MCP servers and skills: search, filter by where they run, and compare.
MCP server for the SecurityTrails API — DNS history, subdomain enumeration, WHOIS, SSL certificates and IP intelligence as tools for LLM agents.
Node.jsMITFew starsNo key
Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate workl
OfficialSkillApache-2.0★ 21k in collectionNo key
Security for AI agents: 8 MCP tools - config audits, secret redaction, skill vetting, network scans, agent-native checkout
PythonApache-2.0Few starsNo key
Security guidance based on library and version for developers and agents.
SkillApache-2.0★ 20No key
Understands a repository’s architecture and attack surface, then compiles validated, harness-ready security audit skills for application-security testing.
SkillMITFew starsNo key
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
PythonMIT★ 14No key
Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running security audits (`audit_cluster.sh`), enforcing Network
OfficialSkillApache-2.0★ 21k in collectionNo key
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching t
OfficialSkillMIT★ 40k in collectionNo key
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
SkillMIT★ 86No key
25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM codin
SkillMIT★ 20No key
Zero-key cybersecurity MCP server: grade any site security A+ to F, check if a CVE is actively exploited, get plain-English MITRE ATT&CK defenses. No API keys, no signups.
PythonMITFew starsNo key
Claude skill for SaaS security auditing — 16 domains, 95 checks, OWASP-based
SkillMIT★ 11No key
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
OfficialSkillMIT★ 30kNo key
Local-first, evidence-led security knowledge base with a model-neutral JSON CLI, immutable sources, and human-reviewed proposals.
SkillMIT★ 10No key
A collection of Claude Code skills that help security teams stay secure
SkillMIT★ 58No key
Security scanning skill for AI coding agents. CVE vulnerability detection, OWASP Top 10 code analysis, and dependency audits. Follows agentskills.io specification.
SkillMIT★ 18No key
A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, inspect, and analyze AWS infrastructure for security issues and m
PythonApache-2.0★ 84No key
Runs a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering source code and dependencies, the live site, browser headers, firewall, aut
OfficialSkillMIT★ 1.0k in collectionNo key
🔌 Exposes Security scanning over MCP — vulnerability assessment, SAST, DAST, dependency checking, SBOM analysis. MIT.
PythonMITFew starsNo key
Claude Code skill that runs real security scanners (Semgrep, gitleaks, TruffleHog, Trivy, osv-scanner, ZAP) then verifies every finding against source. SAST, secrets across full git history, SCA, IaC,
SkillMIT★ 5No key
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
Node.jsMIT★ 124No key
Plans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security. Covers cluster add-ons (Secret Manager enablement), RBAC hardening (disabling insecure bindings, audit to
OfficialSkillApache-2.0★ 21k in collectionNo key
A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full offensive-security pipeline that maps a codebase, hunts vulnerabi
SkillMIT★ 43No key
Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent and LLM red-teaming, supply-chain risk, and appsec depth.
SkillMIT★ 5No key
Who stands behind it
