MCP servers and skills: search, filter by where they run, and compare.
Skill that teaches AI coding agents to write secure JavaScript. Catches SQL injection, XSS, prototype pollution, and OWASP Top 10 patterns in Express, Next.js, and Node.
SkillLink only★ 2Few stars
Security scanner for Claude Code Skills — 9 engines detect malicious patterns, data exfiltration, dangerous ops across 71K+ skills
SkillMIT★ 82No key
Open-source backend-as-a-service for Postgres — REST, typed SDK, auth, storage, realtime and row-level security over your own database, with a schema-driven admin panel when you want one.
Node.jsMIT★ 24No key
ARGUS-3 — wallet-native, security-hardened personal agent; demand-side reference client and the reference host for the WARDEN MCP firewall (@aimarket/warden, a separate package) plus native AIMarket c
Node.jsMIT★ 2Few starsNo key
Catch hard-coded secrets, insecure URLs, missing env vars, and unpinned packages in MCP configs.
Node.jsMIT★ 1Few starsNo key
Security-first MCP server for TP-Link Omada, with a stdio-first runtime, capability-gated tools, and OpenAPI-based network automation.
Node.jsMIT★ 27No key
Deterministic static analyzer for Node.js/NestJS backends — async bugs, event-loop blocking, security, DI, Prisma. CLI: backend-doctor.
SkillMIT★ 7No key
Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps arc
Node.jsApache-2.0★ 5No key
Security Audit 一键安装｜让 AI 把代码从里到外查一遍漏洞，结论带证据｜自动装技能，装完开口就能用｜第三方一键部署方案
SkillMIT★ 1Few starsNo key
Open-core runtime for Agentic Control Plane: identity, policy, limits, routing, PII redaction, and audit as npm modules.
SkillMIT★ 8No key
面向 Claude Code 的 .NET + Node.js 前后端全栈白盒代码安全审计 Skill 集合：数据流分析 + 业务逻辑验证方法论，80+ 漏洞/框架专项，跨端契约对账与污点链拼接，输出证据驱动、可落地修复的审计报告。
SkillLink only★ 4Few stars
🤖 Multi-Agent MCP Server - Let Claude Code / Windsurf / Cursor orchestrate GPT, Claude, Gemini to work as an AI dev team
Node.jsMIT★ 49No key
Find API routes with no auth check or input validation in Next.js, SvelteKit, React Router/Remix, Express, Fastify, Hono, NestJS and tRPC apps. One command, no account, runs offline. SARIF, GitHub Act
Node.jsMIT★ 2Few starsNo key
Template expansion for AI prompts - variable substitution for Claude Code, Copilot, Goose, Bob, and more
SkillApache-2.0★ 3Few starsNo key
Open-source AI agent skills for Claude Code, OpenAI Codex, Cursor, and modern developer workflows.
SkillMIT★ 1Few starsNo key
Hyperdope is a suite of autonomous agents that audit code, hunt 0days, and ship coordinated-disclosure advisories - the way a top-tier research team works, at machine speed.
Node.jsMIT★ 8No key
这是一个面向多项目维护者的自动化工具，旨在自动处理 Dependabot 和 Code Scanning 产生的大量简单、重复的告警修复工作，如依赖版本升级、安全漏洞修复等，从而显著提升维护效率。
SkillMIT★ 1Few starsNo key
A task management Model Context Protocol (MCP) server that helps AI assistants break down user requests into manageable tasks with subtasks, dependencies, and notes. Enforces a structured workflow wit
Node.jsMIT★ 30No key
Catch your AI coding agent's security slips and turn the correction into a local regression eval. Local-first, deterministic, no LLM judge.
Node.jsApache-2.0★ 3Few starsNo key
AI context engine for Claude Code, Cursor, Windsurf — pack, compress, and optimize any codebase. Save 60-90% tokens. Web dashboard on port 7456.
Node.jsMIT★ 6No key
Node.js client library for the Blumira SIEM API
SkillApache-2.0Few starsNo key
1,326+ Claude Code skills from Antigravity Awesome Skills (and others) - Security, Frontend, Backend, DevOps, AI/ML, Cloud and more
SkillMIT★ 5No key
Secure MCP server for safe AI-powered terminal access with risk analysis, sandboxing, logging, filesystem protection, and Docker/Git integrations.
Node.jsMIT★ 8No key
Who stands behind it
