Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2201 to 2250 of 3,335 Grade C entries. Page 45 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:92 @cyanheads/mcp-ts-coreOpenstreetmap Mcp Server (MCP server)
Compatibility: Not stated.
Geocode, reverse geocode, and run Overpass spatial queries on OpenStreetMap data via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
plugins/security-engineer/skills/lib/orca_client.py:569 result = subprocess.run(Orca Skills (MCP server)
Compatibility: Not stated.
Skills and plugins to accelerate security workflows with the Orca Cloud Platform
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
claude/skills/outsystems-tenant-architecture/scripts/build.py:1034 """Warn when the page files cannot come froOutsystems Mcp (MCP server)
Compatibility: Not stated.
Distribution repo for the OutSystems MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
src/index.ts:543 async fetch(request: Request, env: unknown, ctx: ExecutionContext) {Painel Sintético Concorde (MCP server)
Compatibility: Not stated.
Servidor MCP remoto que expõe um painel de **787 personas sintéticas do consumidor bancário brasileiro** para qualquer Claude (Desktop, web, mobile) , para discovery de produtos bank e fintech.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:3 # Usage: curl -fsSL https://retent.dev/install | shRemembrallMCP (MCP server)
Compatibility: Not stated.
Whole-codebase knowledge for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:24 prepareScrapbox Cosense Mcp (MCP server)
Compatibility: Not stated.
Scrapbox/Cosense integration - read, search, create, and edit wiki pages
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
docs/docker-resilience.md:105 curl -fsSL https://get.docker.com | shSdr Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://github.com/sandraschi/sdr-mcp"><img src="https://img.shields.io/github/stars/sandraschi/sdr-mcp?style=flat-square&logo=github&color=7c5cfc" alt="GitHub stars"></a> <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-22c55e?styl
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
scripts/e2e.ts:37 fetch(`${BASE}${path}`, { method: 'POST', headers: { 'Content-Type': 'application/json', ...search2ai (MCP server)
Compatibility: Not stated.
**简体中文** · [English](README-EN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
requirements.txt:1 mcp>=1.8.0SmartDB_MCP (MCP server)
Compatibility: Not stated.
<img width="1023" height="270" alt="image" src="https://github.com/user-attachments/assets/4b282174-dd45-4edb-9de8-9b14e2c59a9e" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
cloud/worker.ts:67 const response = await fetch('https://oauth2.googleapis.com/token', {Substack Mcp (MCP server)
Compatibility: Not stated.
Safe creator operations for Substack: rich drafts, Notes, analytics, and consented subscribers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_UNCONFIRMED
package.json:20 prepareTaskwarrior Mcp (MCP server)
Compatibility: Not stated.
MCP server that wraps TaskWarrior command-line tool.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:30 prepareTauri Plugin Mcp (MCP server)
Compatibility: Not stated.
A Tauri plugin and MCP server that allow AI agents such as Cursor and Claude Code to interact with and debug your Tauri application through screenshots, DOM access, input simulation, and more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
api/src/analytics/meta-capi.service.ts:116 await axios.post(textbee (MCP server)
Compatibility: Not stated.
Send and receive SMS messages using your own Android phone - no Twilio, no per-message fees.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:11 preparetgcli (MCP server)
Compatibility: Not stated.
Telegram CLI for reading/searching messages, syncing archives, and sending or downloading files.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
README.md:89 2. If a default credential file (`USER_HOME/.tsurugidb/credentials.json`) exists, use it for authTsurugi Mcp Server (MCP server)
Compatibility: Not stated.
[Model Context Protocol](https://github.com/modelcontextprotocol) server to access [Tsurugi](https://github.com/project-tsurugi/tsurugidb).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
Build/post-llm-stats.php:110 fwrite(STDERR, "curl error: $err\n");Typo3 Mcp Server (MCP server)
Compatibility: Not stated.
