MCP servers and skills: search, filter by where they run, and compare.
MCP server for Interlynk API. This server enables AI assistants like Claude, Cursor, and VS Code Copilot to interact with your Lynk organization for SBOM management, vulnerability tracking, and compli
GoApache-2.0★ 2Few starsNo key
OfficialGoApache-2.0★ 6No key
AttestLoad — attest-before-load gate for coding agents: sign AI agent Skills and MCP servers into verifiable SBOM + provenance attestations, and refuse to load unattested code.
Node.jsApache-2.0★ 1Few starsNo key
skillsig 给可安装的 agent skill 加上签名溯源与能力清单 —— 在第三方 skill 以完整工具/文件系统权限运行之前，先验签、再比对声明能力，未声明的越权直接拒绝。
SkillApache-2.0★ 1Few starsNo key
Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more
SkillApache-2.0★ 185No key
Hawkeye Agent is an enterprise-grade, AI-native security guardrail that evaluates open-source packages in milliseconds. It gives you a definitive verdict on license compliance, known vulnerabilities (
SkillApache-2.0★ 7No key
Agent-auditable security layer for npm — auditing proxy, deny-by-default install sandbox, provenance & signature verification, SBOM + signed attestations, MCP surface.
SkillApache-2.0★ 1Few starsNo key
Open-source supply-chain security scanner, local and offline. Matches known-malicious packages, extensions, plugins, providers, container images and CI actions in 15 ecosystems, including transitive l
Node.jsApache-2.0★ 7No key
Agent-neutral AI skill for EU Cyber Resilience Act (Regulation (EU) 2024/2847) readiness assessments: pinned official texts, 96-provision catalogue, risk assessment, SBOM checks, Article 14 reporting
SkillApache-2.0★ 5No key
Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP. STDIO or Streamable HTTP.
Node.jsApache-2.0★ 2Few starsNo key
The agent-native runtime where a typed, declarative stitch replaces fetch — for humans and agents alike.
Node.jsApache-2.0★ 20No key
Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OI
SkillApache-2.0★ 8No key
ABOM: a portable Authorization Bill of Materials schema and reference toolkit for human, workload, service, and AI-agent access
PythonApache-2.0★ 5No key
Local agency/runtime harness for ChatGPT Web: repositories, tasks, commands, validation, Git, skills/memory, observability, and opt-in computer control.
SkillApache-2.0★ 24No key
企业可治理的 AgentOps 控制面：以 Claude Agent SDK 为执行内核，把智能体构建 / 运行 / 评测 / 晋级 / 审计收束成一条可恢复的执行链
PythonApache-2.0★ 3Few starsNo key
Signed, audited agent skills registry (SKILL.md) for Claude Code, Codex, Antigravity, Cursor, and Aider. Zero-dependency CLI with prompt-injection defense, OCSF & SARIF security scans, OpenTelemetry O
PythonApache-2.0★ 1Few starsNo key
Open community repository for Bee by Heossi — public code, developer tooling, documentation, examples, and community-facing components for building with and contributing to Bee.
PythonApache-2.0★ 2Few starsNeeds a key
Curated, installable capability bundles for AI coding agents
SkillApache-2.0★ 3Few starsNo key
Deterministic security smoke tests for preview, staging, and pre-deploy web URLs.
PythonApache-2.0★ 1Few starsNo key
OpenAPI testing and deterministic API fuzzing for AI agents—catch contract bugs before unsafe calls with local-first sealed plans, MCP, and replayable evidence.
SkillApache-2.0★ 2Few starsNo key
GoApache-2.0Few starsNo key
System of record for AI tool risk: inventory, policy enforcement, approvals, and audit-ready evidence.
SkillApache-2.0★ 3Few starsNo key
Annotate and review coding agent plans and code diffs visually, share with your team, send feedback to agents with one click.
SkillApache-2.0★ 9.5kNo key
The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
SkillApache-2.0★ 1.3kNo key
Who stands behind it
