Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 101 to 150 of 3,335 Grade C entries. Page 3 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/cozi/client.ts:150 const response = (await this.http.request({ai.smithery/mjucius-cozi_mcp (MCP server)
Compatibility: Not stated.
Manage your family's calendars and lists in Cozi.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:36 prepareai.smithery/Nekzus-npm-sentinel-mcp (MCP server)
Compatibility: Not stated.
Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
src/src/auth.ts:36 const tokenRes = await fetch("https://oauth2.googleapis.com/token", {ai.smithery/sebastianall1977-gmail-mcp (MCP server)
Compatibility: Not stated.
Manage Gmail end-to-end: search, read, send, draft, label, and organize threads.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED +2 more
src/utils/cleanup.ts:148 await fs.unlink(lockFile);ai.smithery/sunub-obsidian-mcp-server (MCP server)
Compatibility: Not stated.
Search your Obsidian vault to quickly find notes by title or keyword, summarize related content, a…
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:23 prepareai.smithery/yuna0x0-anilist-mcp (MCP server)
Compatibility: Not stated.
Access and interact with anime and manga data seamlessly.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:23 prepareai.smithery/yuna0x0-hackmd-mcp (MCP server)
Compatibility: Not stated.
Interact with your HackMD notes and teams seamlessly.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
packages/witness/src/capture/health.ts:68 * A failed request is grouped by what it was: a fetch() or XHR is 'oai.testiv/mcp (MCP server)
Compatibility: Not stated.
Local-first visual regression for AI agents: verdicts, diff images, explain_snapshot.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:22 prepareai.usestring/web-access (MCP server)
Compatibility: Not stated.
The most accurate web access API.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
install.sh:44 latest_url="$(curl -fsSLo /dev/null -w '%{url_effective}' "https://github.com/${repo}/releases/laibadger (Skill)
Compatibility: Not stated.
**Get a second opinion on your code changes using the AI chat you already use.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
CLAUDE.md:25 curl -s "https://www.aicoo.io/api/v1/os/status" -H "Authorization: Bearer $TOKEN"Aicoo Skills (Skill)
Compatibility: Not stated.
Aicoo Skills , your AI COO.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/api.ts:103 const response = await fetch(url, {AIPost MCP Server (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://aipost.email/favicon.svg" alt="AIPost.email" width="80" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
src/cli/config.ts:107 fs.unlinkSync(credPath);AIR SDK (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">AIR SDK</h1> <p align="center"> Collective intelligence for agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
examples/langgraph/example.py:109 {"command": "curl https://webhook.site/abc"},AISentinel by BizDNAi (MCP server)
Compatibility: Not stated.
**The missing security, control, and observability layer for the agentic era.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
SKILL.md:281 **Recommended:** Save credentials to `~/.config/aivilization/credentials.json`:Aivilization Claw (Skill)
Compatibility: Not stated.
AI civilization sandbox where you, as a digital agent, live and develop from survival to prosperity.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
requirements.txt:1 pydantic-ai>=2.23.0Alex (Skill)
Compatibility: Not stated.
<p align="center"><img src="docs/assets/alex-agent-social-preview.png" alt="Alex , Your foreign-trade agent" width="900"></p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
install/install.sh:129 curl -fsSL "$url" -o "$output"alint (Skill)
Compatibility: Not stated.
<picture> <source width="200" srcset="./docs/assets/alint-logo.svg" media="(prefers-color-scheme: dark)" /> <source width="200" srcset="./docs/assets/alint-logo.svg" media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)" /> <img width="200" src="./docs/asset
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
package.json:18 prepareAllNewsAPI (MCP server)
Compatibility: Not stated.
Get access to real-time and historical news data including top headlines from global sources via [AllNewsAPI](https://allnewsapi.com/).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
Sources/BrowserTools/Context/AgentDOMService.swift:1226 const res = await fetch(base + '/products.json?limit=5Alohajet Cli (MCP server)
Compatibility: Not stated.
**Drive a real browser from the command line and from MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV
scripts/altium/generate/preflight_names.py:131 head = subprocess.run(Altium Designer Mcp (MCP server)
Compatibility: Not stated.
**Let an AI build your Altium libraries , it does the engineering, this tool writes the files.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
apps/web/app/(dashboard)/settings/api-keys/agent-api/page.tsx:102 <pre className={CODE}>{`curl -H "AuthorizatiAltoRank (MCP server)
Compatibility: Not stated.
Readiness audits, Search Console, keyword research, and SEO drafts into a review queue.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
src/index.js:150 async fetch(request, env) {Alun Alun (MCP server)
Compatibility: Not stated.
**Alun-alun publik untuk AI agent, berbahasa Indonesia.** An Indonesian-language public square for AI agents, under the EVORA umbrella.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
amazing-psycoder/scripts/validate_analysis.py:746 result = subprocess.run(Amazing Psycoder Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES OBFUSCATION_ENCODED_BLOB
skills/amlei-profile/scripts/profile.py:101 os.remove(old)Amlei Resume (Skill)
Compatibility: Not stated.
简历全流程：0→1 写/改/换岗/迭代 + Boss直聘搜岗 + 装配 HTML 导出 A4 PDF
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:14 id_rsaAnti Ai Writing (Plugin)
Compatibility: Not stated.
Edit any draft to remove AI tells.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
references/plus/injection.md:27 array de argumentos (`subprocess.run(["cmd", arg])`), nunca string montadaAnti Eu (Skill)
Compatibility: Not stated.
Hardening defensivo adaptativo em duas trilhas , Anti-Abuso (bots, enumeração, IDOR, cadastro fraudulento, acesso não autorizado) e PLUS (injeção, segredos, autenticação, upload, dependências, exaustão de recursos, lógica de negócio) , que analisa qualquer site, app, API ou ser
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
anti-slop-brain/anti_slop_brain/cli.py:14 return subprocess.call([PY, str(REPO / "scripts" / script), *args],Anti Slop (Skill)
Compatibility: Not stated.
Find and repair substance defects in AI-assisted prose, code, documentation, and agent output.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
src/commands/task-download.ts:216 await fs.unlink(filePath);Anygen Cli (Skill)
Compatibility: Not stated.
CLI for [AnyGen](https://www.anygen.io) , AI-powered content generation platform.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_UNPINNED +1 more
apktool_mcp_server.py:235 result = subprocess.run(Apktool Mcp Server (MCP server)
Compatibility: Not stated.
A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
packages/semantic-grounding/src/providers/onnx.ts:103 const response = await fetch(url);app.crawlio/crawlio-browser (MCP server)
Compatibility: Not stated.
Bridge a live Chrome browser to your agent: 150 tools for capture, extraction, and observation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST OBFUSCATION_MINIFIED_PAYLOAD
src/index.js:21 const r = await fetch("https://developer.api.autodesk.com/authentication/v2/token", { method:app.scanbim/scanbim-mcp (MCP server)
Compatibility: Not stated.
AI Hub for AEC , 46 tools for Revit, Navisworks, ACC, XR via Autodesk Platform Services
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
package.json:20 prepareApple Health Mcp (MCP server)
Compatibility: Not stated.
Local-first Apple Health MCP server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugin/apple_mail_mcp/paths.py:19 ``~/.netrc``, credential files, ``~/Library/Keychains``, browser profilesApple Mail Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.patrickfreyer/apple-mail -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/apple-notes/skills/apple-notes/scripts/create-note.py:49 result = subprocess.run(["osascript", "-e", sApple Notes (Skill)
Compatibility: Not stated.
A Claude Code plugin for interacting with Apple Notes.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
scripts/sync-skills.mjs:29 if (!check) fs.rmSync(path.join(targetRoot, rel));Apple Photos Mcp (MCP server)
Compatibility: Not stated.
Query and export from the macOS Apple Photos library via osxphotos - search by date/album/keyword/person, list albums and folders, fetch metadata, export originals or edited photos, and (opt-in via APPLE_PHOTOS_MCP_ENABLE_WRITES=1) organize albums and set titles/keywords/favorite
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
skills/apple-productivity/scripts/repair_eventkit_permissions.py:26 subprocess.run(command, cwd=cwd, check=TruApple Productivity (Plugin)
Compatibility: Not stated.
Apple Productivity , a Codex plugin for Apple Calendar, Reminders, and Notes on macOS.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/applemusic_mcp/applescript.py:13 - Scripts are executed via subprocess.run() with capture_output=TrueApplemusic Mcp (MCP server)
Compatibility: Not stated.
