Security AI Agent Skills

A Claude Code skill that integrates the powerful web fuzzer ffuf (Fuzz Faster U Fool) for web security testing and reconnaissance tasks. This skill enables Claude Code to perform intelligent web fuzzing operations using ffuf, making it easier to discover hidden directories, files, subdomains, and API endpoints. - ffuf must be installed on your system - Claude Desktop application - Appropriate auth

A comprehensive Model Context Protocol (MCP) server for the Starknet blockchain. This server provides AI agents with the ability to interact with Starknet networks, query blockchain data, manage wallets, and interact with smart contracts. - Supported Networks - Prerequisites - Installation - Server Configuration - API Reference - Resources - Usage with AI Assistants - Security Considerations - Pro

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.

A Model Context Protocol (MCP) server for dnstwist, a powerful DNS fuzzing tool that helps detect typosquatting, phishing, and corporate espionage. This server provides tools for analyzing domain permutations and identifying potentially malicious domains. It is designed to integrate seamlessly with MCP-compatible applications like Claude Desktop. This tool is designed for legitimate security resea

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

MCP Official Registry A Model Context Protocol (MCP) server implementation that provides Elasticsearch and OpenSearch interaction. This server enables searching documents, analyzing indices, and managing cluster through a set of tools. - generalapirequest: Perform a general HTTP API request. Use this tool for any Elasticsearch/OpenSearch API that does not have a dedicated tool. - listindices: List

This MCP server allows you to access OpenAI's ChatGPT API directly from Claude Desktop. 📝 Read about why I built this project: I Built an AI That Talks to Other AIs: Demystifying the MCP Hype - Call the ChatGPT API with customisable parameters - Aks Claude and ChatGPT to talk to each other in a long running discussion! - Configure model versions, temperature, and other parameters - Use web search

This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.

A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs. - python 3.10+ - Cline、Roo Code etc - To get a JSON with all the vendors - To get a JSON with all the products associated to a vendor - To get a JSON with all the vulnerabilities per vendor and a spec

SmartDB is a universal database gateway that implements the Model Context Protocol (MCP) server interface. This gateway allows MCP-compatible clients to connect and explore different databases. Compared to similar products, SmartDB not only provides basic database connection and exploration capabilities but also adds advanced features such as OAuth 2.0 authentication , health checks, SQL optimizat

Documentation Try with Claude Try with Goose A Model Context Protocol (MCP) server that enables AI models to interact with Bitcoin and Lightning Network, allowing them to generate keys, validate addresses, decode transactions, query the blockchain, and more. - ₿itcoin \& Lightning Network MCP Server - 💼 Table of Contents - 🔧 Features - 🔑 Claude Desktop Integration - Testing the Claude Desktop I

This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications.

A Model Context Protocol (MCP) server that provides real-time WallStreetBets data for analysis with Claude or other LLM clients. - Fetch WallStreetBets Posts: Filter posts by score, comment count, and content type - Detailed Post Analysis: Extract comments, links, and metadata from posts - External Link Collection: Gather links being shared in WSB discussions - Analysis Templates: Ready-to-use pro

Expert cloud architect specializing in AWS/Azure/GCP multi-cloud

A Model Context Protocol (MCP) server for interacting with GitLab merge requests and issues. This project implements a server using the Model Context Protocol (MCP) that allows AI agents to interact with GitLab repositories. It provides tools for: - Listing available GitLab projects - Fetching merge request details and comments - Getting merge request diffs - Adding comments to merge requests - Ad

A Model Context Protocol (MCP) server for Database EKM/TDE operations using CipherTrust Application Key Management (CAKM). - Resource-Based Management: Tools are organized by the database objects they manage (e.g., keys, encryption, wallets), not just by actions. - Operational Grouping: Each tool exposes multiple operations (e.g., create, list, rotate) for comprehensive lifecycle management. - Uni

An MCP server for interacting with the Bluesky social network via the atproto client. :wave: Leave an issue if you have any problems running this MCP. I should be able to push out fixes pretty quickly. Get your Bluesky app password at: https://bsky.app/settings/app-passwords Add the following to your MCP config file (Note that the version is pinned): - For security reasons, I think its best to kee

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform compliance audits and provide implementation guidance.

An implementation of a Model Context Protocol (MCP) for internet speed testing. It allows AI models and agents to measure, analyze, and report network performance metrics through a standardized interface. 📦 Available on PyPI: https://pypi.org/project/mcp-internet-speed-test/ 🚀 Quick Start: The Model Context Protocol (MCP) provides a standardized way for Large Language Models (LLMs) to interact w

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

MCP Server for the VictoriaMetrics. To install VictoriaMetrics Server for Claude Desktop automatically via Smithery: Description: Write data to the VictoriaMetrics database. Input Parameters: Description: Import Prometheus exposition format data into VictoriaMetrics. Input Parameters: Description: Query time series data over a specific time range. Input Parameters: Description: Query the current v

An MCP (Model Context Protocol) server that provides AI models and automation tools with access to TheHive incident response platform. This server acts as a bridge between MCP clients (like AI assistants) and TheHive, allowing them to: - Retrieve and analyze security alerts - Access case information - Promote alerts to cases - Perform incident response operations 1. getthehivealerts - Retrieve a l

an mcp server for vikingdb store and search VikingDB is a high-performance vector database developed by ByteDance. You can easily use it following the doc bellow: The server implements the following tools: - vikingdb-colleciton-intro: introduce the collection of vikingdb - vikingdb-index-intro: introduce the index of vikingdb - vikingdb-upsert-information: upsert information to vikingdb for later

Azure Key Vault Keys Java SDK for cryptographic key management. Use when creating, managing, or using RSA/EC keys, performing encrypt/decrypt/sign/verify operations, or working with HSM-backed keys.