Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1551 to 1600 of 3,335 Grade C entries. Page 32 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/components/BatchUpload.tsx:60 const res = await fetch("/api/batch-parse", {io.github.XJTLUmedia/ai-hr-management-toolkit (MCP server)
Compatibility: Not stated.
> AI-powered resume parser & full Applicant Tracking System with **21 MCP tools**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/write_readme.py:205 curl -LsSf https://astral.sh/uv/install.sh | shio.github.Zahid-Abbas-Ali-Baig/document-converter (MCP server)
Compatibility: Not stated.
<p align="center"> <strong>Convert documents to Markdown inside Cursor, VS Code, and any MCP client.</strong><br> Local processing · No cloud upload · Powered by <a href="https://github.com/microsoft/markitdown">MarkItDown</a> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
blog/how-to-detect-prompt-injection-in-agent-pipelines.html:365 <pre>Ignore all previous instructions. You areio.github.ZentricProtocol/zentric-protocol-mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/verify-distribution.yml:58 curl -fsSL https://raw.githubusercontent.com/JAIPilot/jaipilot/maJAIPilot (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/jaipilot-logo.svg" alt="JAIPilot" width="96" height="96"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
utils/lm_calls/connection/client_connection.py:78 return requests.request(**kwargs)Juniper Routing Director MCP Server (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.Juniper/routing-director-mcp-server -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
cloud/src/app.tsx:15 fetch('/api/onboarding/status', { credentials: 'juror (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
kubernetes/README.md:57 curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bashKafka Schema Reg Mcp (MCP server)
Compatibility: Not stated.
A comprehensive **Model Context Protocol (MCP) server** that provides Claude Desktop and other MCP clients with tools for Kafka Schema Registry operations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
llm-benchmark/SKILL.md:33 - 若 **未安裝**：執行 `curl -fsSL https://ollama.com/install.sh | sh`，再啟動服務kc_ai_skills (Skill)
Compatibility: Not stated.
[正體中文](README_zh.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
server/admin.mjs:53 console.log(` curl -fsSL ${srv}/get | bash`);Klear Team Brain (MCP server)
Compatibility: Not stated.
> **Your team's collective memory for AI-assisted coding.** Self-hosted, ultra-light, zero extra effort for the people doing the work.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
install.sh:24 if command -v curl >/dev/null 2>&1; thenKloakt (MCP server)
Compatibility: Not stated.
<h2 align="center">Kloakt</h2>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/CATALOG.md:78 curl -fsSL https://raw.githubusercontent.com/lyonzin/knowledge-rag/master/skills/install.Knowledge Rag (MCP server)
Compatibility: Not stated.
<!-- knowledge-rag , Local RAG server for Claude Code, Cursor, Windsurf and other MCP clients.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.pre-commit-config.yaml:14 # curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scriKubernetes Troubleshoot (MCP server)
Compatibility: Not stated.
A read-only [MCP (Model Context Protocol)](https://modelcontextprotocol.io/) server that lets an AI assistant diagnose a Kubernetes cluster.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/verify_deep_links.py:56 with urllib.request.urlopen(req, timeout=5) as resp:kyb (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.beads/README.md:64 curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | basLayntra (Plugin)
Compatibility: Not stated.
Open-source Codex plugin and local Figma companion for controlled inspect, plan, apply, and undo workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:6 # curl -sSfL https://raw.githubusercontent.com/rpgeeganage/lazy-tool/main/install.sh | shLazy Tool (MCP server)
Compatibility: Not stated.
The more MCP servers you connect, the more tool schemas get dumped into every prompt.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:196 prepareLex (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargLibrarian Mcp (MCP server)
Compatibility: Not stated.
Give Claude a librarian for your markdown vault.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
macaroonnetwork_mcp/client.py:149 resp = requests.get(f"{self.registry_url}/.well-known/agent-capabilities", tLive UK Company Search (MCP server)
Compatibility: Not stated.
