Every listed MCP server and skill. Filter by where it runs, what it needs, and how it is licensed.
1–12 of 37 tools for “security”
Clear allPerform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/repo
official/skill/link only/★ 28k in collection
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger on
official/skill/link only/★ 28k in collection
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the use
official/skill/link only/★ 28k in collection
The ultimate OWASP MCP Top 10 security checklist and pentesting framework for Model Context Protocol (MCP), AI agents, and LLM-powered systems.
mcp/link only/★ 17
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisonin
mcp/link only/★ 378
LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )
mcp/link only/★ 38
The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.
mcp/link only/★ 511
Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Copilot CLI, OpenClaw,
mcp/link only/★ 15
Agentic SAMM - An OWASP SAMM Extension for AI-Driven Development
mcp/link only/★ 18
AI agent harness for Active Directory offensive security — 8 skill domains, 13 slash commands, 7 agents, ROE-safe orchestration. Part of DoOS by Evaluris Solutions Labs.
mcp/link only/★ 17
Forensic auditor for local AI coding agents (Claude Code, Codex CLI, OpenClaw) and project-surface scanner for repos containing skills, plugins, and MCP manifests. Reads session logs, configs, and ins
mcp/link only/★ 15
Who stands behind it
Who stands behind it
