Browse the library

SkillSpector is a security scanner for AI agent skills, detecting vulnerabilities, malicious patterns, and prompt injection risks before installation.

This MCP server enables AI agents to autonomously perform penetration testing, vulnerability discovery, and bug bounty automation using over 150 cybersecurity tools.

A curated library of offensive security skills for Claude, equipping agents with expert methodologies for various attack surfaces like SQLi and shellcode.

A Claude Code plugin marketplace from Trail of Bits, offering skills to enhance AI-assisted security analysis, vulnerability detection, and audit workflows.

Offers an adversary simulation and red teaming platform with an integrated LLM agent to assist with cybersecurity assessment tasks.

This Claude Code skill bundle provides 83 skills, 15 slash commands, and 681 disclosed report patterns for bug hunting and external red-team operations.

An MCP server that integrates with JADX to allow AI agents to analyze Android APKs for vulnerabilities and reverse engineer Java code.

Scans agent skills for prompt injection, data exfiltration and malicious code using pattern rules, dataflow analysis and an optional LLM judge.

Establishes an open-source AI Security Operations Center to detect, triage, and investigate security threats using AI agents.

This MCP server enables AI agents to perform comprehensive static and dynamic malware analysis across various file types and operating systems.

This MCP server enables an AI agent to perform penetration testing, investigate applications, record findings, and verify exploits with evidence.

This MCP server provides an AI-powered OSINT agent with 20 investigation tools, enabling security researchers to gather open-source intelligence with verified findings.

This production-grade MCP server gives Claude 27 security intelligence tools across 21 APIs for CVE lookup, EPSS scoring, CISA KEV, and more, enabling rapid security analysis.

CC Safety Net is a pre-execution guard that blocks destructive Git and file system commands, and prevents access to sensitive files for AI coding agents.

A self-hosted sandbox for red teams to analyze malware payloads, with MCP integration for LLM-driven analysis.

Skills from Pashov Audit Group that run Solidity security audits, pre-audit x-ray scans and Echidna/Medusa fuzz suite generation.

This security scanner analyzes LLM agentic workflows, identifies tools and MCP servers, and maps potential vulnerabilities for security insights.

Provides expert-level Claude Skills for Governance, Risk, and Compliance (GRC), offering guidance across numerous industry standards and regulations.

An MCP server that provides attestation infrastructure for AI agents, including DID-based identity, W3C Verifiable Credentials, and an EU AI Act compliance layer with 47 tools.

This MCP server connects AI agents to a Linux machine, enabling them to execute terminal commands and perform AI-assisted penetration testing tasks.

A collection of 38 Dockerized MCP servers offering 300+ offensive security tools like Nmap and Ghidra, enabling AI agents to perform security assessments.

An MCP server that integrates with the JADX-AI Plugin, enabling LLMs like Claude to analyze Android APKs for vulnerabilities and perform reverse engineering tasks.

An awesome list providing comprehensive resources and considerations for Model Context Protocol (MCP) security, including best practices for servers and clients.

Local safety gate and memory for agents that blocks destructive commands like rm -rf via a PreToolUse hook and traces failures to their root cause.