MCP servers and skills: search, filter by where they run, and compare.
GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review",
OfficialSkillApache-2.0★ 1.1k in collectionNo key
MCP Server for Metasploit
SkillApache-2.0★ 744No key
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
PythonApache-2.0★ 1.6kNo key
Use this skill when the user asks to "find CVEs for", "check if my domain is breached", "threat intel on", "OSINT on", "security news about", "attack surface of", "is this IP malicious", "what vulnera
OfficialSkillApache-2.0★ 275 in collectionNo key
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with
SkillApache-2.0★ 35kNo key
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
SkillApache-2.0★ 949No key
Autonomous Offensive Security Agent for Red Team Operations
PythonApache-2.0★ 4Few starsNo key
This skill helps Claude write secure code and prevent common vulnerabilities.
SkillApache-2.0★ 1.4kNo key
MCP Server per CVE PostgreSQL — Query CVEs, yanked releases, exploits e upgrade path per qualsiasi versione di PostgreSQL direttamente dal tuo AI assistant.
PythonApache-2.0Few starsNo key
CISA Known Exploited Vulnerabilities with BOD 26-04 deadlines, SSVC prioritization, and the full ICS advisory corpus (CSAF) via MCP. Keyless. STDIO or Streamable HTTP.
Node.jsApache-2.0★ 1Few starsNo key
Production-ready AI AppSec skills for SAST, threat modeling, remediation, PR security review, and serialization abuse analysis.
SkillApache-2.0★ 7No key
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
PythonApache-2.0★ 32No key
K8s misconfiguration exploitation toolkit
PythonApache-2.0★ 4Few starsNo key
Open source attack-path engine for AWS and Kubernetes: correlates your scanners into one graph and blocks the pull request that opens a route to your data.
SkillApache-2.0★ 9No key
DPO/SafeDPO/OPAD training + eval for teaching tool-using LLMs to refuse falsely-benign MCP exploits
SkillApache-2.0★ 4Few starsNo key
Security scanning for CI from one file: SAST, SCA, secrets, IaC and containers, with every finding ranked by exposure, criticality, exploitability and reachability.
GoApache-2.0★ 7No key
Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression testing and reports.
PythonApache-2.0★ 17No key
SQLMap with Autonomous AI, phased workflows, RAG memory, and MCP Agent Tools
SkillApache-2.0★ 99No key
Agentic pentest & red-team harness via Burp Suite MCP toolkit
SkillApache-2.0★ 6No key
Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.
Node.jsApache-2.0★ 1Few starsNo key
MCP server for AI-driven penetration testing. Wraps 22 security tools (nmap, nuclei, sqlmap, Metasploit…) as 46 safety-hardened MCP tools for Claude and LLM agents. Written in Rust.
DockerApache-2.0★ 2Few starsNo key
FIRST EPSS scores, score history, and CVE prioritization with caller-supplied severity.
Node.jsApache-2.0Few starsNo key
Who stands behind it
