Security AI Agent Skills

MCP (Model Context Protocol) server for Biothings.io This server implements the Model Context Protocol (MCP) for BioThings, providing a standardized interface for accessing and manipulating biomedical data. MCP enables AI assistants and agents to access specialized biomedical knowledge through structured interfaces to authoritative data sources. Supported BioThings data sources include: - mygene.i

This project provides a modular, resource-oriented FastMCP server for interacting with Microsoft Graph API. It is designed for extensibility, maintainability, and security, supporting advanced queries for users, sign-in logs, MFA status, and privileged users. - Modular Resource Structure: - Each resource (users, sign-in logs, MFA, etc.) is implemented in its own module under src/msgraphmcpserver/r

Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking. Use when: file upload, S3, R2, presigned URL, multipart.

Build security Blue Books for sensitive apps

An MCP (Model Context Protocol) server providing comprehensive Xcode integration for AI assistants. This server enables AI agents to interact with Xcode projects, manage iOS simulators, and perform various Xcode-related tasks with enhanced error handling and support for multiple project types. - Set active projects and get detailed project information - Create new Xcode projects from templates (iO

One of the strange design decisions Anthropic made was depriving Claude of timestamps for messages sent by the user in claude.ai or current time in general. Poor Claude can't tell what time it is! mcp-simple-timeserver is a simple MCP server that fixes that. This server provides the following tools: All tools (except getlocaltime) use accurate time from NTP servers. If NTP is unavailable, they gra

A Model Context Protocol (MCP) server that provides real-time WallStreetBets data for analysis with Claude or other LLM clients. - Fetch WallStreetBets Posts: Filter posts by score, comment count, and content type - Detailed Post Analysis: Extract comments, links, and metadata from posts - External Link Collection: Gather links being shared in WSB discussions - Analysis Templates: Ready-to-use pro

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". It provides comprehensive techniques for identifying authentication and session management weaknesses in web applications.

English | 中文 A lightweight JVM monitoring and diagnostic MCP (Multi-Agent Communication Protocol) server implementation based on native JDK tools. Provides AI agents with powerful capabilities to monitor and analyze Java applications without requiring third-party tools like Arthas. - Zero Dependencies: Uses only native JDK tools (jps, jstack, jmap, etc.) - Lightweight: Minimal resource consumption

A Model Context Protocol (MCP) server for interacting with GitLab merge requests and issues. This project implements a server using the Model Context Protocol (MCP) that allows AI agents to interact with GitLab repositories. It provides tools for: - Listing available GitLab projects - Fetching merge request details and comments - Getting merge request diffs - Adding comments to merge requests - Ad

An MCP (Model Context Protocol) server that enables running Bruno collections. This server allows LLMs to execute API tests using Bruno and get detailed results through a standardized interface. Run Bruno collections using the Bruno CLI Support for environment files Support for environment variables Detailed test results including: Overall success/failure status Test summary (total, passed, failed

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

You are an expert in Solidity and smart contract security.

an mcp server for vikingdb store and search VikingDB is a high-performance vector database developed by ByteDance. You can easily use it following the doc bellow: The server implements the following tools: - vikingdb-colleciton-intro: introduce the collection of vikingdb - vikingdb-index-intro: introduce the index of vikingdb - vikingdb-upsert-information: upsert information to vikingdb for later

Transform your AI assistant into a Dutch railways expert! This MCP server connects Claude to real-time NS (Nederlandse Spoorwegen) travel information, making it your perfect companion for navigating the Netherlands by train. You can install this server in three ways: Update your Claude configuration file (~/Library/Application Support/Claude/claudedesktopconfig.json): You can get an API key from N

A collection of Model Context Protocol (MCP) servers that provide AI assistants with access to native Apple applications on macOS. - macOS (uses AppleScript and macOS-specific APIs) - Node.js 18+ (22+ for Apple Messages) - Full Disk Access granted to your terminal app (System Settings > Privacy & Security > Full Disk Access) — required for reading the Messages database - The associated Apple app m

Vectara-MCP provides any agentic application with access to fast, reliable RAG with reduced hallucination, powered by Vectara's Trusted RAG platform, through the MCP protocol. You can install the package directly from PyPI: - Security: Built-in authentication via bearer tokens - Encryption: HTTPS ready - Rate Limiting: 100 requests/minute by default - CORS Protection: Configurable origin validatio

A powerful AI-driven Security Operations Center (SOC) Text2SQL framework based MCP Server (Local and Remote) for converting natural language Prompts to SQL queries dynamically, with integrated security threat analysis and monitoring. - Text2SQL Conversion: Convert natural language queries to optimized SQL - Multiple Interfaces: Support for STDIO, SSE, and REST API - Security Threat Analysis: Built

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.

Analyze AWS infrastructure security using Cyntrisec MCP tools. Use when asked about AWS attack paths, security findings, IAM permissions, compliance status, or remediation recommendations. Guides tool selection and workflow patterns for comprehensive security assessments.

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

An MCP server for interacting with the Bluesky social network via the atproto client. :wave: Leave an issue if you have any problems running this MCP. I should be able to push out fixes pretty quickly. Get your Bluesky app password at: https://bsky.app/settings/app-passwords Add the following to your MCP config file (Note that the version is pinned): - For security reasons, I think its best to kee

This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications.