Customer support for MCP servers: work your tickets from Claude or any MCP client. Service key auth.

Self-contained DeepSeek Harness (DSH) plugin for Provider/Auth login, model switching, image fallback, token/cost analytics, and same-port Web restart. Useful? A star helps.

Scan any public website and see how ready it is for AI agents and AI search, explained plainly.

Scan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick.

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most important first.

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Vendor-neutral home for portable agents: skills, MCP tools, memory, canvas, and secret proxy.

Enables AI assistants to import Canva share links as editable templates, read and update template layers (text, images, positions, styling), and render PNG, JPEG, WebP, or PDF variants from data — singly or in bulk up to 25 at a time. Connects via a remote OAuth endpoint, API key, or local stdio.

Enables AI assistants to answer natural-language questions about environmental monitoring stations, returning real-time readings, hourly time-series, and combined station overviews. Supports per-user account binding and OAuth 2.1 authorization so each user only sees stations within their own permissions.

Audit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 16 other rule categories (300+ rules), returns an LLM-optimized report, then drives an iterative fix loop, mapping issues to source files, applying fixes, a

基于 DeepSeek Harness 的多 Agent PTES 渗透测试编排插件，支持自动化侦察、漏洞分析、验证与报告，使用 Docker/Kali 隔离工具箱 | Multi-agent PTES penetration testing plugin for DeepSeek Harness with automated recon, vulnerability analysis, validation, reporting, and Docker/Kali toolbox

Read-only security & compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and local configuration audit with redacted, reproducible reports.

Prompt-injection, jailbreak, and secret-leak detection with allow/ask/block interception for DeepSeek Harness: an Aho-Corasick pattern engine and heuristics ported from the Prompt-Injection-Payloads, Jailbreak-Detector, and Secret-Key-Leaker-Detect assets

A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full offensive-security pipeline that maps a codebase, hunts vulnerabilities with a per-class knowledge base, chains findings into escalations, verifies real impact, and reports to README/JSON/SARIF/doc/PDF.

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

Scan URLs or HTML for WCAG 2.2 violations. 75-rule manifest, weighted score, shareable reports.

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code plugin. Backed by 754 MITRE-mapped skills.

Connects to LibTV's canvas and media platform to create and edit canvases and nodes, generate images, videos, audio and speech, manage screenplays and storyboards, and run timeline edits and exports. Authorization happens once via a WeChat QR scan using OAuth 2.1 with PKCE, after which tokens are stored locally and refreshed automatically.

Enables Claude and ChatGPT to manage Motion tasks through one shared API core, including capturing next actions, preserving resume context, checking duplicates, and reporting scheduling health. It serves local stdio clients and OAuth-protected Streamable HTTP clients.

CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

Enables building zero-dependency Model Context Protocol servers over the Streamable HTTP transport, exposing typed tools, resources and URI templates, prompts, background tasks, and OAuth-protected endpoints. It can be mounted into FastAPI, Starlette, Flask, Django or any ASGI/WSGI app, or run standalone on the Python standard library alone.

Enables Claude to answer business questions against a company's retail database — sales summaries, top customers, inventory alerts, customer profiles, and plain-English queries — through read-only SQL tools plus a schema resource and reporting prompt. Access is governed by OAuth 2.1 roles and scopes, column-level PII masking, a SQL guard, rate limits, and audit logging.