This extension provides a Model Context Protocol (MCP) server implementation for TYPO3 that allows AI assistants to safely view and manipulate TYPO3 pages and records through TYPO3's workspace system.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
.claude/skills/unity-bridge/scripts/wait_compile.py:48 r = subprocess.run(cmd, capture_output=True, text=True,Unity AI Bridge (MCP server)
Compatibility: Not stated.
**[English](README.md)** | **[中文](README.zh-CN.md)**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
cli/src/lib/clean-plugin.ts:88 fs.rmSync(intermediate, { recursive: true, force: true });Unreal Mcp (MCP server)
Compatibility: Not stated.
<div align="center" width="100%">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
mcp-db/src/seeds/scripts/seed-runner.ts:197 const response = await fetch(urlObj.toString())Us Census Bureau Data Api Mcp (MCP server)
Compatibility: Not stated.
Bringing _official_ Census Bureau statistics to AI assistants everywhere.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:59 @base-ui/reactVecmo (MCP server)
Compatibility: Not stated.
A browser vector-motion editor that exports dependency-free runtime code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:21 prepareVectorize Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server implementation that integrates with [Vectorize](https://vectorize.io/) for advanced Vector retrieval and text extraction.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
src/tools/filesystem-tools.ts:1291 await fs.rm(item.validPath!, {Vulcan File Ops (MCP server)
Compatibility: Not stated.
# Vulcan File Ops MCP Server
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.ide/Dockerfile:15 curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/HEAD/install.sh | sh -swhois (MCP server)
Compatibility: Not stated.
[English](README_EN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
.gitignore:9 .envWwise Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="images/wwise_mcp_banner.png" width="100%" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.claude/hooks/session-start.sh:14 echo "session-start: mise is not installed. Add 'curl https://mise.run | sh'Zammad Mcp (MCP server)
Compatibility: Not stated.
An MCP server that connects AI assistants to Zammad, providing tools for managing tickets, users, organizations, attachments, and knowledge base content.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/zendesk_mcp_server/zendesk_client.py:282 with urllib.request.urlopen(req) as response:Zendesk Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol server for Zendesk.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
src/ZYC.Framework/Tab/TabItemViewFaultedEvent.cs:1 using ZYC.Framework.Abstractions.Tab;ZYC.Framework (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="./README.md">English</a> | <a href="./README.ja.md">日本語</a> | <a href="./README.zh-CN.md">简体中文</a> | <a href="./README.zh-TW.md">繁體中文</a> | <a href="./README.ko.md">한국어</a> | </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
packages/1password-cli-tools/lib/providers/npm.js:12 const npmrcPath = path.join(HOME_DIR, '.npmrc');1Password Ssh Setup (Skill)
Compatibility: Not stated.
Complete system for managing SSH keys and secrets using 1Password CLI with Pi integration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zDr2iExM0" style="display:none">ztjXR51JEiFgRRNVdX7R/LkJKDuzWtW5oQGwnAvD42z4xdtNn1lVWzkIAdvocate Mesh (Plugin)
Compatibility: Not stated.
**Revolutionizing Indian Legal Workflows with a Multi-Agent AI System , Built for Claude Code, Powered by 18 Specialized Legal Minds in Silicon**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/done-or-not/SKILL.md:151 | One-liner installer | `curl -fsSL https://raw.githubusercontent.com/mohamedzAgent Done Or Not (Skill)
Compatibility: Not stated.
Thin Claude Code plugin wrapper that wires proof-of-done Stop hook enforcement.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:33 prepareAgent Skills (Skill)
Compatibility: Not stated.
**English** | [简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/app/api-reference/page.tsx:141 curl <host>/api/skills/source-credibility-assessment/export?format=json > sAgent Skills Compendium (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/workflows/test-agent-scenarios.yml:36 curl -fsSL https://claude.ai/install.sh | bashAgent Skills (Skill)
Compatibility: Not stated.
