Catalog

Claude Code plugin that scans MCP servers and tools for prompt injection, tool poisoning and other risks via the Cisco MCP scanner.

Can read credential stores · talk to any host · run shell commands or eval · +1 more · Approval: no evidence · ran once, 2026-11-07: did more than it said · checked 2026-11-07

MCP server that connects agents to the CrowdStrike Falcon platform: detections, threat intel, host management and response.

Can tunnel or exfiltrate · write outside the project · change config or install globally · Approval: no evidence · ran once, 2026-11-07: did more than it said · checked 2026-11-07

MCP server that brings GitGuardian secret detection, incident triage and honeytokens into an AI agent.

Can tunnel or exfiltrate · write outside the project · read broad tokens or the environment · +1 more · Approval: no evidence · ran once, 2026-11-07: did no more than it said · checked 2026-11-07

Agent skill that walks an authorized web application test through the OWASP WSTG checklist and writes a findings report.

Can add autostart, users or keys · write outside the project · run shell commands or eval · +1 more · Approval: no evidence · not run yet · checked 2026-10-21

MCP server that runs Tenable queries and hosted Hexa AI MCP tools across the child containers of a Tenable MSSP Portal.

Can add autostart, users or keys · read broad tokens or the environment · not run yet · checked 2026-10-21

MCP server for Google Security Operations (Chronicle) with 68 tools for event search, alerts, detection rules, log ingestion and SIEM configuration.

Can read credential stores · change config or install globally · Approval: no evidence · not run yet · checked 2026-10-21

Its API listens on all network interfaces with no login and runs any shell command it receives.

Can write system paths · tunnel or exfiltrate · run shell commands or eval · Secrets, Approval: no evidence · not run yet · checked 2026-10-24

Claude Code plugin with a subagent and two skills that triage IOCs and CVEs against free threat-intel feeds, without API keys.

Can write outside the project · run shell commands or eval · Secrets: no evidence · not run yet · checked 2026-10-21

Read-only MCP server for the SentinelOne Singularity platform: Purple AI, data-lake PowerQuery, alerts, vulnerabilities, misconfigurations and inventory.

Can tunnel or exfiltrate · add autostart, users or keys · read broad tokens or the environment · Approval: no evidence · not run yet · checked 2026-10-21

Node.js MCP server with 35 tools for the SentinelOne console, data lake, alert management and Hyperautomation, read-only by default.

Can write outside the project · read broad tokens or the environment · change config or install globally · Approval: no evidence · not run yet · checked 2026-10-21

Claude plugin with eight SentinelOne skills for threat hunting, alert triage, detections, dashboards, parsers and Hyperautomation workflows.

Can tunnel or exfiltrate · add autostart, users or keys · write outside the project · +2 more · Approval: no evidence · not run yet · checked 2026-10-21

MCP server that exposes the Tenable Identity Exposure API as 133 tools, from Active Directory exposure queries to user and API-key management.

Can add autostart, users or keys · Approval: no evidence · not run yet · checked 2026-10-21

Agent skill that walks through a static malware analysis: deobfuscation, IOC extraction and detection signatures.

Can run shell commands or eval · Secrets: no evidence · not run yet · checked 2026-10-21

Agent skill that runs a multi-phase, source-first security audit of a codebase and verifies each candidate finding.

Can write outside the project · run shell commands or eval · read broad tokens or the environment · not run yet · checked 2026-10-19

Open-source framework for building LLM-driven security-testing agents, with use cases for Linux privilege escalation and web API testing.

Can write outside the project · talk to any host · run shell commands or eval · +3 more · not run yet · checked 2026-10-19

Autonomous white-box AI penetration tester for web apps and APIs; reports only vulnerabilities it proves by exploitation.

Can bypass approval · write outside the project · talk to any host · +2 more · not run yet · checked 2026-10-19

One skill from a large community collection: parses email headers to trace a phishing message and check SPF, DKIM and DMARC.

Can write outside the project · talk to any host · run shell commands or eval · +2 more · not run yet · checked 2026-10-19

Claude Code plugin that statically audits GitHub Actions workflows which invoke AI coding agents for injection and permission flaws.

Can run shell commands or eval · run with broad pre-approvals · not run yet · checked 2026-10-19

Claude Code plugin that drives CodeQL, Semgrep and SARIF parsing to find security vulnerabilities in a codebase.

Can write outside the project · talk to any host · run shell commands or eval · +2 more · Secrets: no evidence · not run yet · checked 2026-10-19

Autonomous AI penetration-testing agents that run offensive tools in a container sandbox and validate findings with a proof of concept.

Can tunnel or exfiltrate · use sudo or the docker socket · add autostart, users or keys · +3 more · not run yet · checked 2026-10-19

Enumerates subdomains and open ports of a declared target and writes a Markdown report.

Can write outside the project · talk to any host · run shell commands or eval · ran once, 2026-10-10: did more than it said · checked 2026-10-14

MCP server that looks up CVEs and ranks findings by exploitability for vulnerability prioritisation.

Can nothing above its task scope found in the code · Approval: no evidence · ran once, 2026-10-03: did more than it said · checked 2026-10-07

Builds and explains SIEM queries for alert triage from a short description of the alert.

Can nothing above its task scope found in the code · Secrets: no evidence · not run yet · checked 2026-10-12