Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

GitHub Actions CI/CD pipeline configuration for Golang projects — workflow files for test, lint, SAST, coverage and vulnerability-scan jobs, Dependabot and Renovate config files, GoReleaser release pipelines, Docker build/push, repository security settings, and AI-driven PR review. Use when setting

Gives AI coding agents on-demand security playbooks, a code scanner they can run on their own output, and live lookups against CISA KEV, NVD and OSV so they verify threats instead of guessing. Runs locally with no API keys or accounts, exposing skills, tools and a secure-build prompt to Claude Code, Codex, Cursor or any MCP client.

Free MCP security scan: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + trust badge

Audit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 16 other rule categories (300+ rules), returns an LLM-optimized report, then drives an iterative fix loop, mapping issues to source files, applying fixes, a

Golang OpenAPI/Swagger documentation with swaggo/swag — annotation comments (@Summary, @Param, @Success, @Router, @Security), swag init code generation, framework integrations (gin, echo, fiber, chi, net/http), security definitions (Bearer/JWT, OAuth2, API key), and struct tags (swaggertype, enums,

Check any agent skill or MCP server's security verdict before your agent installs it. Sandbox-based 0-100 verdicts (Verified, Caution, Blocked). Free, read-only, no account.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

The community-driven Claude Code plugin marketplace for MSPs — 70+ plugins across PSA, RMM, security, documentation, and accounting, plus cross-vendor industry workflow packs (ops, security, finance, compliance, sales, DevOps, cloud infra) that compose whatever tools you have connected.

Audit and optimize an existing Convex app: security, scale, upgrades, observability.

Audit and optimize an existing Convex app: security, scale, upgrades, observability.

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.

Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

NestJS best practices and architecture patterns for building production-ready applications. This skill should be used when writing, reviewing, or refactoring NestJS code to ensure proper patterns for modules, dependency injection, security, and performance.

Enables AI agents and IDE assistants to run zero-config security audits, detect secrets and vulnerable dependencies, and apply adversarial verification to reduce false positives.

Enables local MCP clients to discover and invoke openEuler infrastructure operations, covering CVE security notices, packages, forums, SIG documentation, mailing lists, search, repositories, and issues through structured tool calls.

Operate Automo Build, the AI app builder, as yourself: projects, builds, QA, security, deployments.

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

Enables auditing GitHub Actions workflows for security problems directly from an MCP client, returning a risk score and findings with file:line evidence, attack narratives, and fixes. Also exposes the full rule catalog and a one-call demo that writes and scans a deliberately broken workflow.

Enables querying aggregated security news and vulnerability feeds from Claude, with semantic search and filtering by severity, source, or category, plus real-time threat summaries.

🦾 MONSTER ENGINEER v2 - Ultimate AI CLI with 63 Skills, 12 Superpowers, 14 Agents. Multi-Agent Orchestration, Cost-Aware, Security Scorecard, Parallel-First.

MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment method. The platform supports container monitoring and MCP service token verification, solving security risks and enabling rapid deployment of MCP services. It uses SSE, STDIO, and STREAMABLEHTTP access protocols to deploy MCP。