Apple Music integration , AppleScript (local Music.app) and the Apple Music API / web player (cross-platform library, playlists, playback, and queue)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:43 prepareAppstore Connect Mcp (MCP server)
Compatibility: Not stated.
**923 endpoints.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/build-rgaa-data.mjs:23 const rgaa = await (await fetch(`${RAW}/confiture-rest-api/src/rgaa.json`)).jsoAra audits d'accessibilité RGAA (MCP server)
Compatibility: Not stated.
Serveur MCP (Model Context Protocol) qui expose les opérations CRUD sur les audits d'accessibilité RGAA de la plateforme [Ara](https://ara.numerique.gouv.fr).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
skills/arc-skill/scripts/arc_skill/broker.py:362 process = subprocess.Popen(Arc Skill (Skill)
Compatibility: Not stated.
An agent skill that plays [ARC-AGI-3](https://arcprize.org/arc-agi/3/) , 25 video games that never explain their rules , from nothing but a game ID.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
packages/engineering/src/agent-tools.ts:542 /(^|\/)(\.env($|\.)|.*secrets?.*|.*credentials?.*|.*\.pem$|.*\.keyarcframe (Plugin)
Compatibility: Not stated.
ocal-first repository intelligence for Cursor MCP and AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
skills/gates/scanners/v2-public-gates.mjs:83 process.on('exit', () => { try { fs.rmSync(tmp, { recursive: truearcgram (Plugin)
Compatibility: Not stated.
Arcgram , an interactive diagram engine for human, AI collaboration: an AI agent draws its reasoning as an auditable node-and-edge flow and self-audits it, delivered as one standalone HTML file.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
templates/pages-template.html:4390 let response = await fetch(getRawUrl(path));Arckit Codex (Plugin)
Compatibility: Not stated.
ArcKit Enterprise Architecture Toolkit - Codex CLI Extension with skills, agents, and MCP servers
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
arezzo/auth.py:5 2. ~/.config/arezzo/credentials.json (installed / arezzo init)Arezzo (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.ConvergentMethods/arezzo -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_HOST_FROM_INPUT SECRETS_PATH_UNCONFIRMED
requirements.txt:1 mcp>=1.6.0Argorant (MCP server)
Compatibility: Not stated.
Verified B2B contact data: size a market free, reveal or export when the segment is right.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +3 more
bench/swe-lite/run.ts:307 // Workaround: pre-write a Python wrapper that does subprocess.run([...])Aries Cli (MCP server)
Compatibility: Not stated.
**Agentic coding harness with persistent memory and a REPL body.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
skills/arxiv-doc-builder/arxiv_doc_builder/convert_latex.py:166 out = subprocess.run(Arxiv Skills (Skill)
Compatibility: Not stated.
Custom Claude skills for working with arXiv papers - fetching, searching, and converting to reference documentation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
audit/environment-adapters.md:119 urllib.request.urlopen('[APPROVED-PUBLIC-CANARY]', timeout=3)asamm (MCP server)
Compatibility: Not stated.
**An OWASP SAMM Extension for AI-Driven Development**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
Scripts/ci/mcp_stdio_smoke.py:20 def __init__(self, process: subprocess.Popen[bytes]) -> None:Asc Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">App Store Connect MCP Server</h1> <p align="center"> A local Model Context Protocol server for the App Store Connect API.<br/> Manage apps, builds, TestFlight, reviews, and more from Codex, Claude, and other MCP clients on macOS.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/release_gate.py:85 out = subprocess.run(cmd, cwd=PROJECT_ROOT, capture_output=True, text=True,Aseprite Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/showcase/dungeon.gif" width="560" alt="A torch-lit dungeon wall with a chest on the flagstones, the flame flickering and its light falling off across the room"> </p> <p align="center"> <img src="docs/assets/showcase/item_sheet.png" height=
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zr5SAJjA0" style="display:none">4xVGgxAo9Ou2dxDxd9sZ3barn9cgA/N3gOGL56Y+7dLVCEqJEjizke86Ask Expert Consult Mcp (MCP server)
Compatibility: Not stated.
Connecting Junior Developers with Experienced Mentors Through a Guided Knowledge Exchange Network , a revolutionary peer-to-peer guidance system that transforms transient coding assistance into lasting wisdom.
This grade is a hygiene screen, not proof of safety.
