Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 51 to 100 of 3,335 Grade C entries. Page 2 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:34 prepareAgentic Cal (MCP server)
Compatibility: Not stated.
**Agentic email + calendar hub on Cloudflare Workers.** One Worker owns your domain's email surface: a full self-hosted email client with an AI agent, plus a unified calendar that aggregates Proton / Outlook / iCloud into one busy/free model and writes time blocks back to all thr
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
System/integrations/google-calendar/README.md:43 5. Download `credentials.json`Agentic Os (Skill)
Compatibility: Not stated.
**TL;DR**: An agentic personal operating system built to automate high-leverage workflows across Claude Code, Codex, Pi, OpenClaw, and other coding agents/runtime platforms.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:213 credentials.jsonagentidentityprotocol (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">Agent Identity Protocol (AIP)</h1> <p align="center"><em>The Zero-Trust Identity Layer for MCP & Autonomous Agents</em></p> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
examples/tools/google_calendar.py:23 result = subprocess.run(agentor (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <img src="https://raw.githubusercontent.com/CelestoAI/agentor/main/assets/CelestoAI.png" alt="project logo" width="500px"/> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
role/agentprivacy-lane-chronicle/scripts/citations.py:26 raw = subprocess.run(["gh", "pr", "list", "-R", a.repAgentprivacy Skills (Skill)
Compatibility: Not stated.
**Privacy-first AI agent skills for the Agent Skills standard.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
Sources/AgentRunKit/LLM/Providers/Vertex/GoogleAuthService.swift:138 return "\(home)/.config/gcloud/applicatioAgentRunKit (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo-dark.png" alt="AgentRunKit" width="280"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
src/Mcp/Transport/StdioTransport.php:72 $this->process = proc_open(agents (Skill)
Compatibility: Not stated.
**Add one trait.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
agr/_install_common.py:116 shutil.rmtree(dest)agr (Skill)
Compatibility: Not stated.
Educational package-manager project for AI agent skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
src/agy_headless_bridge/bridge.py:11 plain `subprocess.run(["agy", "-p", prompt])` returns an empty string - wAgy Headless Bridge (MCP server)
Compatibility: Not stated.
MCP server that runs Google's Antigravity CLI (agy) headlessly inside a pseudo-terminal and returns its cleaned output to Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
tools/login.go:23 cmd = exec.Command("rundll32", "url.dll,FileProtocolHandler", url)Ah Mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io) server for the Albert Heijn (🇳🇱) supermarket API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/ai-audiobook-narration/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Audiobook Generator Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/build_release.py:30 check = subprocess.run([sys.executable, str(ROOT / "scripts/validate_release.py")]Ai Career Roadmap Skill (Plugin)
Compatibility: Not stated.
根据简历研究最新 AI 与泛 AI 职业机会，并生成个性化学习路线。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
scripts/post-setup.js:47 fs.unlinkSync(filePath)Ai Coding Project Boilerplate (Skill)
Compatibility: Not stated.
Agentic coding TypeScript boilerplate for Claude Code: sub-agent workflows with built-in quality checks and context engineering.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
plugins/content-studio/content-studio/lib/content.ts:353 await fs.unlink(currentFilePath);Ai First Toolkit (Plugin)
Compatibility: Portable across standard formats.
Open-source Claude Code skills and Codex skills for AI-first work.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/ai-image-realism/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Image Realism Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/build-locales.py:74 # A nearby credentials.json or newly added private draft must never becomeAi Instruction Detox (Skill)
Compatibility: Not stated.
>-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
plugins/ai-job-search/skills/job-search-assistant/assets/workspace-template/tools/check_framework_version.py:2Ai Job Search Codex Port (Plugin)
Compatibility: Not stated.
Unofficial Codex plugin port of MadsLorentzen/ai-job-search
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/floor_check.py:530 result = subprocess.run(Ai Native Toolkit (Skill)
Compatibility: Not stated.
Skills for AI-native development.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/ai-news/scripts/run_daily.py:110 r = subprocess.run(LARK_CMD + args, capture_output=True, shell=False)Ai News Follow (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
apps/web/src/lib/api.ts:44 response = await fetch(`${API_BASE}${path}`, {Ai Observibility (Plugin)
Compatibility: Not stated.
**See how your AI coding agent is actually behaving.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
scripts/check_installed.py:41 result = subprocess.run([str(executable(command)), '--help'], capture_output=TruAI Pensieve MCP (MCP server)
Compatibility: Not stated.
中文版：[README](README.zh-CN.md) · [客户端设置](docs/AI_CLIENTS.zh-CN.md) · [用户指南](docs/USER_GUIDE.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/pubnub-keyset-management/evals/scenario-2/task.md:13 1. Execute `git diff --cached` (using `child_proceAi Plugin (Plugin)
Compatibility: Not stated.
PubNub plugin for Cursor
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zJhknB7N0" style="display:none">0jXk+fnLuFohVVGkRSB1WC63FexwKUaKcvHdxadjhAjkKOjz+9v/IHgYAi Pr Review Analyzer (Plugin)
Compatibility: Not stated.
In today's fast-paced development ecosystem, code review tools often prioritize velocity over depth.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
plugins/ai-safe-driver/scripts/drift-detector.mjs:35 const FAILURE_ANCHOR = /(?:안\s*(?:했|됐|맞|지켰|넣|고쳤|따랐|반영)|못\Ai Safe Driver (Plugin)
Compatibility: Not stated.
English | [한국어](README.ko.md) | [简体中文](README.zh-CN.md) | [繁體中文](README.zh-TW.md) | [日本語](README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
harness/initws.py:781 # exist fails OPEN at fetch (empty state, so theAi Sdlc Harness (Plugin)
Compatibility: Not stated.
Governed multi-agent SDLC pipeline for Claude Code and Qwen Code , plan → adversarial plan review → proven-red TDD → security scan → PR, with tamper-evident evidence at every step.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zSO0KQV50" style="display:none">qXV3zM65KV8LinJ/XzKdI7Cwa9F7hrleCFm+zlPGp5WfaHvGzKluJVLHAi Site Forge (Plugin)
Compatibility: Not stated.
**Sitemd Flow** is a declarative pipeline framework designed for AI coding agents that build static websites.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
clean-code/skills/backend-development/references/nodejs.md:98 return await fetch(url, {Ai Skills (Plugin)
Compatibility: Not stated.
Claude Code & Codex plugin marketplace of stack-aware clean-code skills (frontend, backend, core) with progressive, token-lean loading.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
src/ai_surface/repo.py:145 shutil.rmtree(tmp, ignore_errors=True)Ai Surface (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/run_tests.py:187 tracked = subprocess.run(["git", "ls-files"], cwd=REPO, capture_output=True,Ai Trend Tracker (Plugin)
Compatibility: Not stated.
On-demand Claude Code skill for AI/ML news, tools, papers & learning resources , search-first, cited, dual-layer (ELI5 + technical + verdict), role-aware.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
schemas/verify-content-credentials.json:3 "$id": "https://github.com/Neeeophytee/ai-watermarks-reality-check/sAi Watermarks Reality Check (Skill)
Compatibility: Not stated.
Seven portable agent skills for checking what AI provenance evidence exists, whether it verifies, what a publishing pipeline destroys, and what must still be disclosed.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
node/packages/mcp-server/src/parity_live.test.ts:161 fs.unlinkSync(tempJsonPath);ai.adeu/adeu (MCP server)
Compatibility: Portable across standard formats.
Automated DOCX Redlining Engine
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/core/api.ts:64 const res = await fetch(`${this.baseUrl}${path}`, {ai.justdrop/mcp (MCP server)
Compatibility: Not stated.
Live, end-to-end encrypted, ephemeral file transfer between your AI agent and any device.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.github/workflows/zenodo-archive.yml:52 with urllib.request.urlopen(r) as resp:ai.mentu/navigator (MCP server)
Compatibility: Not stated.
Read-only repo navigation and progressive disclosure; BM25 locator with registered evidence.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
cli/src/auth/storage.ts:129 fs.unlinkSync(tmp);ai.shipeasy/mcp (MCP server)
Compatibility: Not stated.
Feature flags, A/B experiments, kill switches, dynamic config & i18n , Shipeasy MCP server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV
package.json:14 prepareai.smithery/arjunkmrm-perplexity-search (MCP server)
Compatibility: Not stated.
Enable AI assistants to perform web searches using Perplexity's Sonar Pro.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_UNCONFIRMED OBFUSCATION_MINIFIED_PAYLOAD
src/igdb_mcp_server/server.py:140 client_secret = os.getenv("IGDB_CLIENT_SECRET") or (settings.IGDB_CLIENT_SECai.smithery/bielacki-igdb-mcp-server (MCP server)
Compatibility: Not stated.
Explore and discover video games from the Internet Game Database.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:30 prepareai.smithery/brave (MCP server)
Compatibility: Not stated.
Visit https://brave.com/search/api/ for a free API key.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
evals/run-evals.ts:238 await Promise.all(workflowFiles.map((f) => fs.unlink(f)));ai.smithery/browserbasehq-mcp-browserbase (MCP server)
Compatibility: Not stated.
Provides cloud browser automation capabilities using Stagehand and Browserbase, enabling LLMs to i…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:14 prepareai.smithery/callmybot-cookbook-mcp-server (MCP server)
Compatibility: Not stated.
Count occurrences of any character in your text instantly.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:31 prepareai.smithery/ChiR24-unreal_mcp (MCP server)
Compatibility: Not stated.
Control Unreal Engine to browse assets, import content, and manage levels and sequences.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
docs/pt-br/desenvolvimento/configuracao-ambiente.md:35 curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/vai.smithery/cristianoaredes-mcp-dadosbr (MCP server)
Compatibility: Not stated.
# MCP DadosBR Servidor MCP focado em dados públicos do Brasil.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
index.ts:67 process.env.COTI_MCP_AES_KEY = config.cotiMcpAesKey;ai.smithery/cuongpo-coti-mcp (MCP server)
Compatibility: Not stated.
Connect to the COTI blockchain to manage accounts, transfer native tokens, and deploy and operate…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
src/config.ts:6 export const GMAIL_CREDENTIALS_PATH = path.join(MCP_CONFIG_DIR, 'credentials.json')ai.smithery/faithk7-gmail-mcp (MCP server)
Compatibility: Not stated.
Manage Gmail messages, threads, labels, drafts, and settings from your workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:42 prepareai.smithery/flight505-mcp_dincoder (MCP server)
Compatibility: Not stated.
Driven Intent Negotiation , Contract-Oriented Deterministic Executable Runtime DinCoder brings the…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_UNCONFIRMED
package.json:16 postinstallai.smithery/hustcc-mcp-mermaid (MCP server)
Compatibility: Not stated.
Generate dynamic Mermaid diagrams and charts with AI assistance.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED +2 more
test-server.ts:65 fs.unlink(outputPath, () => {});ai.smithery/huuthangntk-claude-vision-mcp-server (MCP server)
Compatibility: Not stated.
Analyze images from multiple angles to extract detailed insights or quick summaries.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:26 prepareai.smithery/isnow890-data4library-mcp (MCP server)
Compatibility: Not stated.
책 싫어하는 제가 책에 대해 아는척하고 싶어서 만들었습니다..
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:16 prepareai.smithery/jjlabsio-korea-stock-mcp (MCP server)
Compatibility: Not stated.
Search company disclosures and financial statements from the Korean market.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:18 prepareai.smithery/keithah-hostex-mcp (MCP server)
Compatibility: Not stated.
Manage your Hostex vacation rentals, properties, reservations, availability, listings, and guest me…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:19 prepareai.smithery/LinkupPlatform-linkup-mcp-server (MCP server)
Compatibility: Not stated.
Search the web in real time to get trustworthy, source-backed answers.
This grade is a hygiene screen, not proof of safety.
