Security AI Agent Skills
AI agent skills for application security. Vulnerability scanning, secure coding patterns, authentication, and audit workflows.
203 listings
Claw Release
Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.
SMTP Penetration Testing
This skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". It provides comprehensive techniques for testing SMTP server security.
Anti Reversing Techniques
Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use when analyzing protected binaries, bypassing anti-debugging for authorized analysis, or understanding software protection mechanisms.
Fix Review
Verify fix commits address audit findings without new bugs
Coinmarket MCP server
Coinmarket MCP Server The server implements a few of the Coinmarket API endpoints - Custom coinmarket:// URI scheme for accessing individual notes - Each note resource has a name, description and text/plain mimetype The server implements two tools: - get-currency-listings: Get the latest currency listings - get-quotes: Get quotes for tokens - Takes "slug" (example: bitcoin) or "symbol" (example: B
Vectara MCP Server
Vectara-MCP provides any agentic application with access to fast, reliable RAG with reduced hallucination, powered by Vectara's Trusted RAG platform, through the MCP protocol. You can install the package directly from PyPI: - Security: Built-in authentication via bearer tokens - Encryption: HTTPS ready - Rate Limiting: 100 requests/minute by default - CORS Protection: Configurable origin validatio
MCP Atlassian
Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Supports both Cloud and Server/Data Center deployments. Confluence Demo Go to https://id.atlassian.com/manage-profile/security/api-tokens and create a token. Add to your Claude Desktop or Cursor MCP configuration: Ask your AI assistant to: - "Find issues assigned to me in PROJ project" - "Search Confluence for onboar
Elasticsearch/OpenSearch MCP Server
MCP Official Registry A Model Context Protocol (MCP) server implementation that provides Elasticsearch and OpenSearch interaction. This server enables searching documents, analyzing indices, and managing cluster through a set of tools. - generalapirequest: Perform a general HTTP API request. Use this tool for any Elasticsearch/OpenSearch API that does not have a dedicated tool. - listindices: List
MySQL MCP Server
A Model Context Protocol (MCP) implementation that enables secure interaction with MySQL databases. This server component facilitates communication between AI applications (hosts/clients) and MySQL databases, making database exploration and analysis safer and more structured through a controlled interface. - List available MySQL tables as resources - Read table contents - Execute SQL queries with
Plane MCP Server
A Model Context Protocol (MCP) server that enables LLMs to interact with Plane.so, allowing them to manage projects and issues through Plane's API. Using this server, LLMs like Claude can directly interact with your project management workflows while maintaining user control and security. - List all projects in your Plane workspace - Get detailed information about specific projects - Create new is
Linkerd Patterns
Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, or implementing zero-trust networking with minimal overhead.
K8s Security Policies
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
MCP AI SOC Sher
A powerful AI-driven Security Operations Center (SOC) Text2SQL framework based MCP Server (Local and Remote) for converting natural language Prompts to SQL queries dynamically, with integrated security threat analysis and monitoring. - Text2SQL Conversion: Convert natural language queries to optimized SQL - Multiple Interfaces: Support for STDIO, SSE, and REST API - Security Threat Analysis: Built
Threat Mitigation Mapping
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
Broken Authentication Testing
This skill should be used when the user asks to "test for broken authentication vulnerabilities", "assess session management security", "perform credential stuffing tests", "evaluate password policies", "test for session fixation", or "identify authentication bypass flaws". It provides comprehensive techniques for identifying authentication and session management weaknesses in web applications.
Wordpress Router
Use when the user asks about WordPress codebases (plugins, themes, block themes, Gutenberg blocks, WP core checkouts) and you need to quickly classify the repo and route to the correct workflow/skill (blocks, theme.json, REST API, WP-CLI, performance, security, testing, release packaging).
investor-agent: A Financial Analysis MCP Server
Triggers on stock/market analysis, investment research, earnings, valuations, sentiment queries.
Bluesky Social MCP
An MCP server for interacting with the Bluesky social network via the atproto client. :wave: Leave an issue if you have any problems running this MCP. I should be able to push out fixes pretty quickly. Get your Bluesky app password at: https://bsky.app/settings/app-passwords Add the following to your MCP config file (Note that the version is pinned): - For security reasons, I think its best to kee
Seerr MCP Server
- 🚀 99% fewer API calls for batch operations (150-300 → 1) - ⚡ 88% token reduction with compact response formats - 🎯 Batch Dedupe Mode - Check 50-100 titles in one operation - 🔄 Smart Caching - 70-85% API call reduction - 🛡️ Safety Features - Multi-season confirmation, validation - 📦 4 Powerful Tools - Consolidated from 8 for clarity - 🤖 Automated Security Scanning - Dependabot for dependenc
Sast Configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
Security Review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Service Mesh Expert
Expert service mesh architect specializing in Istio, Linkerd, and cloud-native networking patterns. Masters traffic management, security policies, observability integration, and multi-cluster mesh con
Starknet MCP Server
A comprehensive Model Context Protocol (MCP) server for the Starknet blockchain. This server provides AI agents with the ability to interact with Starknet networks, query blockchain data, manage wallets, and interact with smart contracts. - Supported Networks - Prerequisites - Installation - Server Configuration - API Reference - Resources - Usage with AI Assistants - Security Considerations - Pro
Cloudflare Skill for OpenCode
Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), networking (Tunnel, Spectrum), security (WAF, DDoS), and infrastructure-as-code (Terraform, Pulumi). Use for any Cloudflare development task.