MCP servers and skills: search, filter by where they run, and compare.
Verify supply chain integrity for AI agent plugins, tools, and dependencies. Use this skill when: - Generating SHA-256 integrity manifests for agent plugins or tool packages - Verifying that installed
OfficialSkillMIT★ 40k in collectionNo key
Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input sc
OfficialSkillMIT★ 40k in collectionNo key
Use this skill whenever the user wants to build scroll animations, scroll effects, parallax, scroll-triggered reveals, pinned sections, horizontal scroll, text animations, or any motion tied to scroll
OfficialSkillMIT★ 40k in collectionNo key
Guide for setting up vcpkg in C++ projects, managing dependency versions, and cross-compiling. Covers manifest initialization, CMake and Visual Studio integration, classic-to-manifest migration, versi
OfficialSkillMIT★ 40k in collectionNo key
Upgrade GitHub Actions to supported runtimes by selecting safe action versions, preserving workflow behavior, and validating post-upgrade execution.
OfficialSkillMIT★ 40k in collectionNo key
Build, review, debug, package, and test Roslyn diagnostic analyzers, code fix providers, and incremental source generators. Use for DiagnosticAnalyzer, CodeFixProvider, IIncrementalGenerator, IOperati
OfficialSkillMIT★ 40k in collectionNo key
A secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord, Teams, and MCP tools. Secure by design, runs on you
SkillMIT★ 2.9kNo key
Reduces JavaScript dependency footprint with pnpm while preserving lockfile, workspace layout, and dependency range style. Runs /check-npm first, then removes unused deps, dedupes versions, ranks tran
OfficialSkillApache-2.0★ 285 in collectionNo key
The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.
SkillMIT★ 16No key
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Node.jsApache-2.0★ 219No key
Animated React components you own. 55 components built with TypeScript, Tailwind CSS and Motion. Copy, paste, or install with the shadcn CLI.
Node.jsMIT★ 234No key
Production agent skills for Claude Code, Cursor, and any SKILL.md harness — Codex fleets, video pipeline, monorepo review bundles, multi-chain explorer.
SkillMIT★ 92No key
mongodb-memory-server (MMS) version pinning via the pnpm catalog, mandatory vitest timeouts, and the new-package checklist.
OfficialRuleApache-2.0★ 415 in collectionNo key
Defensive integrity monitor for MCP tool descriptors: pins canonical hashes and reports mutation, shadowing, poisoning, and stdio transport risk.
PythonMIT★ 31No key
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
PythonMIT★ 18No key
Stop juggling, start finishing. GSD Task Manager makes it easy to sort your to-dos into what’s urgent and what’s important, so you can finally get stuff done without burning out. It’s simple, visual,
SkillMIT★ 38No key
The Open Source Analytics and Visibility Layer for ChatGPT Apps and MCP Apps.
SkillMIT★ 31No key
Generate native OmniGraffle .graffle files programmatically
SkillMIT★ 15No key
Cross-platform .NET performance engineering skill for coding agents, covering CPU, memory, GC, benchmarking, concurrency, startup, native profiling, GPU rendering, and production diagnostics on macOS,
SkillMIT★ 36No key
Native Agent skill for analyzing Meta (Facebook/Instagram) Ads campaigns in real-time. Connects directly to Meta Marketing API without MCP infrastructure. Features campaign data, performance metrics,
SkillMIT★ 10No key
Ai skills for Frida dynamic instrumentation across Android, iOS, native hooks, agents, and troubleshooting
SkillMIT★ 6No key
Security layer for AI agent-to-agent communication. Every message is signed, inspected, and logged. If it doesn't comply, it doesn't pass. No LLM. No cloud. Single binary. Your infra, your data.
GoApache-2.0★ 18No key
Who stands behind it
