Security AI Agent Skills
AI agent skills for application security. Vulnerability scanning, secure coding patterns, authentication, and audit workflows.
199 listings
Dependency Management Deps Audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
FastMCP LaTeX Server (tex-mcp)
A small FastMCP-based Microservice that renders LaTeX to PDF. The server exposes MCP tools to render raw LaTeX or templates and produces artifacts (a .tex file and .pdf) under src/artifacts/. This repository is prepared to run locally and to be loaded by Claude Desktop (via the Model Context Protocol). The default entrypoint is runserver.py. - Render raw LaTeX to .tex and (optionally) .pdf using p
Threat Modeling Expert
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use for security architecture reviews, threat identification, and secure-by-design planning.
Linkerd Patterns
Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, or implementing zero-trust networking with minimal overhead.
SSH Penetration Testing
This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques.
K8s Security Policies
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Xcode MCP Server
MCP ServerAn MCP (Model Context Protocol) server providing comprehensive Xcode integration for AI assistants. This server enables AI agents to interact with Xcode projects, manage iOS simulators, and perform various Xcode-related tasks with enhanced error handling and support for multiple project types. - Set active projects and get detailed project information - Create new Xcode projects from templates (iO
Security Best Practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Cloudflare Skill for OpenCode
Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), networking (Tunnel, Spectrum), security (WAF, DDoS), and infrastructure-as-code (Terraform, Pulumi). Use for any Cloudflare development task.
MCP Simple Timeserver
MCP ServerOne of the strange design decisions Anthropic made was depriving Claude of timestamps for messages sent by the user in claude.ai or current time in general. Poor Claude can't tell what time it is! mcp-simple-timeserver is a simple MCP server that fixes that. This server provides the following tools: All tools (except getlocaltime) use accurate time from NTP servers. If NTP is unavailable, they gra
Service Mesh Expert
Expert service mesh architect specializing in Istio, Linkerd, and cloud-native networking patterns. Masters traffic management, security policies, observability integration, and multi-cluster mesh con
Smart Tree
After install, run st --cleanup to scan for and remove any malicious AI integrations. Security scanner detects supply chain attacks targeting AI assistants. Why this matters: Some npm packages install MCP servers that phone home to external endpoints, fetch mutable content via IPFS/IPNS, and can inject behavioral modifications into your AI sessions. These supply chain attacks are difficult to dete
Features
Google News MCP Server A Model Context Protocol (MCP) server implementation that provides Google News search capabilities via SerpAPI integration. Automatically categorizes news results and supports multiple languages and regions. Comprehensive search capabilities including query-based search, topic search, publication filtering and story coverage. Supports multiple languages and regions through c
Computer Use Agents
Build AI agents that interact with computers like humans do - viewing screens, moving cursors, clicking buttons, and typing text. Covers Anthropic's Computer Use, OpenAI's Operator/CUA, and open-source alternatives. Critical focus on sandboxing, security, and handling the unique challenges of vision-based control. Use when: computer use, desktop automation agent, screen control AI, vision-based agent, GUI automation.
Safe Local Python Executor
MCP ServerAn MCP server (stdio transport) that wraps Hugging Face's LocalPythonExecutor (from the smolagents framework). It is a custom Python runtime that provides basic isolation/security when running Python code generated by LLMs locally. It does not require Docker or VM. This package allows to expose the Python executor via MCP (Model Context Protocol) as a tool for LLM apps like Claude Desktop, Cursor
CLI MCP Server
MCP ServerA secure Model Context Protocol (MCP) server implementation for executing controlled command-line operations with comprehensive security features. 1. Overview 2. Features 3. Configuration 4. Available Tools - runcommand - showsecurityrules 5. Usage with Claude Desktop - Development/Unpublished Servers Configuration - Published Servers Configuration 6. Security Features 7. Error Handling 8. Develop
Cloud Architect
Expert cloud architect specializing in AWS/Azure/GCP multi-cloud
Esp MCP
MCP ServerThe goal of this MCP is to: - Consolidate ESP-IDF and related project commands in one place. - Simplify getting started using only LLM communication. Simply find a command that is missing from this MCP and create a PR for it! If you want someone to help you with this implementation, just open an issue. This project is currently a Proof of Concept (PoC) for an MCP server tailored for ESP-IDF workfl
VikingDB MCP server
MCP Serveran mcp server for vikingdb store and search VikingDB is a high-performance vector database developed by ByteDance. You can easily use it following the doc bellow: The server implements the following tools: - vikingdb-colleciton-intro: introduce the collection of vikingdb - vikingdb-index-intro: introduce the index of vikingdb - vikingdb-upsert-information: upsert information to vikingdb for later
Security Compliance Compliance Check
You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform compliance audits and provide implementation guidance.
Nocodb MCP Server
MCP ServerThe NocoDB MCP Server enables seamless interaction with your NocoDB database using the Model Context Protocol (MCP). This server makes it easy to perform CRUD (Create, Read, Update, Delete) operations on NocoDB tables through natural language commands. JSON location file in: exampleupload.json This repository is a TypeScript-based fork of NocoDB-MCP-Server. It retains the core functionality while
K8s Manifest Generator
Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade Kubernetes configurations.
Coinmarket MCP server
MCP ServerCoinmarket MCP Server The server implements a few of the Coinmarket API endpoints - Custom coinmarket:// URI scheme for accessing individual notes - Each note resource has a name, description and text/plain mimetype The server implements two tools: - get-currency-listings: Get the latest currency listings - get-quotes: Get quotes for tokens - Takes "slug" (example: bitcoin) or "symbol" (example: B
Unichat MCP Server in Python
MCP ServerAlso available in TypeScript Send requests to OpenAI, MistralAI, Anthropic, xAI, Google AI, DeepSeek, Alibaba, Inception using MCP protocol via tool or predefined prompts. Vendor API key required The server implements one tool: - unichat: Send a request to unichat - Takes "messages" as required string arguments - Returns a response - codereview - Review code for best practices, potential issues, a