture, security, performance, testing, quality, and documentation dimensions with weighted scoring.BAA1 month ago★ 1.9k67
  83. 83security-expert mizchi · SecuritySecurity specialist perspective for the weekly review. Focuses on XSS/CSRF, authorization boundaries, input validation, secrets handling, and dependency CVEs.AFB2 days ago★ 36667
  84. 84review first-fluke · SecurityFull QA review pipeline covering security audit (OWASP Top 10), performance analysis, accessibility check (WCAG 2.1 AA), and code quality reviewAAB2 days ago★ 22466
  85. 85pr-review leochiu-a · SecurityAI code review for a PR/MR: analyze the diff, identify bugs/security/performance issues, post inline review comments, and approve when there are no findings. Use when the user wants to review a pull request or merge request, run code review, check PR for issues, or mentions "review pr", "pr review", "review this PR".AAB15 days ago★ 8066
  86. 86security-review romarayt · SecurityAudit raytsystem changes for prompt injection, provenance bypass, path/symlink/hardlink escape, secret leakage, stale fencing, partial promotion, unsafe parsing, and unapproved side effects. Use for SECURITY REVIEW, adversarial testing, recovery review, or approval-boundary validation; remain independent and read-only.AAB12 days ago★ 15066
  87. 87Use Snyk to do security scans and audit project security lirantal · SecurityA handful of commands available for code security, dependency security and other security audits using SnykAAB19 days ago★ 6666
  88. 88generate-attack-vector yogsoth-ai · SecurityGenerate a concrete executable attack/probe against a chosen threat surface.AAAtoday★ 50466
  89. 89map-threat-surface yogsoth-ai · SecurityEnumerate attackable dimensions of an artifact and rate exposure/accessibility.AAAtoday★ 50466
  90. 90classify-assumption-vulnerability yogsoth-ai · SecurityClassify assumptions by load-bearing importance and vulnerability.AAAtoday★ 50466
  91. 91security-passwords Ch1nfo · SecurityTop password lists for password brute force 密码爆破/撞库: common passwords, darkweb leaks, worst passwords, default credentials. Curated essentials.AAB29 days ago★ 11766
  92. 92auto-review bit-vcs · SecurityReview code changes and provide structured feedback. Use when: reviewing PRs, analyzing code diffs for bugs/security/style, or processing review.request relay events.AAB29 days ago★ 7466
  93. 93fix-security devcodex-labs · Security安全修复子类型规范 — CVE/漏洞响应 + 四项安全专项扫描ACC2 days ago★ 43966