Security & Testing ListingsSecurity & Testing

Vetix

Vetix — Automated scanning, identification, and assessment of SKILL security risks, based on Golang.

Agent Skills Wordpress

Agent skills for WordPress — works in Claude Code, Codex, Antigravity, Cursor, and any agent supporting Skills + MCP. Audit, optimize, fix, and migrate WordPress sites.

MCP Server Fuzzer

Black-box security assessment for live MCP servers.

Clawmoat

The open-source agent firewall. Prevent AI agents from leaking data, using dangerous tools, and importing poisoned dependencies.

Contrarian

Devil's advocate for coding agents. Stress-tests plans, architecture and decisions with a steel-man, an assumption audit and a pre-mortem, then gives severity-rated findings and a verdict. Works in Claude Code, Codex, Cursor, Gemini CLI, Copilot and 12 more.

Agent Verifier

🔍 Agent Verifier is a coding agent skill that verifies code against organizational policies, code quality patterns, security requirements, and framework best practices — before code ships. Works with Claude Code, Cursor, Windsurf, and 30+ agents.

AI Skills

AI SKILL.md files

MCPSecBench

MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols

Signet

Cryptographic trust and authorization evidence for AI agents. Every action a receipt, every grant a proof.

PentestPi

Autonomous Penetration Testing Agent Framework with External State Memory & Anti-False-Falsification Guardrails.

Toolhive Registry Server

Discover, govern and control access to MCP servers and agent skills across your organization

CyberPenda

Local-first pentest agent: Go daemon + React dashboard + Codex/Claude Code/Pi runtimes, scoped projects, Blackboard, sandbox runners

Claude Code Skills

Скиллы для Claude Code: дисциплинированный пайплайн разработки и два пред-запусковых аудита — сайта и безопасности приложения

Claude Skills

Claude Skills for every role: 164 Claude Code skills (Agent Skills) for PM, QA, engineering, design, DevOps, sales, marketing and more. Install as a plugin.

Agent Discover Scanner

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

Hoot

MCP Testing Tool — Like Postman, but for the Model Context Protocol.

Claude Skills

Battle-tested Claude Code skills for hardening vibe-coded projects. Audit, clean, and ship AI-generated codebases with confidence.

Claude Security Skills

25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM coding failure modes (slopsquatting, hallucinated APIs, sycophancy), incident response, GDPR/DACH compliance. MIT, battle-tested.

Claude Skills

A Claude Code plugin marketplace for open-source maintainers — README heroes, README audits, and .NET test-coverage backfills.

Prompt Shield

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

Mcpflo

A visual testing tool for MCP (Model Context Protocol) servers — connect, browse capabilities, and inspect tools, resources, and prompts. Think Bruno, but for MCP.

MCP Box

Highly isolated Linux container environments optimized specifically for mcp-servers. Secure AI agent tool execution.

Toolguard

The "Cloudflare for AI Agents". 7-layer security interceptor, real-time observability dashboard, and automated reliability testing for MCP and AI tool chains. Prevent hallucinations, prompt injection, and destructive tool calls.

Platform

The approval and accountability layer for agentic AI. Identity → Policy → Approval → Trace. Try: npx sidclaw-demo