<!-- mcp-name: com.macaroonnetwork/mcp-server -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
cli/bin/llms-skills.mjs:220 const res = await fetch(src);Llms Txt Skills (Skill)
Compatibility: Not stated.
> Draft v0.10 , Especificación para publicar y consumir Agent Skills a través de `llms.txt`.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
testdata/fixtures/yaml/rust-lang-ci.yml:117 curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -slumen (Plugin)
Compatibility: Not stated.
Precise local semantic code search via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:77 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargMail Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">mail-mcp</h1> <p align="center"> <strong>Production-ready email MCP server for AI agents</strong><br> IMAP + SMTP + EWS + Microsoft Graph API , built in Rust </p> <p align="center"> <a href="https://github.com/tecnologicachile/mail-mcp/relea
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install-matlab-mcp.sh:210 curl -LsSf https://astral.sh/uv/install.sh | shMatlab Mcp Tools (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides tools for developing and running MATLAB files.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:167 if ! curl -Ls https://astral.sh/uv/install.sh | sh; thenMaven Decoder Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.salitaba/maven-decoder-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:147 curl -fsSL https://outreach2day.com/install | shmcp (Plugin)
Compatibility: Not stated.
Cold email infrastructure: check and buy domains, create mailboxes with SPF, DKIM and DMARC, run warm-up and campaigns, read replies.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
packages/openapi-codegen/src/runtime.ts:194 get fetch() {mcp (MCP server)
Compatibility: Not stated.
Official Taskade MCP: hosted OAuth at https://www.taskade.com/mcp, or connect Taskade to Cursor.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.devcontainer/postCreateCommand.sh:4 curl -LsSf https://astral.sh/uv/install.sh | shMcp Apache Spark History Server (MCP server)
Compatibility: Not stated.
> **Connect AI agents and engineers to Apache Spark History Server for intelligent job analysis, performance monitoring, and investigation**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
docs/MCP-SECURITY-TESTING-STRATEGY.md:491 | Prompt injection | Inject via tool inputs | `Ignore previous instrMcp Audit (MCP server)
Compatibility: Not stated.
**See what your AI agents can access - before they go live.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/mcp_brasil/data/denasus/client.py:34 resp = await http.get(url)Mcp Brasil (MCP server)
Compatibility: Not stated.
MCP Server para 70 APIs públicas brasileiras
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:8 RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash -Mcp Bridge (MCP server)
Compatibility: Not stated.
A middleware to provide an openAI compatible endpoint that can call MCP tools
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/mcp_canada/modules/bank_of_canada/client.py:54 response = await http.get(url, params=params)Mcp Canada (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">🍁 mcp-canada</h1> <p align="center"> <strong>MCP server giving AI agents structured access to Canadian federal, provincial, and municipal government data</strong> </p> <p align="center"> <a href="https://pypi.org/project/mcp-canada/"><img src
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:29 curl -LsSf https://astral.sh/uv/install.sh | shMcp Client Cli (MCP server)
Compatibility: Not stated.
A simple CLI to run LLM prompt and implement MCP client.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargMcp Discovery (MCP server)
Compatibility: Not stated.
<p align="center"> <img width="96" src="./docs/_media/mcp-discovery-logo.png" alt="MCP Discovery Logo" width="300"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
landing/index.html:421 <pre class="code">curl -LsSf https://astral.sh/uv/install.sh | sh</pre>Mcp Fiscal Brasil (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.DeHor-Labs/mcp-fiscal-brasil -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:4 # curl -LsSf https://www.mcp-for-blender.com/install.sh | shMcp For Blender (MCP server)
Compatibility: Portable across standard formats.
Community plugin to control Blender 3D with any LLM of your choice.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Makefile:65 curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -Mcp Forge (MCP server)
Compatibility: Not stated.
