Security AI Agent Skills
AI agent skills for application security. Vulnerability scanning, secure coding patterns, authentication, and audit workflows.
203 listings
TurboMCP
Production-ready Rust SDK for the Model Context Protocol (MCP) with zero-boilerplate development and progressive enhancement. Build MCP servers in seconds with automatic schema generation, type-safe handlers, and multiple transport protocols. - Rust 1.89.0+ (Edition 2024) - Check with rustc --version - Tokio async runtime Add to your Cargo.toml: Or with cargo: TurboMCP uses feature flags for progr
AWS Penetration Testing
This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment.
Graphql Architect
Master modern GraphQL with federation, performance optimization,
Esp MCP
The goal of this MCP is to: - Consolidate ESP-IDF and related project commands in one place. - Simplify getting started using only LLM communication. Simply find a command that is missing from this MCP and create a PR for it! If you want someone to help you with this implementation, just open an issue. This project is currently a Proof of Concept (PoC) for an MCP server tailored for ESP-IDF workfl
NotebookLM MCP Server (Security Hardened)
Zero-hallucination answers • Gemini Deep Research • 14 Security Layers • Enterprise Compliance What's New 2026 • Deep Research • Document API • Create Notebooks • Security • Install - 🔍 Query your NotebookLM notebooks — source-grounded, zero-hallucination answers - 📚 Create & manage notebooks programmatically — no manual clicking - 🎙️ Generate audio overviews — podcast-style summaries of your d
YouTube Transcript Server
A Model Context Protocol server that enables retrieval of transcripts from YouTube videos. This server provides direct access to video captions and subtitles through a simple interface. To install YouTube Transcript Server for Claude Desktop automatically via Smithery: - gettranscript - Extract transcripts from YouTube videos - url (string, required): YouTube video URL, Shorts URL, or video ID - l
Solidity Security
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
IDA Pro MCP Server
IDA Pro MCP Server is a plugin that allows remote querying and control of IDA Pro through the Model Context Protocol (MCP) interface. This plugin enables AI assistants (such as Claude) to interact directly with IDA Pro for binary analysis tasks. This server provides a series of tools that allow AI assistants to perform the following operations: - Get byte data from specific addresses - Get disasse
Computer Use Agents
Build AI agents that interact with computers like humans do - viewing screens, moving cursors, clicking buttons, and typing text. Covers Anthropic's Computer Use, OpenAI's Operator/CUA, and open-source alternatives. Critical focus on sandboxing, security, and handling the unique challenges of vision-based control. Use when: computer use, desktop automation agent, screen control AI, vision-based agent, GUI automation.
AXON
"Not a browser for humans that AI can use. A browser built for AI that humans can watch." Quick Start • Benchmarks • Architecture • Security • Documentation Traditional browsers (Chrome, Firefox) and automation tools (Playwright, Selenium) were built for human retinas and pixels. Treating a web page as an XML document or an Accessibility Tree is the wrong abstraction for intelligence. Axon is enti
Firmware Analyst
Expert firmware analyst specializing in embedded systems, IoT
FastMCP LaTeX Server (tex-mcp)
A small FastMCP-based Microservice that renders LaTeX to PDF. The server exposes MCP tools to render raw LaTeX or templates and produces artifacts (a .tex file and .pdf) under src/artifacts/. This repository is prepared to run locally and to be loaded by Claude Desktop (via the Model Context Protocol). The default entrypoint is runserver.py. - Render raw LaTeX to .tex and (optionally) .pdf using p
SSH Penetration Testing
This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques.
mcpmysqlserverpro
mcpmysqlserverpro is not just about MySQL CRUD operations, but also includes database anomaly analysis capabilities and makes it easy for developers to extend with custom tools. - Supports all Model Context Protocol (MCP) transfer modes (STDIO, SSE, Streamable Http) - Supports OAuth2.0 - Supports multiple SQL execution, separated by ";" - Supports querying database table names and fields based on
SMTP Penetration Testing
This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". It provides comprehensive techniques for testing SMTP server security.
Apple MCP Servers
A collection of Model Context Protocol (MCP) servers that provide AI assistants with access to native Apple applications on macOS. - macOS (uses AppleScript and macOS-specific APIs) - Node.js 18+ (22+ for Apple Messages) - Full Disk Access granted to your terminal app (System Settings > Privacy & Security > Full Disk Access) — required for reading the Messages database - The associated Apple app m
TypeScript Expo Jest Detox
You are an expert in TypeScript, React Native, Expo, and Mobile UI development.
Security Operations Multi-Tool Platform (MCP)
A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools. - Unified Interface: Single entry point for multiple security tools - Docker Support: Easy deployment using Docker - JSON Output: Consistent JSON output format across all tools - Error Handling: R
K8s Manifest Generator
Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade Kubernetes configurations.
MCP AI SOC Sher
A powerful AI-driven Security Operations Center (SOC) Text2SQL framework based MCP Server (Local and Remote) for converting natural language Prompts to SQL queries dynamically, with integrated security threat analysis and monitoring. - Text2SQL Conversion: Convert natural language queries to optimized SQL - Multiple Interfaces: Support for STDIO, SSE, and REST API - Security Threat Analysis: Built
mcp-server-ledger: A Ledger CLI MCP Server
A Model Context Protocol server for interacting with Ledger CLI, a powerful, double-entry accounting system accessible from the command line. This server allows Large Language Models to query and analyze your financial data through the Ledger CLI tool. This MCP server exposes Ledger CLI's functionality through a standardized interface, making it easy for AI assistants to help you with financial re
Security Bluebook Builder
Build security Blue Books for sensitive apps
MCP Server for Odoo
An MCP server that enables AI assistants like Claude to interact with Odoo ERP systems. Access business data, search records, create new entries, update existing data, and manage your Odoo instance through natural language. Works with any Odoo instance! Use YOLO mode for quick testing and demos with any standard Odoo installation. For enterprise security, access controls, and production use, insta
Plane MCP Server
A Model Context Protocol (MCP) server that enables LLMs to interact with Plane.so, allowing them to manage projects and issues through Plane's API. Using this server, LLMs like Claude can directly interact with your project management workflows while maintaining user control and security. - List all projects in your Plane workspace - Get detailed information about specific projects - Create new is