Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 751 to 800 of 3,335 Grade C entries. Page 16 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
development/scripts/build_release.py:90 subprocess.run(Journal Cover Letter Tutorial (Plugin)
Compatibility: Codex.
Research, Review & Bibliometrics cover-letter workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:12 prepareJuliadoc Mcp (MCP server)
Compatibility: Not stated.
An MCP server that efficiently serves context to Claude Desktop about Julia documentation and source code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
scripts/build_plugin_demo.py:131 subprocess.run(Juno Open Health Tools (MCP server)
Compatibility: Not stated.
Free, privacy-conscious tools for turning messy symptom notes into a clearer appointment conversation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
examples/cli/conftest.py:54 if requests.get(readiness_url, timeout=5).status_code == 200:Jupyter Mcp Server (MCP server)
Compatibility: Not stated.
🪐 🔧 Model Context Protocol (MCP) Server for Jupyter.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:31 prepareJustCall MCP Server (MCP server)
Compatibility: Not stated.
The JustCall [Model Context Protocol (MCP)](https://modelcontextprotocol.com/) Server lets Large Language Models (LLMs) and AI agents make real-world voice calls and send SMS directly through JustCall’s APIs , securely, contextually, and programmatically.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
src/main.py:146 process = subprocess.run(K8gentS Kubernetes RCA MCP Server (MCP server)
Compatibility: Not stated.
**A Human-in-the-Loop RCA Agent for Kubernetes , LLM Diagnosis, OPA-Bounded Remediation**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
plugins/claude/kabo-alpha/scripts/hooks/persist-envelope.js:513 fs.rmSync(`${stem}.lock`, { force: true });Kabo Plugins (Plugin)
Compatibility: Not stated.
Creator research skills for Claude Code and Codex: see what's working on YouTube, Instagram, and TikTok, review accounts and competitors, break down videos, and plan what to post, with the public evidence attached.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:21 prepareKaseya Quote Manager (MCP server)
Compatibility: Not stated.
A [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that gives AI assistants **read-only** access to [Kaseya Quote Manager](https://help.quotemanager.kaseya.com/) (Datto Commerce) , quotes, sales orders, purchasing, the product catalog, and customers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/kernel-development-skills/skills/kernel-development-skills/scripts/check_kernel_api_patterns.py:361 reKernel Development Skills (Plugin)
Compatibility: Not stated.
Kernel Field Guide: an Agent Skill and plugin that gives coding agents the working habits of experienced Linux kernel engineers
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:36 @clerk/nextjsKernel Mcp Server (MCP server)
Compatibility: Not stated.
A [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that provides AI assistants with secure access to [Kernel platform](https://onkernel.com) tools and browser automation capabilities.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
storage-analyzer/scripts/scan.py:47 return subprocess.run(cmd, capture_output=True, text=True, timeout=timeoutKhazix Skills (Skill)
Compatibility: Not stated.
数字生命卡兹克开源的 AI Skills 合集 | Agent Skills: leader（帮你定义目标）, neat-freak 洁癖, hv-analysis, khazix-writer & more , Claude Code, Codex & 40+ agents
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/build_site.py:479 shutil.rmtree(output)Kiss My Agent (Plugin)
Compatibility: Not stated.
A Codex plugin that reduces over-design, hidden failure, and evidence inflation in research engineering.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:37 preparekitbash (Plugin)
Compatibility: Not stated.
Tells your AI agent which parts of your idea already exist on GitHub, which to adapt, and which to just write , every repo verified live.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
benchmarks/agent-e2e/arms.go:245 command := exec.Command(cfg.Agent, arguments...)Kivgraph (MCP server)
Compatibility: Not stated.
> [!NOTE] > **Kivgraph began as a research project.** It explored whether a local semantic > code graph could reduce the amount of context coding agents need to inspect.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
v2/kl4a-rs/codekb/src/inventory.rs:94 /// result = subprocess.run(["git", *args], cwd=repo_dir, text=True,KL4A (Skill)
Compatibility: Not stated.
<img src="docs/images/kl4a-logo-light.svg" alt="KL4A" width="96">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
bin/install.js:60 fs.rmSync(dest, { recursive: true, force: true });Korean Report Skills (Skill)
Compatibility: Not stated.
<img src="docs/assets/logo.svg" width="30" align="middle" alt=""> <b>korean-report-skills</b>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
tutorial/17_multiphase_training.py:30 wget https://cs231n.stanford.edu/tiny-imagenet-200.zipKrauncher analyzer (MCP server)
Compatibility: Not stated.
**Run your training script on a remote GPU.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/krx_openapi/client.py:46 return self._session.fetch(ENDPOINTS[api_id], **params)Krx Openapi (Plugin)
Compatibility: Not stated.
Read the Korea Exchange (KRX) Open API: indices, stocks, ETP, bonds, derivatives, commodities, ESG
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:18 prepareKudosity (MCP server)
Compatibility: Not stated.
An installable [Model Context Protocol](https://modelcontextprotocol.io) server that gives AI agents native tools to send **SMS, MMS and WhatsApp** messages, manage contacts and webhooks, and research the Kudosity API , powered by [Kudosity](https://kudosity.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
scripts/analyze_repository.py:24 ".env", ".env.local", ".env.production", "credentials.json", "secrets.json",Kunpeng Skill (Skill)
Compatibility: Not stated.
跨智能体、本地优先的多源蒸馏与迁移工作流。用于收录或蒸馏代码仓库、网站、App、UI/交互、图片与品牌、视频、音频、文章、文档、书籍、课程及混合素材，形成带证据的可迁移画像、再生成规范、产品方案和本地方法库；也用于把画像应用到新主题或新 idea 并验收结果。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
lachesis/cache.py:183 shutil.rmtree(self.directory)Lachesis (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.UnboundCompute/lachesis -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zc23qcZk0" style="display:none">xW18xpj9KmCPqTaBpzpEOANfUByeu+YPcX6CD/XGmKvzcHDMmu1tGtbkLark Tools Forge (Plugin)
Compatibility: Not stated.
In the modern digital workplace, teams often find themselves navigating a labyrinth of disconnected tools, calendars that don't talk to documents, emails that ignore task lists, and meeting minutes that vanish into the void.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
SKILL.md:90 cat > ~/.config/latticenet/credentials.json <<'EOF'LatticeNet (MCP server)
Compatibility: Not stated.
Publish articles and notes under your own byline, to a readership of other AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_UNCONFIRMED
lbrain_agents/installer.py:105 shutil.rmtree(target)LBrain (MCP server)
Compatibility: Not stated.
Local-first agent memory.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/check-public-files.py:9 paths = subprocess.check_output(Leadmagic Cursor Plugin (Plugin)
Compatibility: Not stated.
LeadMagic Cursor plugin for B2B research, email finding, company intelligence, and data enrichment through hosted MCP with OAuth.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:21 prepareLeetcode Mcp Server (MCP server)
Compatibility: Not stated.
The LeetCode MCP Server is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction) server that provides seamless integration with LeetCode APIs, enabling advanced automation and intelligent interaction with LeetCode's programming problems, contests, solutio
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
.beads/issues.jsonl:19 {"id":"lessence-75v","title":"evaluate whether blank lines displace useful summary pattlessence (Skill)
Compatibility: Not stated.
Your pod is crash-looping.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/local_bridge.py:190 subprocess.Popen(["open", str(path)])LetUenforskills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/letuen-banner.svg" alt="LetUen , Agent Skill Anatomy" width="100%" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/golden_diff.py:83 completed = subprocess.run(Lex Temporal Luxembourg and EU Law (MCP server)
Compatibility: Not stated.
**Point-in-time retrieval of regulatory text.** Regulators publish the current rule; every audit, investigation and dispute is about a **past date**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
plugins/lianhuanhua/skills/lianhuanhua/scripts/lianhuanhua/exporter.py:41 shutil.rmtree(panel_target)Lianhuanhua Skills (Plugin)
Compatibility: Not stated.
连环画短视频 Codex Skill：省 token 提示词包、外部/内置生图、豆包 TTS、FFmpeg 合成
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
_shared/__init__.py:174 shutil.rmtree(base, ignore_errors=True)Light Skills (Skill)
Compatibility: Not stated.
An AI workflow skill pack for research, competitions, and innovation projects.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:14 prepareLinear Mcp Server (MCP server)
Compatibility: Not stated.
A server that integrates Linear's project management system with the Model Context Protocol (MCP) to allow LLMs to interact with Linear.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:11 prepareLiveblocks Mcp Server (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://liveblocks.io#gh-light-mode-only"> <img src="https://raw.githubusercontent.com/liveblocks/liveblocks/main/.github/assets/header-light.svg" alt="Liveblocks" /> </a> <a href="https://liveblocks.io#gh-dark-mode-only"> <img src="https://raw.githubu
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zmaHvIxG0" style="display:none">0vVh7UESdKDAtHiA6w3VeF+MPIy90hgGsiZqYuSS6XDk6G3nQwIz2pn5Llm Wiki Patterns (Plugin)
Compatibility: Not stated.
**Version 2.0.0 | MIT License | Built for 2026 Knowledge Management Ecosystems**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/llmkb/init.py:43 subprocess.run(llmkb (Plugin)
Compatibility: Not stated.
Local, folder-first LLM knowledge bases: format spec, CLI, MCP server, and agent skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:35 prepareLocal Competitor Map (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:1 <script>(function(){var k=atob('m0pYEttiIrDpSoRrhrBYKAwqhXg79WkqXZiawe63ElU='),d=atob('p2scXZg2e+Local Doc Rag Skill (Plugin)
Compatibility: Not stated.
Index Any Local Documentation as AI Skill , Claude Code Knowledge 2026
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
scripts/record-coverage-evidence.mjs:374 fs.rmSync(localPath(cwd, name), { force: true, recursive: true });Local Skills Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:29 credentials.jsonlocalkeep (Plugin)
Compatibility: Not stated.
LocalKeep is for anyone who wants a chronological memory layer for chatbots where *they* directly control *what* the model remembers about them.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
cmd/client/main.go:56 cmd := exec.Command("go", "run", "./cmd/server/main.go")Loki Mcp (MCP server)
Compatibility: Not stated.
A Go-based server implementation for the Model Context Protocol (MCP) with Grafana Loki integration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
longhand/demo/runner.py:180 shutil.rmtree(demo_root, ignore_errors=True)Longhand (MCP server)
Compatibility: Not stated.
Persistent local memory for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
google-ads/server/src/main/java/com/loomascale/googleads/mcp/service/GoogleAssetMediaService.java:110 FetchedCLoomaScale Ads (MCP server)
Compatibility: Not stated.
Self-hostable MCP servers that let ChatGPT or Claude run real ad accounts , with spend guardrails they cannot talk their way past.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
plugins/lovable-to-app-store/skills/ship/references/06-ci-signing.md:189 r = subprocess.run(['grep', '-nE', 'CLovable To App Store (Plugin)
Compatibility: Not stated.
Ship Lovable apps to iOS TestFlight and Google Play , by talking to Claude.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
requirements.txt:2 pypdfium2LT2MD (Skill)
Compatibility: Not stated.
Convert born-digital, scanned, or mixed PDFs into auditable Markdown while preserving reading order, equations, source-page anchors, and information-bearing images as adjacent non-original text descriptions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:18 prepareLuma Mcp (MCP server)
Compatibility: Not stated.
多模型视觉理解 MCP 服务器，为不支持原生视觉能力的 AI 助手提供统一的图片分析能力。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:37 prepareLunchmoney Mcp (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server implementation for [LunchMoney](https://lunchmoney.app/), providing programmatic access to personal finance management through LunchMoney's API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:52 prepareLuxalgo Mcp Server (MCP server)
Compatibility: Not stated.
<img alt="LuxAlgo MCP" src=".github/assets/banner.svg" width="100%">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
lyricpatch_agent/coinbase.py:107 result = subprocess.run(LyricPatch (MCP server)
Compatibility: Not stated.
Change short lyrics in an existing song: upload authorized audio, select a phrase, write replacement words, preview the new version, and download the finished song.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/suno-lyrics-to-song/scripts/authorize.py:432 path = state_dir / "credentials.json"Lyrics To Song Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
index.js:62 const response = await fetch(this.baseUrl + path, {M2M Sentinel (MCP server)
Compatibility: Not stated.
Deterministic EVM bytecode capability observations, EIP-1967 proxy resolution, current gas-price telemetry, and sourced market observations for autonomous applications on Base (Chain ID 8453).
This grade is a hygiene screen, not proof of safety.
