Security

0xReisearch/crypto-mcp-beta

MCP server Claude CodeCodexCursor +2

Simple symmetric GPG file encryption and decryption. Runs locally from the crypto Python package.

anchore/grype-mcp

MCP server Claude CodeCodexCursor +2

Official Anchore Grype MCP Server for AI-assisted vulnerability scanning. Runs locally from the grype-mcp Python package.

ScopeBlind/scopeblind-gateway

Plugin Claude Code

Bundles 1 skill, 2 hooks, 1 MCP server · 40 tokens together

Fail-closed Cedar policy gate plus Ed25519 signed receipts for AI agent tool calls. Blocks what breaks the rules before it runs, denies on any policy error, and proves the gate is live with a startup self-test.

jmpijll/fortimanager-mcp

MCP server Claude CodeCodexCursor +2

MCP server "fortimanager-mcp" as configured in jmpijll/fortimanager-mcp. Runs locally from the fortimanager-mcp Python package.

hkxiaoyao/lanalyzer

MCP server Claude CodeCodexCursor +2

Python Taint Analysis Tool for finding security vulnerabilities. Runs locally from the lanalyzer Python package.

hunter-io/hunter-mcp

MCP server Claude CodeCodexCursor +2

MCP Server for Qianxin Hunter cyberspace mapping. Runs locally from the hunter-mcp Python package.

godzeo/mcp-request

MCP server Claude CodeCodexCursor +2

A comprehensive HTTP client MCP server for security testing, API testing, and web automation. Runs locally from the mcp-request Python package.

vigolium/skills

Skill Claude CodeCodex

Use when operating the vigolium CLI for web vulnerability scanning, security testing, or traffic analysis. Covers scanning a URL/spec/raw request, running AI agent scans (autopilot, swarm, audit, query), triaging findings, confirming them with replay/fuzz, handing off to Burp or Caido, browsing stored traffic, writing…

fastrevmd-lab/fwskillsshare

Skill Codex

Parse Juniper SRX and Junos display-set or hierarchical configurations into the shared firewall schema. Use when input contains set security, zones, policies, address-book, from-zone, to-zone, NAT rule-set, chassis cluster, logical-systems, or routing-instances, including audit, conversion, diff, summary, and…

Jmosier69/refute

Skill Claude Code

Multi-angle code review that adapts to what is being reviewed — a mid-flight worktree increment, a full PR before production, a merge-window integration sweep, or a security-only pass. Findings are scored, adversarially refuted, widened to the same defect elsewhere in the codebase, and reported to the native review…

anatoly505/ios-reverse-skills

Cursor rule Cursor

Use this rule whenever the user asks to extract, analyze, or reverse engineer an iOS app — IPA, .app bundle, Mach-O, .dylib, or .framework.

iceman1001/awesome_rfid_claude_skills

Skill Claude CodeCodex

Electron application reverse engineering — ASAR unpacking, webpack bundle analysis, auth/payment logic discovery, IPC channel mapping, and client-side authorization bypass analysis. Use when the user needs to: reverse engineer an Electron app (.deb/.dmg/.exe), analyze auth/subscription/license logic in Electron apps…

tabnine/skills

Cursor rule Cursor

Use Context Engine CLI (ctx-cli) to search code & the knowledge graph, investigate services, triage/resolve CVE & SAST findings, and apply coding guidelines.

kevinmhorvath/threat-intel-toolkit

Plugin Claude Code

Bundles 2 skills, 1 agent · 609 tokens together

Defensive IOC + vulnerability triage on free/open-source intel: a subagent plus two skills — threat-intel-lookup (aggregates 10 key-free feeds and looks up IPs, domains, URLs, CVEs) and exploit-availability-check (rates a CVE's exploit/PoC maturity via KEV, EPSS, Metasploit, Nuclei, Exploit-DB, and PoC aggregators).…

occasiolabs/occasio

MCP server Claude CodeCodexCursor +2

Tamper-evident, Sigstore-signed audit trail for Claude Code agents. Runs locally from the @occasiolabs/occasio npm package.

matheuswidder/Acervo-Agents-n-Skills

Skill Claude CodeCodex

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities.

fusebase-dev/fusebase-flow

Cursor rule Cursor

Fusebase Flow security/permissions rules. Use when changes touch auth, secrets, env files, deploy config, external messages, or production data.

dennishavermans/agentfile

Plugin Claude Code

Bundles 1 skill, 1 hook · 51 tokens together

Catches agent configuration that grants more than it appears to: permission rules whose wildcards reach further than they read, broken skill references, and MCP servers that will silently fail to load.

IvanBBaev/servicenow-mcp-ai

Plugin Claude Code

Bundles 1 MCP server

Drive ServiceNow from your AI assistant — 67 tools over the full REST surface, with plan-and-apply write safety, capability preflight and an ACL security scan.

eyesecurity/skills

Plugin Claude Code

Bundles 12 skills · 1,088 tokens together

EU compliance enforcement for AI agents — NIS2, GDPR, ISO 27001.

dmarcoff/mcp

MCP server Claude CodeCodexCursor +2

DMARC analytics and domain onboarding for AI assistants — health, SPF/DKIM, compliance, anomalies. Remote server at mcp.dmarkoff.com.

andypitcher/ponytail-sec

Plugin Claude Code

Bundles 4 skills · 256 tokens together

Ponytail security companion and audit: diff-scoped hardening for active development, plus full-project security scans.

virtualsms-io/mcp-server

Skill Claude CodeCodex

Real SIM-card SMS verification for AI agents via VirtualSMS MCP server. TRIGGERS: SMS verification, OTP code, phone number, virtual number, SIM card, two-factor authentication, account verification, WhatsApp verify, Telegram verify, real SIM, agent phone, MCP SMS, virtualsms. Use when an agent needs to receive an SMS…

gautamvarmadatla/mcpsafetywarden

MCP server Claude CodeCodexCursor +2

MCP proxy server with behavioral profiling, security scanning, risk gating, and safe execution. Runs locally from the mcpsafetywarden Python package.