Security AI Agent Skills

English | 中文 A MCP server that send desktop notifications with sound effect when agent tasks are completed. - Send system desktop notifications after agent tasks completion - Play alert sounds to grab user attention, with sound file inside. - Cross-platform support (Windows, macOS, Linux) - Based on standard MCP protocol, integrates with various LLM clients After installation, call the module dire

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform compliance audits and provide implementation guidance.

A Rust-based server designed to bridge the gap between a Wazuh Security Information and Event Management (SIEM) system and applications requiring contextual security data, specifically tailored for the Claude Desktop Integration using the Model Context Protocol (MCP). Modern AI assistants like Claude can benefit significantly from real-time context about the user's security environment. The Wazuh

You are a workflow automation expert specializing in creating efficient CI/CD pipelines, GitHub Actions workflows, and automated development processes. Design automation that reduces manual work, improves consistency, and accelerates delivery while maintaining quality and security.

An MCP (Model Context Protocol) server that enables running Bruno collections. This server allows LLMs to execute API tests using Bruno and get detailed results through a standardized interface. Run Bruno collections using the Bruno CLI Support for environment files Support for environment variables Detailed test results including: Overall success/failure status Test summary (total, passed, failed

- 🚀 99% fewer API calls for batch operations (150-300 → 1) - ⚡ 88% token reduction with compact response formats - 🎯 Batch Dedupe Mode - Check 50-100 titles in one operation - 🔄 Smart Caching - 70-85% API call reduction - 🛡️ Safety Features - Multi-season confirmation, validation - 📦 4 Powerful Tools - Consolidated from 8 for clarity - 🤖 Automated Security Scanning - Dependabot for dependenc

This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". It provides comprehensive guidance for leveraging the Metasploit Framework in security assessments.

Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.

A collection of Model Context Protocol (MCP) servers that provide AI assistants with access to native Apple applications on macOS. - macOS (uses AppleScript and macOS-specific APIs) - Node.js 18+ (22+ for Apple Messages) - Full Disk Access granted to your terminal app (System Settings > Privacy & Security > Full Disk Access) — required for reading the Messages database - The associated Apple app m

A portable, single-binary system auditing tool for Linux. Like Lynis but faster and smarter. No configuration needed. No dependencies. Just run. - 🔒 Security: Firewall, SSH hardening, SSL/TLS, fail2ban, SUID binaries, open ports - 🚀 Services: Systemd services, web servers, databases, Docker - 💻 Resources: CPU, RAM, disk usage, top processes - 💾 Storage: SMART health, inode usage, filesystem er

Expert deployment engineer specializing in modern CI/CD pipelines,

A personal MCP (Model Context Protocol) server for securely storing and accessing API keys across projects using the macOS Keychain. ServeMyAPI allows you to store API keys securely in the macOS Keychain and access them through a consistent MCP interface. This makes it easy to: - Store API keys securely (they're never visible in .env files or config files) - Access the same keys across multiple pr

This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". It provides comprehensive techniques for identifying authentication and session management weaknesses in web applications.

Netresearch AI skill for assessing and enhancing software projects to meet enterprise-grade standards for security, quality, and automation. This is an Agent Skill following the open standard originally developed by Anthropic and released for cross-platform use. Supported Platforms: - ✅ Claude Code (Anthropic) - ✅ GitHub Copilot - ✅ Other skills-compatible AI agents - OpenSSF Framework Alignment -

Expert cloud architect specializing in AWS/Azure/GCP multi-cloud

|

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.

An MCP server (stdio transport) that wraps Hugging Face's LocalPythonExecutor (from the smolagents framework). It is a custom Python runtime that provides basic isolation/security when running Python code generated by LLMs locally. It does not require Docker or VM. This package allows to expose the Python executor via MCP (Model Context Protocol) as a tool for LLM apps like Claude Desktop, Cursor

You are an expert in Solidity and smart contract security.

A Claude Code skill that integrates the powerful web fuzzer ffuf (Fuzz Faster U Fool) for web security testing and reconnaissance tasks. This skill enables Claude Code to perform intelligent web fuzzing operations using ffuf, making it easier to discover hidden directories, files, subdomains, and API endpoints. - ffuf must be installed on your system - Claude Desktop application - Appropriate auth

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.

Zero-hallucination answers • Gemini Deep Research • 14 Security Layers • Enterprise Compliance What's New 2026 • Deep Research • Document API • Create Notebooks • Security • Install - 🔍 Query your NotebookLM notebooks — source-grounded, zero-hallucination answers - 📚 Create & manage notebooks programmatically — no manual clicking - 🎙️ Generate audio overviews — podcast-style summaries of your d

Identify error-prone APIs and dangerous configurations

Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, or implementing zero-trust networking with minimal overhead.