Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 801 to 850 of 3,335 Grade C entries. Page 17 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:44 id_rsamabl (MCP server)
Compatibility: Not stated.
The mabl [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server lets AI assistants and agents work directly with your mabl tests , run tests, analyze failures, create tests in the cloud, and query results across your workspaces.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
plugin/bin/che-ical-mcp-wrapper.sh:57 URL=$(curl -sL --max-time 30 "$API_URL" 2>/dev/null \macOS Calendar and Reminders (MCP server)
Compatibility: Not stated.
**Give Claude native control of macOS Calendar and Reminders.** A Swift MCP server built directly on EventKit , 29 tools for events, reminders, tags, batch operations, conflict detection, and undo/redo.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
runtime/mac_helper.py:166 result = subprocess.run(Macos Computer Use Skill (MCP server)
Compatibility: Not stated.
<p align="right"> <a href="./README.zh-CN.md">简体中文</a> · <a href="./README.ja.md">日本語</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/destructive-guard.sh:152 DOWNLOADERS="aria2c fetch curl wget lwpdownload http https iwr irm invokewebrmagician (Plugin)
Compatibility: Not stated.
Full-stack SDLC plugin for Claude Code & Codex , from idea to merged PR, autonomously.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/smoke-compile.mjs:71 const res = await fetch(`${base}/latest.pdf`);MagicTeX (MCP server)
Compatibility: Not stated.
MagicTeX , a LaTeX editor for AI agents: live PDF preview, PDF comments that drive edits, a Visual (WYSIWYG) mode, and git-tracked history, with slash commands to run it hands-off.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:16 postinstallMahonia (MCP server)
Compatibility: Not stated.
Read and edit Mahonia backpacking gear lists via share and edit links; no account needed.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/mcp-client.ts:44 response = await fetch(this._url, {Mailcannon (MCP server)
Compatibility: Not stated.
AI-powered email outreach platform using MCP (Model Context Protocol).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
src/tools/emailLogs/getEmailLogMessage.ts:76 const rawResponse = await fetch(log.raw_message_url, {Mailtrap Mcp (MCP server)
Compatibility: Not stated.
The official MCP server for Mailtrap , the email delivery platform.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/mainbook_mcp/credentials.py:91 return Path.home() / ".config" / "mainbook" / "credentials.json"MainBook Bank Statement Converter (MCP server)
Compatibility: Not stated.
Convert PDF bank statements to checked Excel, CSV or JSON with balance validation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
skills/managing-dependencies/SKILL.md:42 curl -s "https://packages.ecosyste.ms/api/v1/registries/<registry>/paManaging Dependencies (Skill)
Compatibility: Not stated.
Evaluates packages, manages dependencies, and addresses supply chain security
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
skills/manim-skill/tools/tts-generate.py:98 subprocess.run(Manim Skill (Plugin)
Compatibility: Not stated.
SKILL.md for creating animations with Manim.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/manimgl-best-practices/templates/3d_scene.py:258 os.system(f"manimgl {__file__} ThreeDSceneTemplate")manim_skill (Skill)
Compatibility: Not stated.
Agent skills for Manim to create 3Blue1Brown style animations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
tools/build_source_index.py:58 return subprocess.check_output(Mao Strategy (Skill)
Compatibility: Not stated.
> 把现实困境交给 Agent，用可追溯的毛泽东战略思想，找到当前主要问题、行动次序和可验证的下一步。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:20 postinstallmapbox (Plugin)
Compatibility: Not stated.
Mapbox skills and MCP servers for building location-aware applications with AI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
packages/extractors/src/extract.test.ts:40 "fetch('/api/charge');",mappamind (Plugin)
Compatibility: Not stated.
See what your AI coding agent just did to your system's behavior, flow, and architecture.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zqCGp1Sc0" style="display:none">B1Ody77ZveINDEv9UWpOiXnjbFBw8JZaEqYb/ht0x2gxTpHBvMn6mFRBMarkdown Fetcher Mcp (Plugin)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
apps/fetcher/README.md:115 curl -fsSL https://bun.sh/install | bash && install -m755 ~/.bun/bin/bun /usr/localMarkLayer (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://marklayer.app"> <img src=".github/icon.svg" width="112" height="112" alt="MarkLayer logo"> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
src/markmap/lifecycle.ts:71 await fs.unlink(file.filePath);Markmap Mcp Server (MCP server)
Compatibility: Not stated.
Markmap MCP Server is based on the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
scripts/generate-icons.mjs:74 fs.rmSync(iconsetDir, { recursive: true });markupr (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="src/renderer/assets/logo.svg" alt="markupR" width="80" height="80"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:44 prepareMarzban MCP (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:34 prepareMastercard Developers MCP (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="https://developer.mastercard.com/_/_/src/global/assets/svg/mcdev-logo-light.svg"> <img src="https://developer.mastercard.com/_/_/src/global/assets/svg/mcdev-logo-dark.svg" alt="mastercard developers logo"> </picture>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
mathmodel_agent/cli.py:199 completed = subprocess.run(Mathmodel Weave (Skill)
Compatibility: Not stated.
中文是本项目的主要使用入口；[English README](README.en.md) 提供同等内容的英文说明。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
plugins/matt-engineering/scripts/validate_suite.py:190 result = subprocess.run(Matt Pocock Engineering (Plugin)
Compatibility: Not stated.
[中文](./README.md) · [English](./README_EN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +1 more
requirements.txt:2 fastmcp>=2.0.0Maximo Enterprise MCP (MCP server)
Compatibility: Not stated.
# Maximo Enterprise MCP
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_DOTENV
package.json:18 preparemcp (MCP server)
Compatibility: Not stated.
Browser MCP is a Model Context Provider (MCP) server that allows AI applications to control your browser
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
code_graph_bridge.py:56 self._child: subprocess.Popen[str] | None = NoneMcp Agent Switchboard (MCP server)
Compatibility: Not stated.
**Use Claude Code, Codex, Gemini, Antigravity, and VS Code together , without copy-pasting context between them.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
src/arr-client.ts:423 const response = await fetch(url, {Mcp Arr (MCP server)
Compatibility: Not stated.
<!-- <p align="center"> <img src="docs/mcp-arr-logo.png" alt="MCP *arr Server" width="400"> </p> -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_DOTENV
package.json:16 prepareMcp Batchit (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED +1 more
evaluations/prepare_comparison.py:33 files = subprocess.check_output(['git', 'ls-tree', '-r', '--name-only', bMcp Boundary (MCP server)
Compatibility: Not stated.
<p align="center"><img src="brand/exports/logo.png" width="152" alt="MCP Boundary mark"></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/install_dependency_floors.py:68 return subprocess.run([str(args.pip), "install", "--quiet", *pins], chMcp Broker (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.doricstack/mcp-broker -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.cursor/rules/isolation_rules/visual-maps/van-mode-map.mdc:588 Invoke-Expression $tool.Command | Out-NullMcp Bsl Platform Context (MCP server)
Compatibility: Not stated.
**MCP (Model Context Protocol) сервер** , это инструмент для интеграции с AI-ассистентами (например, Claude Desktop, Cursor IDE), предоставляющий быстрый и стандартизированный доступ к справочной информации по встроенным функциям, типам данных, методам и свойствам платформы 1С:П
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:56 @clack/promptsMcp Client Gen (MCP server)
Compatibility: Not stated.
Generate a typed TypeScript client for a remote [MCP](https://modelcontextprotocol.io) server (Streamable HTTP or SSE): point it at a URL, get a module with one method per tool.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:12 credentials.jsonMcp Codebase Index (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.MikeRecognex/mcp-codebase-index -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
src/mcp_crew_ai/cli.py:119 subprocess.run(cmd)Mcp Crew Ai (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="https://github.com/crewAIInc/crewAI/blob/main/docs/crewai_logo.png" alt="CrewAI Logo" /> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:67 prepareMcp Dataverse (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
internal/agent/oauth_mcp.go:321 cmd = exec.Command("xdg-open", urlStr) //nolint:gosec // G204: fixed opener, UMcp Debug (MCP server)
Compatibility: Not stated.
`mcp-debug` is a command-line tool for debugging MCP (Model Context Protocol) servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/main.ts:460 fs.unlinkSync(tmpCliPath);Mcp Defender (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="./src/assets/white_knight_icon.png"> <source media="(prefers-color-scheme: light)" srcset="./src/assets/black_knight_icon.png"> <img alt="Shows a black knight in light color mode and a white knight
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:29 prepareMcp Documentation Server (MCP server)
Compatibility: Not stated.
MCP Documentation Server - Bridge the AI Knowledge Gap.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
server.py:1865 ssh_key_filename: Path to SSH private key file (default: ~/.ssh/id_rsa)Mcp File Edit (MCP server)
Compatibility: Not stated.
A simple Model Context Protocol (MCP) server that provides comprehensive file system operations including the ability to patch files and perform basic code analysis aimed at reducing Claude Desktop's token usage when compared to other similar tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:11 prepareMcp Gateway (MCP server)
Compatibility: Not stated.
A gateway service that bridges the stdio-based Model Context Protocol (MCP) implementation in Claude Desktop with HTTP/SSE-based MCP servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:24 prepareMcp Gemini Server (MCP server)
Compatibility: Not stated.
- [Overview](#overview) - [File Uploads vs URL-Based Analysis](#file-uploads-vs-url-based-analysis) - [Features](#features) - [Prerequisites](#prerequisites) - [Installation & Setup](#installation--setup) - [Configuration](#configuration) - [Available Tools](#available-tools) - [
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:11 prepareMcp Gitlab Server (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./assets/repo-logo.png" alt="GitLab MCP Server Logo" width="200"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
.cursor/rules/fastmcp.mdc:1986 34 | subprocess.run(Mcp Google Ads (MCP server)
Compatibility: Not stated.
An MCP tool that connects Google Ads with Claude AI/Cursor and others, allowing you to analyze your advertising data through natural language conversations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED SECRETS_PATH_CREDENTIAL
gsc_server.py:189 os.remove(TOKEN_FILE)Mcp Gsc (MCP server)
Compatibility: Not stated.
Google Search Console Insights with Claude AI for SEOs
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:48 prepareMcp Image (MCP server)
Compatibility: Not stated.
> Generate and edit images from Codex, Cursor, Claude Code, or any MCP client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/mcp_jenkins/jenkins/rest_client.py:53 # Without credentials no auth is set, so Jenkins applies anonymous pMcp Jenkins (MCP server)
Compatibility: Not stated.
The Model Context Protocol (MCP) is an open-source implementation that bridges Jenkins with AI language models following Anthropic's MCP specification.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
package.json:49 @modelcontextprotocol/sdkMcp Jenkins (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:19 prepareMcp Jetbrains (MCP server)
Compatibility: Not stated.
A model context protocol server to work with JetBrains IDEs: IntelliJ, PyCharm, WebStorm, etc.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:60 prepareMcp Llm (MCP server)
Compatibility: Not stated.
An MCP server that provides access to LLMs using the LlamaIndexTS library.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:15 prepareMcp Llms Txt Explorer (MCP server)
Compatibility: Not stated.
<a href="https://glama.ai/mcp/servers/lhyj3pva0z"> <img width="380" height="200" src="https://glama.ai/mcp/servers/lhyj3pva0z/badge" alt="LLMS.txt Explorer MCP server" /> </a>
This grade is a hygiene screen, not proof of safety.
