appsecco/
vulnerable-mcp-servers-lab
appsecco/vulnerable-mcp-servers-labCollections
A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.
277
ghostsecurity/skillsSkills
Ghost Security's collection of AppSec skills for AI coding agents
405
The AI security agent guards your code.
43
stijnswapped/
Myrqen
stijnswapped/MyrqenTools
Security testing that runs inside the coding agent you already use. Source-available, not open source.
158
Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs, and bug bounties
380
agamm/
claude-code-owasp
agamm/claude-code-owaspSkills
Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.
358
Synvoya/
codeinspectus
Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.
45
vmihalis/hacker-bobConnectors
A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com
97
UnitOneAI/
SecuritySkills
UnitOneAI/SecuritySkillsSkills
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
61