A production-ready MCP (Model Context Protocol) server template (oauth authorization included) built in Go that works with major AI providers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
docs/guides/how-it-works.md:806 this.ws = new WebSocket(this.url);Mcp Jest (MCP server)
Compatibility: Not stated.
**Automated testing for Model Context Protocol (MCP) servers.** Test your AI agent tools with Jest-like syntax, validate protocol compliance, and integrate with CI/CD.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:44 curl -sSL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bashMcp Kubernetes (MCP server)
Compatibility: Not stated.
The mcp-kubernetes is a Model Context Protocol (MCP) server that enables AI assistants to interact with Kubernetes clusters.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
Dockerfile:4 RUN curl -LsSf https://astral.sh/uv/install.sh | shMcp Kubernetes Server (MCP server)
Compatibility: Not stated.
The `mcp-kubernetes-server` is a server implementing the Model Context Protocol (MCP) to enable AI assistants (such as Claude, Cursor, and GitHub Copilot) to interact with Kubernetes clusters.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/go.yml:28 run: curl --proto '=https' --tlsv1.2 -sSf https://just.systems/install.sh | bash -Mcp Language Server (MCP server)
Compatibility: Not stated.
mcp-language-server gives MCP enabled clients access semantic tools like get definition, references, rename, and diagnostics.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
docs/ADR.md:219 `ignore previous instructions`, `you are now`, …).MCP Light Memory (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/bar-mcp-light-memory.png" alt="MCP Light Memory" width="640"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
mcp_nixos/caches.py:178 resp = requests.get(Mcp Nixos (MCP server)
Compatibility: Not stated.
MCP-NixOS - Model Context Protocol Server for NixOS resources
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/odoo_compose_smoke.py:144 with urllib.request.urlopen(url, timeout=5) as response:Mcp Odoo (MCP server)
Compatibility: Not stated.
Odoo MCP for AI agents , gated writes, multi-instance.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:5 # Usage: curl -fsSL https://raw.githubusercontent.com/conikeec/mcp-probe/master/install.sh | bashMcp Probe (MCP server)
Compatibility: Not stated.
**MCP Probe** is a powerful Terminal User Interface (TUI) for debugging, testing, and interacting with Model Context Protocol (MCP) servers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
AGENTS.md:18 curl.js curl tokenizer/parser + curl->tool codegen (the --from-curl feature)Mcp Quickstart (MCP server)
Compatibility: Not stated.
> ⭐ **推荐：** [`npx ship-skills init`](https://github.com/G12789/ai-ship)（已登录 `gh` 会自动支持作者）
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
bin/setup.js:93 const response = await fetch(`${instanceUrl}/services/data/`, {Mcp Salesforce (MCP server)
Compatibility: Not stated.
A **Model Context Protocol (MCP) server** that provides seamless integration with Salesforce using OAuth authentication.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:258 - Ubuntu/Debian: `sudo apt-get install -y podman` or `curl -fsSL https://get.docker.com | sh`Mcp Server Code Execution Mode (MCP server)
Compatibility: Not stated.
An MCP server that executes Python code in isolated rootless containers with optional MCP server proxying.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/CONTRIBUTING.md:38 curl -fsSL https://elastic.co/start-local | shMcp Server Elasticsearch (MCP server)
Compatibility: Not stated.
Public repository elastic/mcp-server-elasticsearch.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/security/supply-chain.md:117 ta to get the exact same Node version: `curl https://get.volta.sh | bash`.Mcp Server For Iso27001 (MCP server)
Compatibility: Not stated.
**Turn Claude into an ISO 27001 compliance assistant** , controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/appportal/synology_reverse_proxy.py:232 "hsts": bool(https.get("hsts", False)),Mcp Server Synology (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server for Synology NAS devices.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_RUNS_ENCODED_PAYLOAD
packages/mcp-server/src/tools/database.ts:207 // Payload is JSON-encoded in the eval (see above) - decode it hMcp Server Zotero Dev (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
