Security AI Agent Skills

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Shared configuration patterns for project setup commands. Provides security hooks, Claude framework structure templates, and framework detection patterns used across multiple setup commands.

A Model Context Protocol (MCP) server providing comprehensive cryptocurrency and Web3 analytics through intelligent tool orchestration. Hive Intelligence MCP Server enables AI assistants to access a wide range of cryptocurrency, DeFi, and Web3 analytics through a unified MCP interface. The server provides both dynamic and category-specific access to over 200+ specialized tools covering market data

A Model Context Protocol server for interacting with Ledger CLI, a powerful, double-entry accounting system accessible from the command line. This server allows Large Language Models to query and analyze your financial data through the Ledger CLI tool. This MCP server exposes Ledger CLI's functionality through a standardized interface, making it easy for AI assistants to help you with financial re

Analyze AWS infrastructure security using Cyntrisec MCP tools. Use when asked about AWS attack paths, security findings, IAM permissions, compliance status, or remediation recommendations. Guides tool selection and workflow patterns for comprehensive security assessments.

A Model Context Protocol (MCP) server for interacting with GitLab merge requests and issues. This project implements a server using the Model Context Protocol (MCP) that allows AI agents to interact with GitLab repositories. It provides tools for: - Listing available GitLab projects - Fetching merge request details and comments - Getting merge request diffs - Adding comments to merge requests - Ad

English | 中文 A lightweight JVM monitoring and diagnostic MCP (Multi-Agent Communication Protocol) server implementation based on native JDK tools. Provides AI agents with powerful capabilities to monitor and analyze Java applications without requiring third-party tools like Arthas. - Zero Dependencies: Uses only native JDK tools (jps, jstack, jmap, etc.) - Lightweight: Minimal resource consumption

Daisys-mcp is a beta version and doesn't have a stable release yet. But you can try it out by doing the following: 1. Get an account on Daisys and create an username and password. If you run on mac os run the following command: If you run on linux run the following command: 2. Add the following configuration to the mcp config file in your MCP client (Claude Desktop, Cursor, mcp-cli, mcp-vscode, et

An MCP server for checking and revoking ERC-20 token allowances, enhancing security and control. - Fetch Token Approvals: Retrieve all ERC20 token approvals for a wallet on a specified chain, including token details, balances, and USD values at risk. - Revoke Allowances: Submit transactions to revoke ERC20 token allowances for specific spenders. - Check Transaction Status: Verify the success or fa

Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they're often wrong. Firestore queries are limited, and you learn this after you've designed your data model. This skill covers Firebase Authentication, Firestore, Realtime Database, Cloud Functions, Cloud Storage, and Firebase Hosting. Key insight: Firebase is optimized for read-heavy, denormalized data. I

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". It provides comprehensive techniques for identifying authentication and session management weaknesses in web applications.

One of the strange design decisions Anthropic made was depriving Claude of timestamps for messages sent by the user in claude.ai or current time in general. Poor Claude can't tell what time it is! mcp-simple-timeserver is a simple MCP server that fixes that. This server provides the following tools: All tools (except getlocaltime) use accurate time from NTP servers. If NTP is unavailable, they gra

An implementation of a Model Context Protocol (MCP) for internet speed testing. It allows AI models and agents to measure, analyze, and report network performance metrics through a standardized interface. 📦 Available on PyPI: https://pypi.org/project/mcp-internet-speed-test/ 🚀 Quick Start: The Model Context Protocol (MCP) provides a standardized way for Large Language Models (LLMs) to interact w

This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". It provides comprehensive guidance for leveraging the Metasploit Framework in security assessments.

The Model Context Protocol (MCP) standardizes how Large Language Models (LLMs) talk to external services like Supabase. It connects AI assistants directly with your Supabase project and allows them to perform tasks like managing tables, fetching config, and querying data. See the full list of tools. Before setting up the MCP server, we recommend you read our security best practices to understand t

Instruction to developer: save this file as .cursorrules and place it on the root project directory

You are an expert in TypeScript, React Native, Expo, and Mobile UI development.

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters).

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

An MCP Server implementation that integrates the Balldontlie API, to provide information about players, teams and games for the NBA, NFL and MLB. - Gets the list of team from one of the following leagues NBA (National Basketball Association), MLB (Major League Baseball), NFL (National Football League) - league (enum ['NBA', 'NFL', 'MLB']): The sports league to get teams for - getplayers - Gets the

A Model Context Protocol server implementation for ChatterBox, enabling AI agents to interact with online meetings and generate meeting summaries. The ChatterBox MCP Server provides tools for AI agents to: - Join online meetings (Zoom, Google Meet, or Microsoft Teams) - Capture transcripts and recordings - Generate meeting summaries To install chatterboxio-mcp-server for Claude Desktop automatical

A comprehensive Model Context Protocol (MCP) server that provides Claude Desktop and other MCP clients with tools for Kafka Schema Registry operations. Features advanced schema context support, multi-registry management, and comprehensive schema export capabilities. Latest Version: v2.1.5 | Docker: aywengo/kafka-schema-reg-mcp:stable - 🚀 Quick Start - ✨ Key Features - 🛠️ Claude Code Skills - 📦

This MCP server allows you to access OpenAI's ChatGPT API directly from Claude Desktop. 📝 Read about why I built this project: I Built an AI That Talks to Other AIs: Demystifying the MCP Hype - Call the ChatGPT API with customisable parameters - Aks Claude and ChatGPT to talk to each other in a long running discussion! - Configure model versions, temperature, and other parameters - Use web search