Security · Model Context Protocol · For devops and sre engineers

Hunts for compromised workloads and malicious traffic in a Kubernetes cluster by sweeping network data through Kubeshark MCP, mapped to MITRE ATT&CK.

kubeshark/kubeshark

Cross-agent self-inspection of your AI-agent stack. An agent skill from alexgreensh/repo-forensics.

alexgreensh/repo-forensics

Run HOL Guard scanner and guard operations via uv run hol-guard.

hashgraph-online/hol-guard

Install or initialize HOL Guard local runtime protection for Claude Code.

hashgraph-online/hol-guard

Request a security expert assessment for code changes that touch child process spawning, file system access, configuration loading, or environment variable handling.

ktnyt/cclsp

Check HOL Guard local protection status for Claude Code without changing configuration.

hashgraph-online/hol-guard

Commit and push a finished change the way this repo requires — explicit paths, one commit per logical change, no attribution, the five documentation places answered, the site checks before a push (a…

guardana/guardana

Decrypt and recover obfuscated strings from binaries by analyzing encryption patterns and generating decryption scripts

P4nda0s/bin-deobf-skills

Mod a PC game the user owns, taking an idea to working in the real game and recorded.

rehan-remade/universal-modder

Perform exhaustive analysis of a critical IOC. An agent skill from dandye/ai-runbooks.

dandye/ai-runbooks

Scan AI agent skills, plugins, MCP servers, and agent tooling for prompt injection, unsafe commands, secret exposure, and supply-chain risks before installing or trusting them.

iflytek/skillhub

Read the vendor's breaking changes, deprecations, migration notes and CVEs for every version between the one pinned now and the one being moved to, through the whatsnew MCP server's upgradenotes tool.

getknit/knit

Performs a comprehensive Amazon ECS operations review across the 6 review pillars (Resiliency & HA, Observability, Security, Operations, Performance, Additional Analysis) using read-only AWS APIs…

aws/tools-for-devops-agent

OpenClaw 安全部署指南 / Security deployment guide — help users secure their OpenClaw installation

jnMetaCode/shellward

Audit AI agent configurations for security risks — excessive permissions, prompt injection surfaces, data exfiltration paths, and missing guardrails.

OWASP/secure-agent-playbook

Teaches the agent to use the WebCrypt MCP server for AES-256-GCM symmetric encryption, RSA-4096 hybrid encryption, key generation, digital signatures, hashing, and post-quantum cryptography.

putervision/state-memory-mcp

Hunt for vulnerabilities in a running debuggee by analyzing imports/exports, triaging attack surface, and iteratively testing for bugs with PoC generation.

dariushoule/x64dbg-skills

Hunt for the failure this project exists to prevent — code that compiles, types, tests green, and quietly reports "all clear" about something it never examined.

guardana/guardana

Use astgrepscan, sourcesinkscan, and smtcheckreachability (mantisprogramanalysis MCP server) to move a candidate toward a proven-reachable finding

deonmenezes/mantishack

Turn a development task into one work file in .work/ — goal, decisions, lanes with exact files and verification, done-criteria.

guardana/guardana

For any security-related task — threat triage, incident response, MITRE ATT&CK mapping, CVE lookup, exploit analysis, defensive control validation, red/blue/purple team work — always consult the…

lyonzin/knowledge-rag

Security review: (1) vet an untrusted SKILL.md or .mcp.json BEFORE installing it — the injection/exfiltration scanner; CRITICAL blocks the install; (2) audit code on an untrusted-input path (a…

redhat-et/ripwire

Threat-model and find vulnerabilities, with practical remediation.

antonbabenko/deliberation

What to do if a mantiscanary decoy tool ever shows up as tempting or gets called -- treat it as a security incident, not a normal tool result

deonmenezes/mantishack

Reverse engineer binaries with IDA Pro: decompilation, disassembly, data-flow tracking, cross-references, and IDA MCP automation for deep static analysis of PE/ELF/Mach-O targets.

sickn33/agentic-awesome-skills

Step-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls.

wshobson/agents

Build a CodeQL database and run dataflow-backed query-suite analysis via the mantiscodeql MCP server

deonmenezes/mantishack

Run Azure compliance and security audits with azqr plus Key Vault expiration checks.

microsoft/GitHub-Copilot-for-Azure

Run osv-scanner via the mantisosvscanner MCP server for SCA (vulnerable dependency) findings

deonmenezes/mantishack

Run and inspect the local pieces of Guardana — the throwaway PostgreSQL for the collector, the collector itself, a fake OpenAI-compatible endpoint to probe, the documentation site served locally…

guardana/guardana

Run full security scans on the codebase using Ruflo security tools.

ruvnet/ruflo

Scan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence.

ruvnet/ruflo

Create OPA governance policies for Harness via MCP. An agent skill from harness/harness-skills.

harness/harness-skills

Deep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing

alinaqi/maggy

ANALYSIS SKILL — Azure compliance and security auditing: best practices, Key Vault expiration monitoring, resource validation.

jonathan-vella/apex

Run trufflehog via the mantistrufflehog MCP server and handle secret findings without ever exposing the raw secret

deonmenezes/mantishack

Enterprise-review-grade threat model from harness threat-model <path.

ruvnet/ruflo

Explore GTI relationships for an IOC to discover related entities.

dandye/ai-runbooks

MCP server attack hunting - tool poisoning, indirect prompt injection via tool output, rug-pull updates, cross-tool shadowing, over-permissioned/excessive-agency tools, lethal trifecta.

Encod3d-Sec/TORCH

Search, query, and maintain the qmd-indexed wiki - semantic search, keyword search, re-index after adding pages, check index status.

Encod3d-Sec/TORCH

Review an MCP server for common security gaps: LLM-facing surfaces as injection vector (tools, resources, prompts, descriptions), scope blast radius, destructive ops without consent, upstream auth…

cyanheads/pubmed-mcp-server

Entry point for any development task in this repo — feature, bugfix, refactor, cleanup, a new command, target or evaluator, a collector change.

guardana/guardana

Read-only audit of MCP definition language across an existing surface — tools, resources, prompts, server instructions.

cyanheads/pubmed-mcp-server

MCP gateway security patterns, token management, request validation, and audit logging for MCP communications

Hack23/cia

Diagnose and operate Spring AI projects with version-aware Maven or Gradle checks for ChatClient, advisors, retrieval, conversation memory, tool/MCP boundaries, streaming, configuration, and…

magnus919/agent-skills

A skill your agent uses when /compliance:analyze-cve is invoked with --jira= or --jql= and needs the CVE ID, image name, branch, and enriched ticket context from a Jira issue.

openshift-eng/ai-helpers

MCP server security registry and trust assessment — look up servers in the 427+ server security metadata registry, run pre-install marketplace checks, batch fleet risk scoring, assess skill file…

LeoYeAI/openclaw-master-skills

AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC endpoint, Transit Gateway/Cloud WAN…

aws/agent-toolkit-for-aws