Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 501 to 550 of 3,335 Grade C entries. Page 11 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
moodboard-generator/scripts/render_png.py:28 subprocess.run(Game Design Skills Bundle (Skill)
Compatibility: Not stated.
A curated bundle of reusable game design skills for OpenClaw / ClawHub-style agent workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
gap-trap/templates/gates/instruction_gate_test.py:168 r = subprocess.run(["git", "cat-file", "-e", f"{h}^{{comGap Trap (Skill)
Compatibility: Not stated.
<p align="center"><img src="assets/gap-trap.png" alt="gap-trap logo: a net catching code puzzle pieces" width="200"></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/gaussian-workflow-copilot/scripts/build_distribution.py:34 tests = subprocess.run(Gaussian Workflow Copilot (Plugin)
Compatibility: Not stated.
面向 Gaussian 量子化学计算的可审计 Codex 工作流插件
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
scripts/responsive-check.mjs:90 c.#ws = new WebSocket(url);gccli (Skill)
Compatibility: Not stated.
Fast, script-friendly CLI for Garmin Connect.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +2 more
examples/bulk-tag-folder/bulk_tag.py:37 response = requests.post(Gemina (MCP server)
Compatibility: Not stated.
Extract, search and tag any document: invoices, receipts, contracts, templates.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:20 prepareGemini Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server for integrating Google's Gemini 3 models with Claude Code, enabling powerful collaboration between both AI systems.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/utils/chunkCache.ts:87 fs.unlinkSync(filePath);Gemini Mcp Tool (MCP server)
Compatibility: Not stated.
MCP server that enables AI assistants to interact with Google Gemini CLI, leveraging Gemini's massive token window for large file analysis and codebase understanding
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
scripts/chess-consensus/uci.go:89 cmd := exec.Command(path)Gemot Deliberation Server (MCP server)
Compatibility: Not stated.
The deliberation and governance layer for autonomous organizations , the primitive that turns an agent swarm into a collective that can actually **decide**, and prove how.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:14 prepareGenerative Ui Mcp (MCP server)
Compatibility: Not stated.
An MCP server that teaches AI models to generate interactive visualizations , charts, diagrams, mockups, and more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
hooks/stop-acceptance.mjs:59 try { fs.unlinkSync(blocksFile); } catch { /* absent → nothing to reset */ }genesis (Skill)
Compatibility: Not stated.
Three modes for Claude Code projects: create a new one from an empty folder (research and design before stack, then build and test it), transition an existing repository to a stated standard, and check the user-level ~/.claude layer that loads in every session.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
packages/gg_api_core/src/gg_api_core/tools/find_current_source_id.py:141 result = subprocess.run(ggmcp (MCP server)
Compatibility: Not stated.
Bring GitGuardian's secret detection and incident management into your AI agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
manual-tests/test_sandbox.js:7 const res = UrlFetchApp.fetch(url);ggsrun (MCP server)
Compatibility: Not stated.
Antigravity CLI plugin for safe Google Apps Script development via ggsrun MCP and sandbox guardrails.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:29 prepareGistpad Mcp (MCP server)
Compatibility: Not stated.
An MCP server for managing and sharing your personal knowledge, daily notes, and reuseable prompts via GitHub Gists.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
internal/acquire/acquire.go:117 cmd := exec.CommandContext(ctx, name, args...)gitcontribute (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES OBFUSCATION_MINIFIED_PAYLOAD
cursor/gitgud-hook.js:61 fs.unlinkSync(PENDING_TASK_FILE);gitgud (Plugin)
Compatibility: Not stated.
Keep your coding skills sharp in the age of AI
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:9 postinstallGithub Brain (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="logo.svg" alt="GitHub Brain Logo" width="150" height="150"> <h1>GitHub Brain MCP Server</h1> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.codexignore:16 credentials.jsonGo Ultimate (Skill)
Compatibility: Not stated.
Opinionated Go development skill , architecture, conventions, production readiness, repo/CI hygiene, review, and MCP/agent patterns.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/transports/cli/cli_transport.go:68 cmd := exec.CommandContext(ctx, cmdPath, args...)Go Utcp (MCP server)
Compatibility: Not stated.
`go-utcp` is the Go implementation of the [Universal Tool Calling Protocol (UTCP)](https://github.com/universal-tool-calling-protocol).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
claude-code/skills/goalfydata/references/scheduled-sync-guide.md:69 r = subprocess.run(["uds-cli", "--task-id"goalfydata (Skill)
Compatibility: Not stated.
<br>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
server.go:261 cmd := exec.CommandContext(listCtx, "go", "list", "-f", "{{.ImportPath}}\t{{.Doc}}", importPath+Godoc Mcp (MCP server)
Compatibility: Not stated.
`godoc-mcp` is a Model Context Protocol (MCP) server that provides efficient access to Go documentation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:40 prepareGodot Mcp (MCP server)
Compatibility: Not stated.
MCP server for full Godot 4.x engine control: 157 tools for AI-driven game development (GDScript and C#/.NET).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
cli/src/lib/create-project.ts:301 fs.rmSync(filePath, { force: true });Godot Mcp (MCP server)
Compatibility: Not stated.
<div align="center" width="100%">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/install.sh:185 # This wraps curl or wget. Try curl first, if not installed,goku (MCP server)
Compatibility: Not stated.
Goku is a high-performance, scalable HTTP load-testing tool designed for benchmarking and performance analysis of web services.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
apps/web/src/services/forecastApi.ts:86 response = await fetch(buildUrl("/api/v1/forecast/latest"), {goldfxgraph (Skill)
Compatibility: Not stated.
[English](README.md) | [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/fleet_e2e_diagnostic.py:312 shutil.rmtree(diag_dir, ignore_errors=True)gomaa (MCP server)
Compatibility: Not stated.
**Production-grade, local-first hierarchical & neuro-inspired cognitive memory engine for autonomous AI agents (v4.0.0 , "Gomaa Neo").**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
backend/gonzales/static/assets/query-CSQiZfg4.js:17 t).call(this,{type:"invalidate"})}async fetch(t,s){var E,Cgonzales (MCP server)
Compatibility: Not stated.
``` ██████╗ ██████╗ ███╗ ██╗███████╗ █████╗ ██╗ ███████╗███████╗ ██╔════╝ ██╔═══██╗████╗ ██║╚══███╔╝██╔══██╗██║ ██╔════╝██╔════╝ ██║ ███╗██║ ██║██╔██╗ ██║ ███╔╝ ███████║██║ █████╗ ███████╗ ██║ ██║██║ ██║██║╚██╗██║ ███╔╝ ██╔══██║██║ ██╔══╝ ╚════██║ ╚██████╔╝╚██████╔╝██║ ╚████║████
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:13 prepareGoogle Ads (MCP server)
Compatibility: Not stated.
**MCP server for Google Ads , diagnose spend efficiency, impression share, and asset performance from Claude.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
requirements.txt:1 google-ads>=25.0.0Google Ads Mcp (MCP server)
Compatibility: Not stated.
A comprehensive Model Context Protocol (MCP) server for Google Ads API integration, enabling AI assistants like Claude, ChatGPT, and Gemini to analyze, manage, and optimize Google Ads campaigns through natural language conversations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/services/error-reporting/resources.ts:52 const response = await fetch(apiUrl, {Google Cloud Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol server that connects to Google Cloud services to provide context and tools for interacting with your Google Cloud resources.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:26 prepareGoogle CrUX MCP (MCP server)
Compatibility: Not stated.
MCP server for Google CrUX , check real-user Core Web Vitals and compare mobile, desktop and 40-week trends
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
src/auth/accountStore.ts:289 await fs.unlink(legacyPath);Google Drive Mcp (MCP server)
Compatibility: Not stated.
Connect an MCP client to Google Drive, Docs, Sheets, Slides, and Calendar through one self-hosted server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
cmd/data_pagination_test.go:150 // A caller-supplied --page-token must seed the first fetch (resume).Google Health Cli (Skill)
Compatibility: Not stated.
Google Health CLI , one command-line tool for the Google Health API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:14 postinstallGoogle Search (MCP server)
Compatibility: Not stated.
A Playwright-based Node.js tool that bypasses search engine anti-scraping mechanisms to execute Google searches.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/crux-query.mjs:16 const response = await fetch(endpoint, {Google Suite Seo Mcp (Plugin)
Compatibility: Not stated.
Local plugin Compatible for Google Search Console, Google Analytics 4, and CrUX SEO workflows, compatible with Codex, Claude Code, Cursor, VS Code, OpenClaw, and Hermes through standard MCP configurations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
pkg/api/server.go:111 cmd := exec.Command("pgrep", name)gospy (MCP server)
Compatibility: Not stated.
A tool for inspecting and analyzing running Go processes, including goroutine states, memory statistics, and binary information.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/requirement_ledger/git_evidence.py:66 result = subprocess.run(Gpt 6 Astra Skill (Skill)
Compatibility: Not stated.
>-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/gpt-helper/skills/verify-before-answer/coop/coop_helper.py:178 result = subprocess.run(Gpt Helper (Plugin)
Compatibility: Not stated.
Skills-only plugin for ChatGPT Work and Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/index.ts:546 fs.unlinkSync(tempResponseFile);Gpt Image 1 Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="logo.png" alt="GPT Image 1 MCP Logo" width="200"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
plugins/gpthybrid/skills/hypcox/scripts/baseline.py:36 result = subprocess.run(GPTHybrid (Plugin)
Compatibility: Not stated.
GPTHybrid gives Codex on Windows 11 + WSL 2 a dedicated visible browser and an evidence-based way to use ChatGPT Web as a planning partner.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/grafana-assistant-cli/SKILL.md:209 **Filesystem:** read-only, project-scoped, blocks `~/.ssh`, `~/.gnupGrafana Assistant (Plugin)
Compatibility: Not stated.
Skills and rules for developing and using the Grafana Assistant app and CLI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
scripts/build_windows_runtime.py:46 subprocess.run([commands["perl"], "Configure", *options], cwd=source_dir,grag (Skill)
Compatibility: Not stated.
**Local graph memory for AI agents.** Keep code structure, documents and decisions in a project knowledge graph that your agent can query and update across sessions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
create_repaired_canary.py:13 if repo.exists(): shutil.rmtree(repo)Gravitas (Skill)
Compatibility: Not stated.
Gives Gemini Claude-grade engineering discipline: read before writing, plan in proportion to risk, verify against executed evidence, and report only what the evidence supports.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:32 prepareGridar (MCP server)
Compatibility: Not stated.
SEO toolkit for Quebec sites: audits, Google.ca rankings, keywords, AI-search visibility.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/smoke_test_install.py:45 completed = subprocess.run(gridgeist (Skill)
Compatibility: Not stated.
<p align="center"> <img src="skills/gridgeist/assets/gridgeist.svg" alt="Gridgeist agent skill for web interface direction" width="240" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
mcp-server/src/lib/state.mjs:320 try { fs.unlinkSync(path.join(jobsDir, `${job.id}.json`)); } catch { /* bestGrok Build Codex Plugin (Plugin)
Compatibility: Not stated.
Codex CLI plugin: delegate reviews and bounded coding tasks to the local Grok Build CLI via a bundled MCP server
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/groketective/scripts/import_recovered.py:435 out = subprocess.run(cmd, capture_output=True, text=True,groketective (Plugin)
Compatibility: Not stated.
Cursor plugin: Groketective , Grok Bot (sand) forensics and recovered-transcript import.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/commands/mod.rs:25 self.commands.get(name).map(|cmd| cmd.as_ref())groundhog (MCP server)
Compatibility: Not stated.
Groundhog's primary purpose is to teach people how Cursor and all these other coding agents work under the hood.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
.gitignore:3 .envGtm Architecture Template (Skill)
Compatibility: Not stated.
**Build your first qualified account queue, reviewed outreach draft and learning loop.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:13 prepareGuild Wars 1 Build Compiler (MCP server)
Compatibility: Not stated.
Guild Wars 1 build compiler: real skill and hero data, plus an encoder that turns a build into an official in-game template code after validating it against the game's rules.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/h3-game-sprites/scripts/sprite_cut.py:19 subprocess.run(["ffmpeg", "-y", "-loglevel", "error", "-i", viH3 Game Sprites (Skill)
Compatibility: Not stated.
An [Agent Skill](https://agentskills.io) for turning AI-generated video into 2D game sprite sheets.
This grade is a hygiene screen, not proof of safety.
