MCP servers and skills: search, filter by where they run, and compare.
MCP server for the SecurityTrails API — DNS history, subdomain enumeration, WHOIS, SSL certificates and IP intelligence as tools for LLM agents.
Node.jsMITFew starsNo key
Understands a repository’s architecture and attack surface, then compiles validated, harness-ready security audit skills for application-security testing.
SkillMITFew starsNo key
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
PythonMIT★ 14No key
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching t
OfficialSkillMIT★ 40k in collectionNo key
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
SkillMIT★ 86No key
25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM codin
SkillMIT★ 20No key
Zero-key cybersecurity MCP server: grade any site security A+ to F, check if a CVE is actively exploited, get plain-English MITRE ATT&CK defenses. No API keys, no signups.
PythonMITFew starsNo key
Claude skill for SaaS security auditing — 16 domains, 95 checks, OWASP-based
SkillMIT★ 11No key
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
OfficialSkillMIT★ 30kNo key
Local-first, evidence-led security knowledge base with a model-neutral JSON CLI, immutable sources, and human-reviewed proposals.
SkillMIT★ 10No key
A collection of Claude Code skills that help security teams stay secure
SkillMIT★ 58No key
Security scanning skill for AI coding agents. CVE vulnerability detection, OWASP Top 10 code analysis, and dependency audits. Follows agentskills.io specification.
SkillMIT★ 18No key
Runs a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering source code and dependencies, the live site, browser headers, firewall, aut
OfficialSkillMIT★ 1.0k in collectionNo key
🔌 Exposes Security scanning over MCP — vulnerability assessment, SAST, DAST, dependency checking, SBOM analysis. MIT.
PythonMITFew starsNo key
Claude Code skill that runs real security scanners (Semgrep, gitleaks, TruffleHog, Trivy, osv-scanner, ZAP) then verifies every finding against source. SAST, secrets across full git history, SCA, IaC,
SkillMIT★ 5No key
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
Node.jsMIT★ 124No key
A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full offensive-security pipeline that maps a codebase, hunts vulnerabi
SkillMIT★ 43No key
Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent and LLM red-teaming, supply-chain risk, and appsec depth.
SkillMIT★ 5No key
SecurityTrails MCP — wraps SecurityTrails API (securitytrails.com)
Hosted by authorMITFew starsNo key
An open library of 206 security skills for AI agents — pentest, bug bounty, CTF, reversing & defense across 23 domains, with CI-verified routing and Sigma detections. 面向 AI 智能体的开源安全技能库:渗透测试 · 漏洞赏金 · C
SkillMIT★ 23No key
Designs and documents authentication, authorization, and security patterns for any API. Use whenever the user asks about OAuth 2.0, JWT, API keys, RBAC, ABAC, rate limiting for security, CORS, HTTPS e
OfficialSkillMIT★ 376 in collectionNo key
Scope, audit, harden, and retest web projects with AI coding agents and reproducible evidence.
SkillMIT★ 4Few starsNo key
Vulnerability-intelligence MCP server for AI agents: CVE lookups (NVD) and dependency-manifest audits (OSV). Keyless.
Hosted by authorMITFew starsNo key
Who stands behind it
