Security & Testing ListingsSecurity & Testing

MCP Zap Server

Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.

Agent Identity Management

The IAM layer for AI agents: cryptographic identity, capability authorization, and audit trails for non-human identities.

Spec2case

Spec2Case 是生产级 AI 测试用例生成智能体，支持图片/文本需求理解、人工确认、LangGraph 流程编排和 Excel 用例导出。

Claude Pentest Skills

AI-powered web application penetration testing skills with Claude Code

Autonomous Qa Loop

Portable fresh-agent QA loop prompt for finding bugs without biased self-checks / 通用自动 QA 循环 SKILL

AgentWard

AgentWard – Built for all, hardened for OpenClaw.

Claude Sdlc Skills

AI-native SDLC skills for Claude Code: requirement intake & audit, adversarial review gate, AI test orchestration, decision re-check, release config audit

Claude Skills

UX/UI evaluation, AI governance, and AI security skills for AI coding assistants. Audit interfaces with Nielsen heuristics, WCAG, Don Norman principles. Assess AI risk with NIST AI RMF, ISO 42001, OWASP LLM Top 10, and OWASP AI Testing Guide.

Wazuh Autopilot

Agentic SOC for Wazuh built on Strands Agents: a 13-agent swarm with 37 Wazuh-verified skills triages, investigates and plans response through the Wazuh MCP Server. Policy-gated autonomy, approvals, RBAC, audit, tracing and evals in one Docker stack. Bedrock, Anthropic, NVIDIA NIM, vLLM, LiteLLM or air-gapped Ollama.

Peta Core

The Control Plane for MCP — secure vault, managed runtime, audit trail, and policy-based approvals.

CIRISAgent

CIRIS: an open-source AI assistant with a conscience you can check. Signed, auditable reasoning on every decision, a human-held halt, 29 languages. AGPL-3.0.

MCP Security Testing Guide

OWASP MCP Security Testing Guide

Redteam Skill

Redteam / Pentest Skill Pack — semi-automated workflow + on-demand module selection + real-world attack chains | Kali + Claude Code 红队/渗透/技能包 - 半自动工作流 + 按需点选模块 + 实战利用链 | 基于 Kali 与 Claude Code

Trustabl Rulebook

Agent reliability rulebook: the threat model and rationale behind each Agent Reliability Analyzer rule

Vetix

Vetix — Automated scanning, identification, and assessment of SKILL security risks, based on Golang.

Agent Skills Wordpress

Agent skills for WordPress — works in Claude Code, Codex, Antigravity, Cursor, and any agent supporting Skills + MCP. Audit, optimize, fix, and migrate WordPress sites.

MCP Server Fuzzer

Black-box security assessment for live MCP servers.

R02 Alirezarezvani Claude Skills Security

🔒 Security & Compliance skill suite derived from alirezarezvani/claude-skills.

Claude AI Cyber Security Skills

30 Claude Code Skills + 60+ integrated tools for HackerOne/Bugcrowd bug bounty hunters

Clawmoat

The open-source agent firewall. Prevent AI agents from leaking data, using dangerous tools, and importing poisoned dependencies.

Contrarian

Devil's advocate for coding agents. Stress-tests plans, architecture and decisions with a steel-man, an assumption audit and a pre-mortem, then gives severity-rated findings and a verdict. Works in Claude Code, Codex, Cursor, Gemini CLI, Copilot and 12 more.

Agent Verifier

🔍 Agent Verifier is a coding agent skill that verifies code against organizational policies, code quality patterns, security requirements, and framework best practices — before code ships. Works with Claude Code, Cursor, Windsurf, and 30+ agents.

AI Skills

AI SKILL.md files

R14 Borghei Claude Skills Security

🔒 Security & Compliance skill suite derived from borghei/Claude-Skills.