Changes
Every addition, changed value, removal and lab run, and each entry's latest check, newest first. A changed value shows its old and new value and the reason. Feed: catalog-changes.xml
- Cisco MCP Scanner Plugin lab run 2026-11-07 published: Beyond declared on 1 of 6 rights: network (observed 2, declared 1), with blocked attempts to reach GitHub at start-up even in YARA-only mode.
- Cisco MCP Scanner Plugin changed: Tier listed → tried. Reason: First lab run published (runs/2026-11-07): the YARA-only CLI from the pinned commit, observed reach 2, beyond declared on network.
- CrowdStrike Falcon MCP Server lab run 2026-11-07 published: Beyond declared on 1 of 6 rights: secrets (observed 3, declared 1), reading ~/.netrc on every API request.
- CrowdStrike Falcon MCP Server changed: Tier listed → tried. Reason: First lab run published (runs/2026-11-07): falcon-mcp over stdio, read-only, detections module, against the lab's stub of the Falcon API; observed reach 3, beyond declared on secrets.
- GitGuardian MCP Server lab run 2026-11-07 published: Within declared on every right the lab could observe.
- GitGuardian MCP Server changed: Tier listed → tried. Reason: First lab run published (runs/2026-11-07): gg-mcp-server over stdio with a PAT from the environment, against the lab's stub of the GitGuardian API; observed reach 2, within the declaration on every right.
- Webapp Testing Checklist added (Skill)
- Tenable MSSP Portal MCP Server added (MCP server)
- Google Security Operations MCP Server added (MCP server)
- HexStrike AI added (MCP server)
- Threat Intel Toolkit added (Plugin)
- Purple AI MCP Server added (MCP server)
- SentinelOne MCP Server (s1-secops-mcp) added (MCP server)
- SentinelOne AI Analyst: Claude Skills added (Plugin)
- Supercharged Tenable Identity Exposure MCP Server added (MCP server)
- Malware Analyst added (Skill)
- Cisco MCP Scanner Plugin added (Plugin)
- Cloudflare Security Audit Skill added (Skill)
- CrowdStrike Falcon MCP Server added (MCP server)
- GitGuardian MCP Server added (MCP server)
- hackingBuddyGPT added (Agent)
- Shannon added (Agent)
- Email Header Phishing Analysis added (Skill)
- Trail of Bits Agentic Actions Auditor added (Plugin)
- Trail of Bits Static Analysis added (Plugin)
- Strix added (Agent)
- Example Recon Skill lab run 2026-10-10 published: Beyond declared on 3 of 6 rights: files (wrote ~/recon-reports/, not declared), network (undeclared host api.example.net, blocked), execution (shell for nmap).demo
- Example SIEM Query re-checked on the pinned commit, values unchangeddemo
- Example Vuln MCP lab run 2026-10-03 published: Beyond declared on 1 of 6 rights: network (undeclared host api.example.net, blocked). Nothing is declared, so each right is measured against its task scope.demo
- Example SIEM Query added (Skill)demo
- Example Vuln MCP added (MCP server)demo
- Example Recon Skill added (Skill)demo