Security AI Agent Skills
AI agent skills for application security. Vulnerability scanning, secure coding patterns, authentication, and audit workflows.
203 listings
Cross-Site Scripting and HTML Injection Testing
This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications.
FirstCycling MCP Server
This is a Model Context Protocol (MCP) server that provides professional cycling data from FirstCycling. It allows you to retrieve comprehensive information about professional cyclists, race results, race details, and historical cycling data. This MCP server offers rich access to professional cycling data, providing tools for: - Finding information about professional cyclists - Retrieving race res
itcoin & Lightning Network MCP Server
Documentation Try with Claude Try with Goose A Model Context Protocol (MCP) server that enables AI models to interact with Bitcoin and Lightning Network, allowing them to generate keys, validate addresses, decode transactions, query the blockchain, and more. - ₿itcoin \& Lightning Network MCP Server - 💼 Table of Contents - 🔧 Features - 🔑 Claude Desktop Integration - Testing the Claude Desktop I
Replicate Flux MCP
Replicate Flux MCP is an advanced Model Context Protocol (MCP) server that empowers AI assistants to generate high-quality images and vector graphics. Leveraging Black Forest Labs' Flux Schnell model for raster images and Recraft's V3 SVG model for vector graphics via the Replicate API. - Getting Started & Integration - Setup Process - Cursor Integration - Claude Desktop Integration - Smithery Int
SmartDB
SmartDB is a universal database gateway that implements the Model Context Protocol (MCP) server interface. This gateway allows MCP-compatible clients to connect and explore different databases. Compared to similar products, SmartDB not only provides basic database connection and exploration capabilities but also adds advanced features such as OAuth 2.0 authentication , health checks, SQL optimizat
Security Requirement Extraction
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.
Cve Search MCP
A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs. - python 3.10+ - Cline、Roo Code etc - To get a JSON with all the vendors - To get a JSON with all the products associated to a vendor - To get a JSON with all the vulnerabilities per vendor and a spec
AWS Security Analysis
Analyze AWS infrastructure security using Cyntrisec MCP tools. Use when asked about AWS attack paths, security findings, IAM permissions, compliance status, or remediation recommendations. Guides tool selection and workflow patterns for comprehensive security assessments.
Package Version MCP Server
An MCP server that provides tools for checking latest stable package versions from multiple package registries: - npm (Node.js/JavaScript) - PyPI (Python) - Maven Central (Java) - Go Proxy (Go) - Swift Packages (Swift) - AWS Bedrock (AI Models) - Docker Hub (Container Images) - GitHub Container Registry (Container Images) - GitHub Actions This server helps LLMs ensure they're recommending up-to-da
CICADA
Context compaction for AI code assistants – Give your AI structured, token-efficient access to 17+ languages including Elixir, Python, TypeScript, JavaScript, Rust, and more. Quick Install · Security · Developers · AI Assistants · Docs The core problem: AI code assistants waste context on blind searches. Grep dumps entire files when you only need a function signature, leaving less room for actual
Cloud Penetration Testing
This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.
MCP ChatGPT Server
This MCP server allows you to access OpenAI's ChatGPT API directly from Claude Desktop. 📝 Read about why I built this project: I Built an AI That Talks to Other AIs: Demystifying the MCP Hype - Call the ChatGPT API with customisable parameters - Aks Claude and ChatGPT to talk to each other in a long running discussion! - Configure model versions, temperature, and other parameters - Use web search
Security Review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
MCP Simple Timeserver
One of the strange design decisions Anthropic made was depriving Claude of timestamps for messages sent by the user in claude.ai or current time in general. Poor Claude can't tell what time it is! mcp-simple-timeserver is a simple MCP server that fixes that. This server provides the following tools: All tools (except getlocaltime) use accurate time from NTP servers. If NTP is unavailable, they gra
Elasticsearch/OpenSearch MCP Server
MCP Official Registry A Model Context Protocol (MCP) server implementation that provides Elasticsearch and OpenSearch interaction. This server enables searching documents, analyzing indices, and managing cluster through a set of tools. - generalapirequest: Perform a general HTTP API request. Use this tool for any Elasticsearch/OpenSearch API that does not have a dedicated tool. - listindices: List
Kotlin Ktor Development
Instruction to developer: save this file as .cursorrules and place it on the root project directory
Unsplash MCP Server
English | 简体中文 Unsplash MCP Server is used for searching rich, high-quality images. It's ideal for developers who want to integrate Unsplash functionality into their own applications. - Advanced Image Search: Search Unsplash's extensive photo library with filters for: - Keyword relevance - Color schemes - Orientation options - Custom sorting and pagination Before installing this server, you'll nee
Codebase Cleanup Deps Audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
NS Travel Information MCP Server
Transform your AI assistant into a Dutch railways expert! This MCP server connects Claude to real-time NS (Nederlandse Spoorwegen) travel information, making it your perfect companion for navigating the Netherlands by train. You can install this server in three ways: Update your Claude configuration file (~/Library/Application Support/Claude/claudedesktopconfig.json): You can get an API key from N
Security Best Practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Security Operations Multi-Tool Platform (MCP)
A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools. - Unified Interface: Single entry point for multiple security tools - Docker Support: Easy deployment using Docker - JSON Output: Consistent JSON output format across all tools - Error Handling: R
Free Will MCP - Set your AI free
Keep an eye on your API usage. Add the following to your Claude Desktop config file: macOS: ~/Library/Application Support/Claude/claudedesktopconfig.json Windows: %APPDATA%\Claude\claudedesktopconfig.json For local development, use the path to your local repository: - For security reasons, it's best to keep versions pinned and manually update them. All tools have been implemented and tested ✅ - ✅
Biothings MCP
MCP (Model Context Protocol) server for Biothings.io This server implements the Model Context Protocol (MCP) for BioThings, providing a standardized interface for accessing and manipulating biomedical data. MCP enables AI assistants and agents to access specialized biomedical knowledge through structured interfaces to authoritative data sources. Supported BioThings data sources include: - mygene.i
DNStwist MCP Server
A Model Context Protocol (MCP) server for dnstwist, a powerful DNS fuzzing tool that helps detect typosquatting, phishing, and corporate espionage. This server provides tools for analyzing domain permutations and identifying potentially malicious domains. It is designed to integrate seamlessly with MCP-compatible applications like Claude Desktop. This tool is designed for legitimate security resea