✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.
Mantis Hack
secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.
Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP
Open-source AI security scanner for Codex, Claude Code, and ACP-compatible coding agents—kept current with OpenAI Codex Security.
CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
Security Scanner for Agent Skills
Solidity Static Analyzer that easily integrates into your editor
Ghost Security's collection of AppSec skills for AI coding agents
Trivy plugin for starting an MCP server
Troubleshooting skills for Alibaba Cloud ECS
Write detections, investigate alerts, and query logs from your favorite AI agents
IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.
Security scanner for AI agents, MCP servers and agent skills.
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
Collection of agent skills to find vulnerabilities inside your web/mobile apps.
A helper extension to use KeePass/MacPass/KeePassXC from Firefox, Opera, and Chrome browsers
Runtime intelligence system that makes MCP servers debuggable, testable, and safe to run in production.
MCP Server for Dockhand Docker Management - exposes 130+ API endpoints as MCP tools
Vetix — Automated scanning, identification, and assessment of SKILL security risks.
AI API identity gateway — reverse proxy that normalizes device fingerprints and telemetry for privacy-preserving API proxying
Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest