mdskills
← All tags

Security AI Agent Skills

AI agent skills for application security. Vulnerability scanning, secure coding patterns, authentication, and audit workflows.

203 listings

Cross-Site Scripting and HTML Injection Testing

Skill

This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications.

8.014kby sickn33

FirstCycling MCP Server

MCP

This is a Model Context Protocol (MCP) server that provides professional cycling data from FirstCycling. It allows you to retrieve comprehensive information about professional cyclists, race results, race details, and historical cycling data. This MCP server offers rich access to professional cycling data, providing tools for: - Finding information about professional cyclists - Retrieving race res

8.0417by r-huijts

itcoin & Lightning Network MCP Server

MCP

Documentation Try with Claude Try with Goose A Model Context Protocol (MCP) server that enables AI models to interact with Bitcoin and Lightning Network, allowing them to generate keys, validate addresses, decode transactions, query the blockchain, and more. - ₿itcoin \& Lightning Network MCP Server - 💼 Table of Contents - 🔧 Features - 🔑 Claude Desktop Integration - Testing the Claude Desktop I

7.0423by AbdelStark

Replicate Flux MCP

MCP

Replicate Flux MCP is an advanced Model Context Protocol (MCP) server that empowers AI assistants to generate high-quality images and vector graphics. Leveraging Black Forest Labs' Flux Schnell model for raster images and Recraft's V3 SVG model for vector graphics via the Replicate API. - Getting Started & Integration - Setup Process - Cursor Integration - Claude Desktop Integration - Smithery Int

8.0492by awkoy

SmartDB

MCP

SmartDB is a universal database gateway that implements the Model Context Protocol (MCP) server interface. This gateway allows MCP-compatible clients to connect and explore different databases. Compared to similar products, SmartDB not only provides basic database connection and exploration capabilities but also adds advanced features such as OAuth 2.0 authentication , health checks, SQL optimizat

8.0518by wenb1n-dev

Security Requirement Extraction

Skill

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

5.013kby sickn33

Cve Search MCP

MCP

A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs. - python 3.10+ - Cline、Roo Code etc - To get a JSON with all the vendors - To get a JSON with all the products associated to a vendor - To get a JSON with all the vulnerabilities per vendor and a spec

7.0437by roadwy

AWS Security Analysis

Skill

Analyze AWS infrastructure security using Cyntrisec MCP tools. Use when asked about AWS attack paths, security findings, IAM permissions, compliance status, or remediation recommendations. Guides tool selection and workflow patterns for comprehensive security assessments.

9.0452by cyntrisec

Package Version MCP Server

MCP

An MCP server that provides tools for checking latest stable package versions from multiple package registries: - npm (Node.js/JavaScript) - PyPI (Python) - Maven Central (Java) - Go Proxy (Go) - Swift Packages (Swift) - AWS Bedrock (AI Models) - Docker Hub (Container Images) - GitHub Container Registry (Container Images) - GitHub Actions This server helps LLMs ensure they're recommending up-to-da

8.0520by sammcj

CICADA

Skill

Context compaction for AI code assistants – Give your AI structured, token-efficient access to 17+ languages including Elixir, Python, TypeScript, JavaScript, Rust, and more. Quick Install · Security · Developers · AI Assistants · Docs The core problem: AI code assistants waste context on blind searches. Grep dumps entire files when you only need a function signature, leaving less room for actual

9.0482by wende

Cloud Penetration Testing

Skill

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.

8.014kby sickn33

MCP ChatGPT Server

MCP

This MCP server allows you to access OpenAI's ChatGPT API directly from Claude Desktop. 📝 Read about why I built this project: I Built an AI That Talks to Other AIs: Demystifying the MCP Hype - Call the ChatGPT API with customisable parameters - Aks Claude and ChatGPT to talk to each other in a long running discussion! - Configure model versions, temperature, and other parameters - Use web search

6.0316by billster45

Security Review

Skill

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

8.014kby sickn33

MCP Simple Timeserver

MCP

One of the strange design decisions Anthropic made was depriving Claude of timestamps for messages sent by the user in claude.ai or current time in general. Poor Claude can't tell what time it is! mcp-simple-timeserver is a simple MCP server that fixes that. This server provides the following tools: All tools (except getlocaltime) use accurate time from NTP servers. If NTP is unavailable, they gra

8.0426by andybrandt

Elasticsearch/OpenSearch MCP Server

MCP

MCP Official Registry A Model Context Protocol (MCP) server implementation that provides Elasticsearch and OpenSearch interaction. This server enables searching documents, analyzing indices, and managing cluster through a set of tools. - generalapirequest: Perform a general HTTP API request. Use this tool for any Elasticsearch/OpenSearch API that does not have a dedicated tool. - listindices: List

8.0648by cr7258

Kotlin Ktor Development

Rules

Instruction to developer: save this file as .cursorrules and place it on the root project directory

9.041kby PatrickJS

Unsplash MCP Server

MCP

English | 简体中文 Unsplash MCP Server is used for searching rich, high-quality images. It's ideal for developers who want to integrate Unsplash functionality into their own applications. - Advanced Image Search: Search Unsplash's extensive photo library with filters for: - Keyword relevance - Color schemes - Orientation options - Custom sorting and pagination Before installing this server, you'll nee

7.0554by hellokaton

Codebase Cleanup Deps Audit

Skill

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

7.014kby sickn33

NS Travel Information MCP Server

MCP

Transform your AI assistant into a Dutch railways expert! This MCP server connects Claude to real-time NS (Nederlandse Spoorwegen) travel information, making it your perfect companion for navigating the Netherlands by train. You can install this server in three ways: Update your Claude configuration file (~/Library/Application Support/Claude/claudedesktopconfig.json): You can get an API key from N

8.0447by r-huijts

Security Best Practices

Skill

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

8.09.9kby openai

Security Operations Multi-Tool Platform (MCP)

MCP

A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools. - Unified Interface: Single entry point for multiple security tools - Docker Support: Easy deployment using Docker - JSON Output: Consistent JSON output format across all tools - Error Handling: R

7.0532by securityfortech

Free Will MCP - Set your AI free

MCP

Keep an eye on your API usage. Add the following to your Claude Desktop config file: macOS: ~/Library/Application Support/Claude/claudedesktopconfig.json Windows: %APPDATA%\Claude\claudedesktopconfig.json For local development, use the path to your local repository: - For security reasons, it's best to keep versions pinned and manually update them. All tools have been implemented and tested ✅ - ✅

5.0285by gwbischof

Biothings MCP

MCP

MCP (Model Context Protocol) server for Biothings.io This server implements the Model Context Protocol (MCP) for BioThings, providing a standardized interface for accessing and manipulating biomedical data. MCP enables AI assistants and agents to access specialized biomedical knowledge through structured interfaces to authoritative data sources. Supported BioThings data sources include: - mygene.i

8.0429by longevity-genie

DNStwist MCP Server

MCP

A Model Context Protocol (MCP) server for dnstwist, a powerful DNS fuzzing tool that helps detect typosquatting, phishing, and corporate espionage. This server provides tools for analyzing domain permutations and identifying potentially malicious domains. It is designed to integrate seamlessly with MCP-compatible applications like Claude Desktop. This tool is designed for legitimate security resea

8.0443by BurtTheCoder