ReadBeforeRunAgentic Security Field Guide

Catalog / runtime

Codex

5 tools (+2 demo).

  1. 111230
    Tenable MSSP Portal MCP ServerMCP server · by andrewspearson · reach 3, privilegedDraft · awaiting review

    MCP server that runs Tenable queries and hosted Hexa AI MCP tools across the child containers of a Tenable MSSP Portal.

    Can add autostart, users or keys · read broad tokens or the environment · not run yet · checked 2026-10-21

    Code shows
  2. 13023?
    Purple AI MCP ServerMCP server · by Sentinel-One · reach 3, privilegedDraft · awaiting review

    Read-only MCP server for the SentinelOne Singularity platform: Purple AI, data-lake PowerQuery, alerts, vulnerabilities, misconfigurations and inventory.

    Can tunnel or exfiltrate · add autostart, users or keys · read broad tokens or the environment · Approval: no evidence · not run yet · checked 2026-10-21

    Code shows
  3. 222220
    Email Header Phishing AnalysisSkill · by mukul975 · reach 2, openDraft · awaiting review

    One skill from a large community collection: parses email headers to trace a phishing message and check SPF, DKIM and DMARC.

    Can write outside the project · talk to any host · run shell commands or eval · +2 more · not run yet · checked 2026-10-19

    Code shows
  4. 012102
    Trail of Bits Agentic Actions AuditorPlugin · by trailofbits · reach 2, openDraft · awaiting review

    Claude Code plugin that statically audits GitHub Actions workflows which invoke AI coding agents for injection and permission flaws.

    Can run shell commands or eval · run with broad pre-approvals · not run yet · checked 2026-10-19

    Code shows
  5. 222?22
    Trail of Bits Static AnalysisPlugin · by trailofbits · reach ≥2, openDraft · awaiting review

    Claude Code plugin that drives CodeQL, Semgrep and SARIF parsing to find security vulnerabilities in a codebase.

    Can write outside the project · talk to any host · run shell commands or eval · +2 more · Secrets: no evidence · not run yet · checked 2026-10-19

    Code shows
  6. 222011
    Example Recon SkillSkill · by example · reach 2, openDemo · fictional

    Enumerates subdomains and open ports of a declared target and writes a Markdown report.

    Can write outside the project · talk to any host · run shell commands or eval · ran once, 2026-10-10: did more than it said · checked 2026-10-14

    Code shows
  7. 000?01
    Example SIEM QuerySkill · by example · reach ≥1, scopedDemo · fictional

    Builds and explains SIEM queries for alert triage from a short description of the alert.

    Can nothing above its task scope found in the code · Secrets: no evidence · not run yet · checked 2026-10-12

    Code shows