Every listed MCP server and skill. Filter by where it runs, what it needs, and how it is licensed.
1–12 of 78 tools for “security”
Clear allAI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching t
official/skill/MIT/★ 40k in collection/no key
A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full offensive-security pipeline that maps a codebase, hunts vulnerabi
skill/MIT/★ 42/no key
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger on
official/skill/link only/★ 28k in collection
Security-first Binance Spot MCP + honest crypto analyst. 25 tools, 5 prompts, human-gated orders.
python/no license/needs a key
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills befo
official/python/Apache-2.0/★ 20k/no key
Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate workl
official/skill/Apache-2.0/★ 21k in collection/no key
Complete security layer for OpenClaw - CLI Scanner + Live Dashboard. Secrets detection, config hardening, prompt injection scanning, MCP server auditing. Zero telemetry.
mcp/link only/★ 16
Default-deny MCP/JSON-RPC security gateway for agent tool-call authorization, prompt-injection detection, exfiltration controls, and audit telemetry.
mcp/link only/★ 17
Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.
node.js/no license/no key
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.
skill/Apache-2.0/★ 692/no key
An experimental ModelContextProtocol server connecting LLMs to DefectDojo for AI-powered security workflows. Enables natural language interaction with vulnerability data, simplifies security analysis,
skill/MIT/★ 16/no key
Cross-Code Organizer (formerly Claude Code Organizer): cross-harness config dashboard for Claude Code, Codex CLI, MCP servers, skills, memories, agents, sessions, security scanning, context budget, an
node.js/MIT/★ 383/no key
Who stands behind it
Who stands behind it
