Sandbox
96 repos for agent-securityClear
PatrikFehrenbach/
h1-brain

MCP server that connects AI assistants to HackerOne for bug bounty hunting

350
HuTa0kj/
vetix

Vetix — Automated scanning, identification, and assessment of SKILL security risks.

61
netresearch/
security-audit-skill

Agent Skill for PHP security audits - OWASP patterns, vulnerability detection | Claude Code compatible

41
GitGuardian/
ggmcp

MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.

37

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

95
davidmatousek/
tachi

Threat modeling and AI-reasoning vulnerability detection harness for Claude Code — STRIDE + AI + MAESTRO

92
MorDavid/
ExternalAttacker-MCP

A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.

78
mcp-security-standard/
mcp-server-security-standard

MCP Server Security Standard (MSSS): an open, testable security control standard for certifying MCP servers, with levels, evidence requirements, and reporting schemas.

74

MCP servers for the UniFi suite of applications, Network, Protect, Access, and Drive

803
safedep/
gryph

Security layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode, Pi Agent and more.

161
JameZUK/
Arkana
JameZUK/ArkanaConnectors

Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP

219
MCP-Manager/
MCP-Checklists
MCP-Manager/MCP-ChecklistsTutorials & Guides

A set of MCP security checklists and guides for agents and MCP servers.

196

Prompt injection scanner for AI coding tools (Claude Code / Codex / etc). Runs DeBERTa/Llama transformers via Candle or ONNX in Rust

45
appsecco/
vulnerable-mcp-servers-lab

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

277

List MCP Server configurations in your system used by AI applications like Cursor, Claude Desktop, VS Code and others

84
Berserk-hub150/
skillhawk

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

30

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

1.5k
google/
mcp-security

MCP servers for Google SecOps, GTI, SOAR, and SCC.

524