Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 251 to 300 of 3,335 Grade C entries. Page 6 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/infrastructure/client-roots.ts:20 this.cached = await this.fetch();Claude Jev (Plugin)
Compatibility: Not stated.
Ask TypeSafe's Jev model for calibrated judgements during code review, investigation and planning.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
README.md:118 curl -fsSL https://bun.sh/install | bashClaude Mem Sync (Plugin)
Compatibility: Not stated.
Team memory sharing for claude-mem , sync AI memories across developers, with Claude Code plugin, github action and knowledge distillation
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zcFsoQdv0" style="display:none">3QY3O73xyNro7tAX5dd+7n9+NXHNW9EaiyI364DzipzrGzsxv+GPoLGjClaude Minder (Plugin)
Compatibility: Not stated.
In the growing ecosystem of AI-assisted workflows, your Claude conversations accumulate like leaves in autumn, useful, beautiful, but eventually overwhelming without proper tending.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/oss-bootstrap/references/project-detection.md:65 - `*.env`, `*.pem`, `*.key`, `id_rsa`, `credentials*`,Claude Oss Skills (Skill)
Compatibility: Not stated.
A set of practical Claude Code runbooks for developing public open-source projects on resource-constrained hardware.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zBV6zBSC0" style="display:none">L6kkyH6AfISs3APbuNGorOlcIlgCwmMP022JZhHFJnAZtCjCfJA7/vWRClaude Plugin Fundraisers (Plugin)
Compatibility: Not stated.
An open-source, AI-native extension framework for the PayIt2 fundraising platform, enabling automated donor engagement, campaign optimization, and intelligent workflow orchestration through Claude-powered plugins.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:15 postinstallClaude Plugin Marketplace (Plugin)
Compatibility: Not stated.
Automated Claude plugin generator and marketplace publisher
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
agent-reliability/skills/production-autopsy/scripts/finalize.py:70 result = subprocess.run(Claude Plugins (Plugin)
Compatibility: Not stated.
The ByteStack Labs marketplace for Claude Code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
bin/claude-rem.js:600 fs.rmSync(out, { force: true });Claude Rem (Plugin)
Compatibility: Not stated.
A brain that remembers everything.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES OBFUSCATION_MINIFIED_PAYLOAD
hooks/hooks.py:322 out = subprocess.run(Claude Security (Plugin)
Compatibility: Claude Code.
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
api-security/SKILL.md:186 const r = await fetch(url);Claude Security Skills (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./assets/banner.png" alt="Claude Code Security Skills" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST +1 more
claude-connect/launch.ts:214 fs.unlinkSync(tmpCert);Claude Share (Plugin)
Compatibility: Not stated.
Securely share your Claude Code with your friends.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
commands/wiki-ingest.md:35 transcript = api.fetch('VIDEO_ID', languages=['ko', 'en', 'en-US'])Claude Skills (Plugin)
Compatibility: Not stated.
Research, career, finance, productivity and automation , 29 slash commands + 4 skills for Claude Code
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
skills/cold-email-drafter/draft_email.py:69 """Parse curl stdout defensively. Returns {} on any non-JSON (netwClaude Skills (Skill)
Compatibility: Not stated.
A small, curated collection of **[Agent Skills](https://docs.claude.com/en/docs/claude-code/skills)** for Claude Code (and any skill-compatible agent).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
skills/gh-cli/SKILL.md:21 curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd oClaude Ui Color Palette (Plugin)
Compatibility: Not stated.
Design color palettes, audit contrast, generate code, and sync to Figma, Penpot, Sketch, and Framer , powered by the UI Color Palette API
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:19 .credentials.jsonClaude Usage Tray (Plugin)
Compatibility: Not stated.
Privacy-first Windows tray monitor for Claude Code Pro/Max usage, showing 5-hour and 7-day limits, reset times, and stale-data status.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
hooks/format-on-edit.py:75 subprocess.run(cmd, capture_output=True, timeout=10)Claude Workflow V2 (Skill)
Compatibility: Not stated.
Universal Claude Code workflow plugin with agents, skills, hooks, and commands
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/article-optimizer/scripts/run_single_score.py:45 result = subprocess.run(Claude Writing Skills (Skill)
Compatibility: Not stated.
Claude Code skills for long-form content workflow: research collection via NotebookLM, multi-platform publishing via wechatsync, viral-score evaluation, single-article rewrite loops, and yt-dlp media helpers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:47 prepareclaude_plugin_realistic_cost (Plugin)
Compatibility: Not stated.
Estimate what a 100% human-driven engineering team (PM, EM, design, backend, frontend, QA, DevOps, security, data, tech writing) would have cost to produce the work in an AI coding session , as a terminal receipt, status line, or exported report.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
scripts/build-site.js:186 fs.rmSync(runtimeGraphPath, { force: true })claudemap (MCP server)
Compatibility: Not stated.
Welcome to...
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
api-designer/references/common-patterns.md:296 fetch('/api/v1/payments', {ClaudeSkills (Plugin)
Compatibility: Not stated.
Skills for Claude.ai and Claude Code
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
AGENTS.md:85 curl -s https://cld-flare-maxxing.abhiigatty.com/version.json | jq -r .commitCld Flare Maxxing (Plugin)
Compatibility: Not stated.
Claude Code and Codex plugin that audits, explains, and safely changes Cloudflare.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
scripts/scan-content.mjs:64 [/\biex\s*\(/i, 'PowerShell Invoke-Expression'],Clean Backend (Plugin)
Compatibility: Not stated.
