Gemini CLI
4 tools (+1 demo).
- Code showsCrowdStrike Falcon MCP ServerDraft · awaiting review
MCP server that connects agents to the CrowdStrike Falcon platform: detections, threat intel, host management and response.
Can tunnel or exfiltrate · write outside the project · change config or install globally · Approval: no evidence · ran once, 2026-11-07: did more than it said · checked 2026-11-07
- Code showsTenable MSSP Portal MCP ServerDraft · awaiting review
MCP server that runs Tenable queries and hosted Hexa AI MCP tools across the child containers of a Tenable MSSP Portal.
Can add autostart, users or keys · read broad tokens or the environment · not run yet · checked 2026-10-21
- Code showsGoogle Security Operations MCP ServerDraft · awaiting review
MCP server for Google Security Operations (Chronicle) with 68 tools for event search, alerts, detection rules, log ingestion and SIEM configuration.
Can read credential stores · change config or install globally · Approval: no evidence · not run yet · checked 2026-10-21
- Code showsEmail Header Phishing AnalysisDraft · awaiting review
One skill from a large community collection: parses email headers to trace a phishing message and check SPF, DKIM and DMARC.
Can write outside the project · talk to any host · run shell commands or eval · +2 more · not run yet · checked 2026-10-19
- Code showsExample Recon SkillDemo · fictional
Enumerates subdomains and open ports of a declared target and writes a Markdown report.
Can write outside the project · talk to any host · run shell commands or eval · ran once, 2026-10-10: did more than it said · checked 2026-10-14