Security AI Agent Skills
AI agent skills for application security. Vulnerability scanning, secure coding patterns, authentication, and audit workflows.
199 listings
itcoin & Lightning Network MCP Server
MCP ServerDocumentation Try with Claude Try with Goose A Model Context Protocol (MCP) server that enables AI models to interact with Bitcoin and Lightning Network, allowing them to generate keys, validate addresses, decode transactions, query the blockchain, and more. - βΏitcoin \& Lightning Network MCP Server - πΌ Table of Contents - π§ Features - π Claude Desktop Integration - Testing the Claude Desktop I
ServeMyAPI
A personal MCP (Model Context Protocol) server for securely storing and accessing API keys across projects using the macOS Keychain. ServeMyAPI allows you to store API keys securely in the macOS Keychain and access them through a consistent MCP interface. This makes it easy to: - Store API keys securely (they're never visible in .env files or config files) - Access the same keys across multiple pr
Loki Mode
Multi-agent autonomous startup system for Claude Code. Triggers on "Loki Mode". Orchestrates 100+ specialized agents across engineering, QA, DevOps, security, data/ML, business operations, marketing, HR, and customer success. Takes PRD to fully deployed, revenue-generating product with zero human intervention. Features Task tool for subagent dispatch, parallel code review with 3 specialized reviewers, severity-based issue triage, distributed task queue with dead letter handling, automatic deploy
Docker Optimization
PluginDocker image optimization patterns including multi-stage builds, layer caching, security hardening, and size reduction techniques. Use when building Docker images, optimizing container size, improving build performance, or implementing Docker security best practices. Reduces image sizes by 70-90% and build times by 50-80%.
AWS Penetration Testing
This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege escalation", "S3 bucket testing", "metadata SSRF", "Lambda exploitation", or needs guidance on Amazon Web Services security assessment.
Shared Setup Patterns
PluginShared configuration patterns for project setup commands. Provides security hooks, Claude framework structure templates, and framework detection patterns used across multiple setup commands.
MCP Server for TheHive
MCP ServerAn MCP (Model Context Protocol) server that provides AI models and automation tools with access to TheHive incident response platform. This server acts as a bridge between MCP clients (like AI assistants) and TheHive, allowing them to: - Retrieve and analyze security alerts - Access case information - Promote alerts to cases - Perform incident response operations 1. getthehivealerts - Retrieve a l
YouTube Transcript Server
MCP ServerA Model Context Protocol server that enables retrieval of transcripts from YouTube videos. This server provides direct access to video captions and subtitles through a simple interface. To install YouTube Transcript Server for Claude Desktop automatically via Smithery: - gettranscript - Extract transcripts from YouTube videos - url (string, required): YouTube video URL, Shorts URL, or video ID - l
Firmware Analyst
Expert firmware analyst specializing in embedded systems, IoT
Sharp Edges
Identify error-prone APIs and dangerous configurations
MCP Cybersec Watchdog
MCP ServerA portable, single-binary system auditing tool for Linux. Like Lynis but faster and smarter. No configuration needed. No dependencies. Just run. - π Security: Firewall, SSH hardening, SSL/TLS, fail2ban, SUID binaries, open ports - π Services: Systemd services, web servers, databases, Docker - π» Resources: CPU, RAM, disk usage, top processes - πΎ Storage: SMART health, inode usage, filesystem er
VictoriaMetrics MCP Server
MCP ServerMCP Server for the VictoriaMetrics. To install VictoriaMetrics Server for Claude Desktop automatically via Smithery: Description: Write data to the VictoriaMetrics database. Input Parameters: Description: Import Prometheus exposition format data into VictoriaMetrics. Input Parameters: Description: Query time series data over a specific time range. Input Parameters: Description: Query the current v
Unichat MCP Server in Python
MCP ServerAlso available in TypeScript Send requests to OpenAI, MistralAI, Anthropic, xAI, Google AI, DeepSeek, Alibaba, Inception using MCP protocol via tool or predefined prompts. Vendor API key required The server implements one tool: - unichat: Send a request to unichat - Takes "messages" as required string arguments - Returns a response - codereview - Review code for best practices, potential issues, a
Security Compliance Compliance Check
You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform compliance audits and provide implementation guidance.
NotebookLM MCP Server (Security Hardened)
Zero-hallucination answers β’ Gemini Deep Research β’ 14 Security Layers β’ Enterprise Compliance What's New 2026 β’ Deep Research β’ Document API β’ Create Notebooks β’ Security β’ Install - π Query your NotebookLM notebooks β source-grounded, zero-hallucination answers - π Create & manage notebooks programmatically β no manual clicking - ποΈ Generate audio overviews β podcast-style summaries of your d
FastMCP LaTeX Server (tex-mcp)
A small FastMCP-based Microservice that renders LaTeX to PDF. The server exposes MCP tools to render raw LaTeX or templates and produces artifacts (a .tex file and .pdf) under src/artifacts/. This repository is prepared to run locally and to be loaded by Claude Desktop (via the Model Context Protocol). The default entrypoint is runserver.py. - Render raw LaTeX to .tex and (optionally) .pdf using p
Dependency Management Deps Audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
SSH Penetration Testing
This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques.
K8s Security Policies
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Xcode MCP Server
MCP ServerAn MCP (Model Context Protocol) server providing comprehensive Xcode integration for AI assistants. This server enables AI agents to interact with Xcode projects, manage iOS simulators, and perform various Xcode-related tasks with enhanced error handling and support for multiple project types. - Set active projects and get detailed project information - Create new Xcode projects from templates (iO
Security Best Practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
investor-agent: A Financial Analysis MCP Server
Triggers on stock/market analysis, investment research, earnings, valuations, sentiment queries.
MCP Simple Timeserver
MCP ServerOne of the strange design decisions Anthropic made was depriving Claude of timestamps for messages sent by the user in claude.ai or current time in general. Poor Claude can't tell what time it is! mcp-simple-timeserver is a simple MCP server that fixes that. This server provides the following tools: All tools (except getlocaltime) use accurate time from NTP servers. If NTP is unavailable, they gra
Wordpress Router
Use when the user asks about WordPress codebases (plugins, themes, block themes, Gutenberg blocks, WP core checkouts) and you need to quickly classify the repo and route to the correct workflow/skill (blocks, theme.json, REST API, WP-CLI, performance, security, testing, release packaging).