Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP

Agent Skills Evaluation Framework

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

Solidity Static Analyzer that easily integrates into your editor

Shared skills, safe for production.

Troubleshooting skills for Alibaba Cloud ECS

Collection of agent skills to find vulnerabilities inside your web/mobile apps.

MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.

See how you really use AI — X-ray your AI coding sessions locally

AI-powered bug bounty hunting toolkit that works with or without subscription.

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

Tamper-evident integrity monitor for the MCP config & server files your local AI agents load.

A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents.

MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.

GitX is a portable AI-agent skill for creating clean Git commits, tagged branches, and safe pushes across Codex, Claude Code, Cursor, and other skills-compatible agents.

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

Multi-tier framework for evaluating AI agent skills with quality gates, semantic overlap detection, synthetic evaluation dataset generation, and live agent evaluation that measures how skills affect agent behavior.

🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, and unprotected AI agents

Multi-registry skill discovery and installation for AI coding agents — search 9 sources, score, paginate, and install agent skills with security labels

EOC: open-source operating system for OpenAI Codex workflows with agents, skills, hooks, rules, memory, safety gates, and cross-harness adapters.

Find and repair substance defects in AI-assisted prose, code, docs, and agent output. Reports defects, never authorship. Structural tests over model judgement, because LLM judges agree with human slop labels at chance.