Security

GumbyEnder/mcp-tailscale

Skill Claude CodeCodex

Secure homelab networking with Tailscale + self-hosted Hermes agents via the mcp-tailscale MCP server.

Xiangyu-Li97/prompt-injection-mcp

MCP server Claude CodeCodexCursor +2

MCP server "prompt-injection-mcp" as configured in Xiangyu-Li97/prompt-injection-mcp. Runs locally from the prompt-injection-mcp npm package.

AraneaDev/Chaos-MCP

MCP server Claude CodeCodexCursor +2

security holding package. Runs locally from the chaos-mcp npm package.

Sabastiaz/tenable-vpr-mcp

MCP server Claude CodeCodexCursor +2

MCP server "tenable-vpr-mcp" as configured in Sabastiaz/tenable-vpr-mcp. Runs locally from the tenable-vpr-mcp Python package.

ugurkocde/IntuneAssignmentChecker-MCP

MCP server Claude CodeCodexCursor +2

Read-only local MCP server for explaining Microsoft Intune assignments. Runs locally from the intune-assignment-checker-mcp npm package.

fncreator22/sentinel-mcp

MCP server Claude CodeCodexCursor +2

SENTINEL MCP server — pre-execution transaction safety oracle for AI agents, paid autonomously via x402 on Base. Runs locally from the sentinel-mcp Python package.

BennedictQuanTon/AegisMCP

MCP server Claude CodeCodexCursor +2

A deterministic MCP server that maps threat-model context to actionable coding requirements. Runs locally from the aegis-mcp Python package.

Suzu-Testing/metasploit-cursor-harness

Cursor rule Cursor

Controls phase/gate/subgate workflow routing and subagent delegation.

doteyeso-ops/mcp-server-vibes-coded

Skill Claude CodeCodex

Use before installing an untrusted SKILL.md, MCP plugin, package script, or agent installer. Buys a deterministic supply-chain risk report for $0.05 USDC through FiatDock.

jmcentire/signet-eval

Plugin Claude Code

Bundles 1 hook

Deterministic policy enforcement for AI agent tool calls across Claude Code, Codex, Antigravity, and OpenCode.

MoltyCel/moltrust-mcp-server

Skill Claude CodeCodex

MCP server providing 45 tools for AI agent trust verification, identity, and reputation scoring.

UnboundCompute/lachesis

MCP server Claude CodeCodexCursor +2

A compiler-precise code property graph with an embedded columnar store and a navigation layer for security reasoning over source code. Runs locally from the lachesis-cpg Python package.

abdessamad-elamrani/MalwareAnalyzerMCP

MCP server Claude CodeCodexCursor +2

MCP server "malwareanalyzermcp" as configured in abdessamad-elamrani/MalwareAnalyzerMCP. Runs locally from the malwareanalyzermcp npm package.

lokallost/abusech-mcp

MCP server Claude CodeCodexCursor +2

MCP server "abusech-mcp" as configured in lokallost/abusech-mcp. Runs locally from the abusech-mcp Python package.

alramalho/mcp-guard

MCP server Claude CodeCodexCursor +2

Simple HTTP proxy that gates MCP servers with block rules. Runs locally from the @alramalho/mcp-guard npm package.

GeniusHu-tgty/Hunter

Skill Claude CodeCodex

Use for authorized web/API security assessment, CTF vulnerability research, Hunter health checks, MCP orchestration, local knowledge-base lookup, evidence registration, and report generation. All HTTP tools go through RequestBroker — WAF blocks, captchas, and rate limits never produce false findings.

Tuteliq/mcp

MCP server Claude CodeCodexCursor +2

Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video. Runs locally from the @tuteliq/mcp npm package. Needs 1 environment variable to run.

Njengah/claude-code-tracker

Agent Claude Code

Read-only reviewer for JWT login, password hashing, and /auth routes in this tracker. Use when the user asks to review auth.py, registration, login tokens, or getcurrentuser. Use after changes to auth helpers or auth routes. Do not use for session/cost exploration or for implementing features.

Aladeen12541/claude-ip-rotator

Plugin Claude Code

Bundles 1 skill, 1 command · 211 tokens together

AWS API Gateway IP rotation for security testing. Single switch routes ALL HTTP/HTTPS traffic (nuclei, httpx, ffuf, curl, everything) through rotating AWS IPs to bypass WAF rate limits and IP blocks.

arcjet/skills

Skill Claude CodeCodex

Add Arcjet security protection to HTTP routes, AI agent tool calls, MCP servers, background jobs, and queue workers. Covers rate limiting, bot detection, email validation, prompt injection, sensitive information blocking (including Rampart NER), content moderation, capture/flush, remote Guard policies, typed inputs…

megaeth-labs/skills

Skill Claude CodeCodex

Reviews an existing MOSS wallet integration for security and correctness before launch on MegaETH. Use when auditing partner code rather than building it: produces findings grouped as Critical, Risky defaults, and Recommendations with concrete remediations. Checks for frontend-owned trust decisions, missing backend…

Shad0wMazt3r/The-Scaffolding

Skill Claude CodeCodex

Execute web-application assessment from setup and recon through injection, access control, auth/session issues, API, and SSRF chains.

m0rvayne/mcp-redteam

Plugin Claude Code

Bundles 1 skill · 31 tokens together

Full audit and penetration testing of MCP servers — health, architecture, completeness, security.

ASK191225/bugbounty-kit

Skill Claude CodeCodex

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct…