Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1051 to 1100 of 3,335 Grade C entries. Page 22 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:20 postinstallproctor (Plugin)
Compatibility: Not stated.
Catch AI agents gaming their test suites
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
docs/RUNTIME_EVIDENCE.md:163 configuration. Bourne does not parse or reimplement `~/.ssh/config`.Project Bourne (MCP server)
Compatibility: Not stated.
Project Bourne is open-source execution and provenance infrastructure for reproducible scientific and engineering workloads.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
plugins/project-foundation/skills/adapt-ui-reference/scripts/capture_ui_matrix.py:91 shutil.rmtree(profile)Project Foundation (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="assets/project-foundation-cover.png" alt="Project Foundation , From prompt to proof.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
memory_module/cli.py:58 run=subprocess.run(python_args('memory_module.cli')+['servProject Memory (MCP server)
Compatibility: Not stated.
Project Memory keeps the plan, the evidence, the decisions, the outcomes and the accepted lessons of one project in a local SQLite database.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/project-workflow/scripts/project_workflow_doctor.py:154 result = subprocess.run(Project Workflow (Plugin)
Compatibility: Not stated.
让 Codex 更可靠地完成复杂软件工程：持久化计划与交付证据，约束变更范围，支持验证、恢复和收益门控的原生多智能体协作。｜Make Codex more reliable for complex software engineering with repository-persisted plans and delivery evidence, scoped changes, verification, recovery, and benefit-gated native multi-agent collaboration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
scripts/build-skill.js:36 fs.unlinkSync(file);Prompt Architect (Skill)
Compatibility: Not stated.
Agent skill for analyzing and improving prompts using 31 frameworks across 7 intent categories.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/prompt-english-coach/scripts/coach-hook.js:106 fs.rmSync(filePath, { force: true });Prompt English Coach (Plugin)
Compatibility: Not stated.
Learn English while you prompt Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zmoNEt0b0" style="display:none">SO6L4uJ0QZ62xavxCTfsTqM3Xmj8GBaqZ4qWs65YzIt+84fo4GQG5O+IPrompt Integrity Validator (Plugin)
Compatibility: Not stated.
**Say goodbye to prompt bloat, hallucination triggers, and costly API waste.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
scripts/lint.js:601 const PR002_VERB_LIST = '(?:write|writes|writing|summari[sz]e|summari[sz]es|summari[sz]ingPrompt Refiner Skill (Plugin)
Compatibility: Not stated.
Hybrid prompt linter , deterministic Node detector for 18 of 20 rules plus an LLM model layer for PR003, PR009, and semantic cases of PR002, PR005, and PR010.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
requirements.txt:11 supermemory>=3.0.0Prompt Studio (Skill)
Compatibility: Not stated.
Prompt engineering workbench with a Lean persona layer that cuts LLM output size, cost, and latency.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/check_page.py:29 result = subprocess.run(args, capture_output=True, text=True, cwd=REPO)promptalias (Skill)
Compatibility: Not stated.
**[The visual walkthrough is at kishormorol.github.io/promptalias](https://kishormorol.github.io/promptalias/)** , what a prompt is, the seven of them, how a typed sentence reaches one, and what is actually measured.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:10 preparePrompthaus Recruiting (Plugin)
Compatibility: Not stated.
Search quiz-backed Skills Wallets across 16+ career pathways.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/mcp_server_pronunciation/recorder.py:136 return subprocess.run(Pronunciation & Voice Coach (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.JuhongPark/pronunciation -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/foldseek/SKILL.md:60 subprocess.run([Protein Design Skills (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/hero_animation.svg" width="560" alt="Protein Design Skills"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:34 prepareProton Mail Bridge Client (MCP server)
Compatibility: Not stated.
``` ____ ____ ___ _____ ___ _ _ __ __ _ ___ _ | _ \| _ \ / _ \_ _/ _ \| \ | | | \/ | / \ |_ _| | | |_) | |_) | | | || || | | | \| | | |\/| | / _ \ | || | | __/| _ <| |_| || || |_| | |\ | | | | |/ ___ \ | || |___ |_| |_| \_\\___/ |_| \___/|_| \_| |_| |_/_/ \_\___|_____| Bridge Cli
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/construction-contract-validate.cjs:365 if (fs.existsSync(outPath)) fs.unlinkSync(outPath);Provar MCP Server (MCP server)
Compatibility: Not stated.
The Provar DX CLI is a Salesforce CLI plugin for Provar customers who want to automate the execution of tests using Provar Automation, and the reporting of test results and other quality-related metrics to Provar Quality Hub.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
scripts/check_pypi_publication.py:20 def fetch(url: str) -> bytes:Proxmoxmcp Plus (MCP server)
Compatibility: Not stated.
Use MCP and OpenAPI to safely control Proxmox VE VMs, LXCs, backups, and snapshots from LLMs and AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
python/publicbrowser/client.py:133 with urllib.request.urlopen(req, timeout=timeout) as resp:Public Browser (MCP server)
Compatibility: Not stated.
Lets Claude Code, Cursor and any MCP client drive Chrome.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
scb-pxwebapi-v2-skill/scripts/check_examples.py:115 with urllib.request.urlopen(req, timeout=60) as r:Pxwebapi Skills (Skill)
Compatibility: Not stated.
<!--- Language: no ---> [_English see below_](#english)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/pydatagokr/cli.py:281 rows = KOFIA().fetch(args.operation, begin=args.begin, end=args.end)pydatagokr (Plugin)
Compatibility: Not stated.
**한국어** | [English](README.en.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/pykosis/client.py:90 ``kosis.population.life_expectancy.fetch()`` andpykosis (Plugin)
Compatibility: Not stated.
**한국어** | [English](README.en.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/run_eval.py:51 result = subprocess.run(Qdrant Skills (Plugin)
Compatibility: Not stated.
Agent skills for Qdrant vector search covering scaling, performance optimization, search quality, monitoring, deployment, model migration, version upgrades, and SDK usage across Python, TypeScript, Rust, Go, .NET, and Java.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
scripts/package.mjs:49 fs.rmSync(temporary, { recursive: true, force: true });qgraphflow (Skill)
Compatibility: Not stated.
Generate evidence-grounded interactive software diagrams with offline HTML, SVG and PNG export.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zX2pBNrG0" style="display:none">a9GG4OEbaaau57SF0CGv5npCvXUzyJqHojrX2AcNf5ZdzIrq4wsu3PeqQuillshield Audit Engine (Plugin)
Compatibility: Not stated.
Smart contracts are the new digital deeds, irrevocable, autonomous, and unforgiving.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zVnVCBvv0" style="display:none">p97iXGVOv37TSeLQ7HMqbocaFEBpwbZcROfB0Zhc9guRw+5WZ174BIoERad Claude Agent Toolkit (Plugin)
Compatibility: Not stated.
Unlock the full potential of Claude Code with a decentralized marketplace of skill plugins, orchestration agents, and autonomous coding workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
scripts/build-preview.mjs:12 _confirmed==='on'};const response=await fetch('/api/v2/research/feedback',{methodRasczak Knowledge Commons (MCP server)
Compatibility: Not stated.
Ten free, source-linked decision methods, three optional decision packs, REST, static pages, a stateless MCP endpoint, and an offline Agent Skill.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/sync_codex_plugin.py:52 shutil.rmtree(DESTINATION)Rate My Skill (Skill)
Compatibility: Not stated.
Audits Agent Skills for trigger precision, behavioral uplift, safety, package integrity, and marketplace readiness with evidence-backed release verdicts.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/build_windows.py:10 subprocess.run([rawmem (MCP server)
Compatibility: Not stated.
[English](README.md) | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL OBFUSCATION_ENCODED_BLOB
hooks/razor-lib.js:95 if (fs.statSync(file).mtimeMs < cutoff) fs.unlinkSync(file);razor (Plugin)
Compatibility: Not stated.
YAGNI checks for Claude Code and Codex: reconsider dependencies, file growth and unnecessary code before adding more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/readless/tts.py:21 _active_proc: subprocess.Popen | None = Nonereadless (Skill)
Compatibility: Not stated.
Speak Claude Code activity out loud while you're AFK , agent-callable speak_summary / speak_status / speak_blocker tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
reaper_mcp/reaper_client.py:69 os.remove(entry.path)Reaper Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.xDarkzx/reaper-mcp --> <h1 align="center">ReaperMCP</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:58 prepareRebuild Dossier (MCP server)
Compatibility: Not stated.
An MCP server that reverse-engineers a trustworthy **rebuild spec** , a locked `CLAUDE.md`, `.claude/` config, and a mutation-tested test suite , out of an existing app, so any coding agent can rebuild it cleanly against that spec instead of guessing.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
src/server.js:16 ipt>async function load(){const r=await fetch('/v1/activity');const d=await r.json();rRECOVER Decide Safely After a Failed Machine Action (MCP server)
Compatibility: Not stated.
**A failed machine action happened.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
functions/brc-edu-resource-processor/src/brcEduYouTubeSyncTimer.ts:28 const response = await fetch(endpoint, {Red by Big Red Cloud (MCP server)
Compatibility: Not stated.
Red is an open-source [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server that connects AI assistants and MCP clients to [Big Red Cloud](https://www.bigredcloud.com) accounting data through a set of controlled MCP tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/tools.ts:303 const put = await fetch(slot.uploadUrl, {Reel Estate MCP (MCP server)
Compatibility: Not stated.
**Turn real-estate listing photos into cinematic property videos from your AI assistant.** `reel-estate-mcp` is a [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server that connects **Claude, Cursor, and other AI assistants** to your [**Reel Estate**](https://try
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/reeper/scripts/repo_fingerprint.py:37 result = subprocess.run(Reeper (Plugin)
Compatibility: Not stated.
Safely adapt external repositories into an existing codebase through evidence-first analysis, conflict interviews, and verified integration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_UNPINNED +1 more
skills/ref-downloader/references/agent-runbook.md:95 os.remove(tmp_db)Ref Downloader (Skill)
Compatibility: Not stated.
> **Stop losing an afternoon to chasing dozens of reference PDFs by hand.** > One DOI in, every reference PDF out , using your existing institutional access.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/release_workflow.py:49 result = subprocess.run(reflect (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://reflect.o11y.dev/"> <img src="docs/favicon.svg" width="72" height="72" alt="Reflect logo"> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST OBFUSCATION_MINIFIED_PAYLOAD
stdio.mjs:29 const res = await worker.fetch(req, env, ctx);Regulatory Intel MCP (MCP server)
Compatibility: Not stated.
US Federal Register for AI agents: rules, notices, executive orders, agency lookup.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
src/remarkable_publish/docker_launcher.py:398 subprocess.run(Remarkable Codex (Plugin)
Compatibility: Not stated.
Turn Markdown reports, investigation results, and notes into paper-friendly PDFs and publish them to your reMarkable library from Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
remarkable_mcp/extract.py:2277 response = requests.post(url, json=payload, timeout=60)reMarkable MCP Server (MCP server)
Compatibility: Not stated.
>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
pipeline/haiku.py:971 shutil.rmtree(d, ignore_errors=True)remember (Plugin)
Compatibility: Not stated.
Continuous memory for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
install.sh:43 for cmd in curl tar awk sed; doremindb (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo.png" alt="remindb logo" width="400" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/index-readiness.mjs:32 const response = await fetch(`${origin}${path}`, {RepoRelay (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/reporelay-logo-dark.png"> <img src="docs/assets/reporelay-logo.png" width="440" alt="RepoRelay"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
requirements.txt:1 mcp>=1.0.0Report Needs MCP Server (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.JarvisOnM4/report-needs -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
scripts/judge-demo.mjs:66 const response = await fetch(url);ReproSight (Plugin)
Compatibility: Not stated.
**From bug screenshot to verified fix.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
paper/experiment-grounded-paper-review/scripts/find_related_repos.py:36 proc = subprocess.run(cmd, capture_outResearch Agent (Skill)
Compatibility: Not stated.
> Language / 语言: **中文** | **[English](./README.en.md)**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
plugins/academic-figure-skills/skills/drawio/references/official/style-reference.md:796 ;margin:0px;margin-lefResearch Figure Kit (Plugin)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/research-skill-pack/scripts/bootstrap_runtime.py:24 shutil.rmtree(RUNTIME)Research Skill Pack (Plugin)
Compatibility: Not stated.
v0.2 Beta: evidence-first local research workflow skills with audited MCP writes for Chinese undergrad information-management empirical theses.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
cli/e2e/helpers/cli-runner.ts:36 fs.rmSync(_tempHome, { recursive: true, force: true });reshapr (MCP server)
Compatibility: Not stated.
[**Website**](https://reshapr.io/) | [**About**](https://reshapr.io/about) | [**Docs**](https://reshapr.io/docs/) | [**Blog**](https://reshapr.io/blog) | [**Community**](https://reshapr.io/community)
This grade is a hygiene screen, not proof of safety.
