Explore

Scans a Power Pages site project for security issues in source code and dependencies. Runs static analysis and dependency scanning, then surfaces findings by category (code patterns, vulnerable packag

Official·Skill·MIT·★ 1.0k in collection·No key

Find, evaluate, and assemble the smallest compatible set of AI Agent Skills for an end-to-end natural-language goal. Use when a user wants Skills for a multi-step workflow, asks which Skills fit a pro

Official·Skill·MIT·★ 40k in collection·No key

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool call

Official·Python·Apache-2.0·★ 4.6k·No key

All-in-One malware analysis tool.

Skill·GPL-3.0·★ 2.1k·No key

Deterministic, local-first memory and guardrails for AI coding agents with no LLM in the hot path.

Node.js·MIT·★ 342·No key

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker

Python·Apache-2.0·★ 5.7k·No key

Writes custom Semgrep rules that detect security vulnerabilities, bug patterns and code patterns.

Skill·CC-BY-SA-4.0·★ 7.6k·No key

MCP server for Slither static analysis of Solidity smart contracts

Python·AGPL-3.0·★ 98·No key

Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI

Skill·MIT·★ 5.1k·No key

Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is

Official·Skill·Apache-2.0·★ 1.1k in collection·No key

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a co

Official·Skill·Apache-2.0·★ 495·No key

AI-powered static analysis issue fixer - MCP server for SARIF reports

Docker·Apache-2.0·Few stars·No key

A full claude, droid and codex skillsets for firmware reverse engineering.

Skill·Apache-2.0·★ 222·No key

Code quality analysis for Python in the age of AI coding.

Python·MIT·★ 1.1k·No key

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/r

Python·Apache-2.0·★ 847·No key

High-performance zero-dependency static analysis tool enforcing NASA Power of Ten rules across 20 programming languages, plus AI agent skill, MCP server config, prompt template, and LLM model security

Node.js·MIT·★ 19·No key

Scan MCP servers for potential threats & security findings.

Python·Apache-2.0·★ 1.1k·No key

NVIDIA Design System and UI Agent Harness for AI/ML Factories, Robotics, and Autonomous Vehicles

Official·Skill·Apache-2.0·★ 93·No key

SonarSource's MCP server for issues, quality gates, security hotspots and coverage on SonarQube Cloud or Server.

Official·Docker·Source-available·★ 665·Needs SonarQube

Static analysis for AI agent configs, tool descriptions, and system prompts — catches vague tool descriptions, missing stop conditions, and schema gaps before they reach runtime. Zero-LLM, determinist

Skill·Apache-2.0·★ 140·No key

Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 commands, 246 MCP tools, change-safety gates, audit evidence, zero API keys.

Python·Apache-2.0·★ 518·No key

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

Node.js·MIT·★ 860·No key