MCP servers and skills: search, filter by where they run, and compare.
Contained static file analysis with Claude Code and Codex: REA, Ghidra and JADX in restricted Docker containers, selected input copies, readable reports. Linux/macOS; Windows experimental.
SkillMIT★ 7No key
A modular Claude Code toolkit for penetration testing, security research, and offensive security workflows.
SkillMIT★ 1Few starsNo key
Use for Python backend feature work, bug fixes, refactors, API or worker changes, validation failures, security-sensitive code, architecture decisions, database access, migrations, or test design. App
SkillMIT★ 6No key
Claude Code skill: security + code review in one pass. Evidence-gated findings, invariant-based hunting, deep multi-agent audit engine, read-only.
SkillMIT★ 10No key
Project-based Agent Skills for Xiaohongshu (RED): research, writing, video planning, evidence-based review and preference learning. 小红书内容运营工作流与个人偏好学习。
SkillMIT★ 1Few starsNo key
Reproducible vulnerable/patched targets for vulnsuite
SkillMIT★ 1Few starsNo key
Engineering governance framework for AI coding agents (Claude Code & OpenAI Codex): security, privacy, architecture, cost and quality standards with skills and a safe CLI installer.
SkillMIT★ 2Few starsNo key
Your AI wrote the code. Who checked it? 9 security agents + 185 rules audit vibe-coded apps (Supabase, Next.js, Firebase, LLM apps), then plan the fix and verify it. Offline, no API key.
SkillApache-2.0★ 2Few starsNo key
Open-source AI penetration testing tool to find and fix app vulnerabilities (mirror of usestrix/strix, Apache-2.0)
SkillApache-2.0★ 1Few starsNo key
Cloudflare Security Audit Skill 中文社区增强版：证据驱动的 Spring Security 与中国技术栈代码审计
SkillMIT★ 2Few starsNo key
🚀 Ship AI-assisted code that doesn't break your app. Agentic quality framework: zero-error delivery, undo, execution guardian, project memory, multi-agent review & MCP server. By Ing. Dey.
SkillMIT★ 2Few starsNo key
An open-source platform to generate, configure, test, and deploy production-ready MCP servers from API specifications, with built-in security reviews, automated builds, and an interactive playground.
SkillMIT★ 2Few starsNo key
MALT — Multi-Agent Local Team. A local-first MCP broker and installable PWA for subscription-authenticated Codex/Claude teams, durable project memory, GitHub delivery workflows and traceable handoffs.
SkillMIT★ 2Few starsNo key
Independent Claude Code plugin for authorized authentication and authorization research, evidence validation, and bug bounty reporting.
SkillMIT★ 1Few starsNo key
MCP connector for five free InvokePort developer tools: JSON Schema, TypeScript, CSV, OpenAPI and webhooks.
Node.jsMITFew starsNo key
Developer-facing MCP server that gives AI coding agents accurate OpenAPI facts and runs contract and scenario tests against a local backend.
Node.jsMITFew starsNo key
AI agent skills for debug APK security testing, Flutter/Kotlin review, ADB live testing, and authorized staging web/API assessments with reproducible evidence.
SkillMIT★ 1Few starsNo key
A portable Agent Skill that builds security into AI development: plan trust boundaries, implement secure defaults, verify real code paths, and hand off working code with honest evidence.
SkillMIT★ 1Few starsNo key
Agent skills to evaluate, prioritize, plan and red-team ideas (Claude, Copilot, ChatGPT)
SkillMIT★ 1Few starsNo key
12 reusable Claude Code AI skills for product planning, UI/UX design, code review, QA, security, performance, DevOps, SEO and ASO. Includes React, NestJS and Flutter rules.
SkillMIT★ 1Few starsNo key
Multi-agent code review with evidence validation and feedback-driven evolution.
SkillMIT★ 1Few starsNo key
Commit only the tool effects an MCP declaration permits: a drop-in proxy that checks readOnlyHint/destructiveHint at runtime and rolls back violations.
PythonMITFew starsNo key
An AI-powered study companion for Exam SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads, the exam for the Microsoft Certified: Cloud and AI Security Engineer Associate cert
SkillMITFew starsNo key
Who stands behind it
