MCP servers and skills: search, filter by where they run, and compare.
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching t
OfficialSkillMIT★ 40k in collectionNo key
Universal SQL code review assistant that performs comprehensive security, maintainability, and code quality analysis across all SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). Focuses on SQL in
OfficialSkillMIT★ 40k in collectionNo key
Comprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files, managing Dependabot pull requests, configuring depe
OfficialSkillMIT★ 40k in collectionNo key
Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human review), and Pairing (developer-side dev-cycle) skills shippi
OfficialSkillApache-2.0★ 118No key
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identi
SkillMIT★ 5.1kNo key
Agent skill for producing threat models for open-source projects
SkillMIT★ 59No key
Evidence-first vulnerability research workspace and Skills for Claude Code and Codex.
SkillMIT★ 4Few starsNo key
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
SkillApache-2.0★ 949No key
Convert public bug bounty hackerone reports (9,950) into reusable AI security skills and vulnerability knowledge.
SkillMIT★ 13No key
Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest
SkillMIT★ 392No key
Claude Code skill: turn confirmed vulnerabilities into submission-ready DOCX reports | 漏洞报告成稿 skill（SRC/0day 提交稿、分层验证门、Step 式 PoC、截图铁律）
SkillMIT★ 82No key
A lightweight, zero-dependency CLI tool to manage and activate capabilities for AI coding assistants (such as Claude Code, Cursor, Trae, etc.).
SkillMIT★ 981No key
Security scanning skill for Claude Code, Codex and Antigravity. Finds the 21 most common vulnerabilities in AI-written code and shows how to fix each one.
SkillMIT★ 289No key
EU compliance enforcement for AI agents. Org-profile-driven guardrails for NIS2, GDPR & ISO 27001 — blocks secrets, flags critical asset impact, enforces data residency, verifies suppliers, tracks inc
SkillGPL-3.0★ 13No key
Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rust pre-scanner + cross-audit memory, 1,346 checks across 20 c
SkillMIT★ 59No key
AI agent skill for Solidity smart contract security auditing
SkillMIT★ 6No key
Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform operations, container hardening, SOC2/ISO27001, and
SkillMIT★ 1.2kNo key
Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian
SkillMIT★ 333No key
AI-powered vulnerability scanner plugin for Claude Code with 28 agents statically scan web & mobile repos for OWASP Top 10 / Mobile Top 10 vulnerabilities, validate findings, and optionally auto-fix t
SkillMIT★ 4Few starsNo key
This skill helps Claude write secure code and prevent common vulnerabilities.
SkillApache-2.0★ 1.4kNo key
AI with a harness. Agent skills, rules, CI and security gates for AI-assisted development.
SkillMIT★ 6No key
AI agent skills for OpenText Fortify — SAST/DAST/SCA scanning, vulnerability triage, remediation, dependency upgrades, CI/CD integration, and FCLI workflows. Works with Claude Code, Codex, Gemini CLI,
SkillMIT★ 22No key
Who stands behind it