Skills for working with Hookdeck Event Gateway (receive, queue, route, and deliver webhooks), Hookdeck Outpost (send webhooks and events to user-preferred destinations) and Hookdeck Inspect (free webhook test URLs: create one, wait for webhooks, and read what they sent).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
scripts/bootstrap.sh:26 if ! curl -fsSL --retry 3 "$url" | tar -xz -C "$tmp" 2>/dev/null; thenAgent Skills (Skill)
Compatibility: Not stated.
Skills I use with coding agents for engineering, design, writing, and media.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/harvest-my-likes/scripts/render_x_archive_markdown.mjs:93 const response = await fetch(url, {Agent Skills (Skill)
Compatibility: Not stated.
Brandon's personal skills, shared across machines and available to both Codex and Claude.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
evals/ab-1.0.2/raw/claude-sonnet-5-medium__candidate__getting-started.json:2 "text": "Getting Started\n\nFolloAgent Ste (Skill)
Compatibility: Not stated.
Write technical and agent-facing text in ASD-STE100 Simplified Technical English.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/white-paper-writing/blastum-docx/scripts/document.py:836 shutil.rmtree(self.temp_dir)agentskills (Skill)
Compatibility: Not stated.
Agent skills for Claude Code and other file-reading coding agents
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
skills/addons/system1-prefilter.laya-ctl.js:106 fs.unlinkSync(pidFile);Ai Dev Kit (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/ai-image-generation-studio/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Image Generator Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/ai-logo-maker/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Logo Maker Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/poster-design-studio/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Poster Maker Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
.agents/skills/extension-dev-skill/recipes/sys_http_request.md:131 | 使用 `fetch()` 或 `XMLHttpRequest` | 沙箱环境限制Ai Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/voice-cloning-studio/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Voice Cloning Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/voiceover-narration-studio/scripts/authorize.py:432 path = state_dir / "credentials.json"Ai Voiceover Generator Skill (Skill)
Compatibility: Not stated.
English | [简体中文](./README.zh-CN.md) | [日本語](./README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
examples/curl/capability-search.sh:8 curl -s -X POST "$BASE_URL/api/openapi/loadout/loadout_capabilities_searcAident Skill (Skill)
Compatibility: Not stated.
Connect Cursor and Grok Bot agents to 1,000+ tools across Gmail, Slack, Linear, Google Sheets, Notion, HubSpot, Firecrawl, Exa, Fal, and more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
skills/android-update-deps/scripts/review_prs.py:63 done = subprocess.run(["gh", *args], cwd=cwd, capture_outpAndroid Update Deps (Skill)
Compatibility: Not stated.
Safe, gated review & update of Android (Kotlin/Gradle) dependencies in a Gradle version catalog , detects updates, analyzes risk, and applies only after your confirmation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/apple-dash-docsets/scripts/dash_url_install.py:38 proc = subprocess.run(["open", url], check=False)Apple Dev Skills (Skill)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
skills/appstore-release/references/setup.md:47 credentials.jsonAppstore Release (Skill)
Compatibility: Not stated.
Ship an iOS app to App Store review end to end over the App Store Connect API , agent skills, an MCP server and a CLI around a readiness report and an idempotent pipeline.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zUGdRKQP0" style="display:none">6qomZYw9AbjBzaSXLkmOgHShBS9J6ON2U19OKkAHKH3ctypvji1GwpiAAudible Focus Lens (Plugin)
Compatibility: Not stated.
You know the feeling: you're deep in a debugging session, the solution is crystallizing in your mind, and then *ping* , a Slack notification, a calendar reminder, a YouTube playlist suddenly blasting through your concentration like a wrecking ball.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
skills/aur-rpc/SKILL.md:132 curl 'https://aur.archlinux.org/rpc/v5/search/neovim'Aur Skills (Skill)
Compatibility: Not stated.
> **[English](README.md) · [中文](README.zh.md)**
This grade is a hygiene screen, not proof of safety.