Claude agent skill for production-hardening practices whenever you're designing, writing, or reviewing your backend code.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:14 id_rsaClever Comebacks (Plugin)
Compatibility: Not stated.
Generate a single-sentence clever comeback to a mean message at a chosen intensity tier , soft (playful), medium (cutting), heavy (savage), or trainwreck (unhinged).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +1 more
src/commands/init.ts:754 fs.rmSync(tmpDir, { recursive: true, force: true });cli (Skill)
Compatibility: Not stated.
Firecrawl CLI and agent skills: web search, scraping, crawling and browser interaction from your terminal or any coding agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:39 preparecli (Skill)
Compatibility: Not stated.
[简体中文](./README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
cmd/auth/login.go:484 return exec.Command(cmd, args...).Start()cli (Skill)
Compatibility: Not stated.
[中文版](./README.zh.md) | [English](./README.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
assets/mcp-bridge.mjs:134 try { raw = await readFile(join(home, "credentials.json"), "utf8"); }cli (MCP server)
Compatibility: Not stated.
<p align="center"> <h1 align="center">@sandbaseai/cli</h1> <p align="center"> <strong>Give your AI agent superpowers.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
cli_anything/zotero/core/discovery.py:73 process = subprocess.Popen(launch_command, stdout=subprocess.DEVNULL,Cli Anything Zotero (MCP server)
Compatibility: Not stated.
**Let AI manage your Zotero library.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
cli2skill/mcp2skill.py:61 proc = subprocess.Popen(cli2skill (Skill)
Compatibility: Not stated.
Turn any CLI or MCP server into an Agent Skill.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
packages/clickhouse-best-practices-build/src/check-external-links.ts:116 let response = await fetch(url, {Clickhouse Best Practices (Plugin)
Compatibility: Portable across standard formats.
28 best practice rules for ClickHouse schema design, query optimization, and data ingestion , prioritized by impact
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:102 @cyanheads/mcp-ts-coreClinicaltrialsgov Mcp Server (MCP server)
Compatibility: Not stated.
Search ClinicalTrials.gov trials, retrieve study details and results, and match patients to candidate trials via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
.agents/skills/ai-agent-security-llm-threats/SKILL.md:117 subprocess.run(["kubectl", "scale", f"deploy/{model_Cloud Platform Skills (Skill)
Compatibility: Not stated.
43 production-grade, evaluated engineering skills for **Cloud, Platform, SRE, Security and FinOps** work , portable across every major AI coding agent, and usable by humans as runbooks, ADRs and SOPs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
server.py:10 CREDENTIALS_FILE = os.path.join(CONFIG_DIR, "credentials.json")cloud.agentdomain/agentdomain-mcp (MCP server)
Compatibility: Not stated.
Register and manage internet domains for AI agents via AgentDomain
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
pkg/aliyun/1203_oss_bucket_only_upload_images.go:132 Request.Body.Code.ZipFile = tea.String("UEsDBBQACAAIANS6hcloudsword (MCP server)
Compatibility: Not stated.
一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
install.sh:50 VERSION=$(curl -fsSL "https://api.github.com/repos/${REPO}/releases/latest" | grep '"tag_name":'Clov Ai (MCP server)
Compatibility: Not stated.
</br>[](#) [](#) [](#)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:12 prepareco.churnkey/churnkey (MCP server)
Compatibility: Not stated.
Read and manage Churnkey cancel flows, retention metrics, and payment recovery
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/build_release.py:46 result = subprocess.run(Code Ontology Companion (Plugin)
Compatibility: Not stated.
Map Java, Spring, and Python repositories into local code knowledge graphs for architecture and change-impact analysis.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED OBFUSCATION_ENCODED_BLOB
package.json:11 @atxp/commonCode Sandbox API (MCP server)
Compatibility: Not stated.
Execute Python, JavaScript, or SQL in a sandbox.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
plugins/code80-image/src/platform.ts:28 credentialsFile: path.join(root, "credentials.json"),Code80 Image (Plugin)
Compatibility: Not stated.
Codex plugin for Code80 GPT/Grok image generation, editing, and batch workflows
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
benchmark/test_cli.py:52 result = subprocess.run(cmd, capture_output=True, text=True, cwd=cwd)codeindex (MCP server)
Compatibility: Not stated.
**Temporal code knowledge graph** with blast-radius impact scoring, semantic symbol search, and git-history-aware dependency analysis , for AI-assisted development.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
.cursor/rules/test-coverage-requirements.mdc:250 current_tests = int(subprocess.check_output(codeprism (MCP server)
Compatibility: Not stated.
> **⚠️ IMPORTANT: This project is entirely AI-generated.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
src/telemetry.ts:210 const response = await fetch(`${AXIOM_INGEST_URL}/${encodeURIComponent(dataset)}/ingest`,CodeQR (MCP server)
Compatibility: Not stated.
Remote MCP server for [CodeQR](https://codeqr.io) with OAuth 2.0 authentication.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
codex-project-plugin-suite/plugins/security-release-review/skills/security-release-review/scripts/security_audCodex 13 Plugin Suite (Plugin)
Compatibility: Not stated.
不是让小白变成程序员，而是让小白能把项目流程说清楚。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/install_skill.py:43 shutil.rmtree(path)Codex Agent Orchestration Skill (Skill)
Compatibility: Not stated.
This repository now ships two independent Codex skills:
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
parity/tools/generate_parity.py:343 result = subprocess.run(Codex Ai Game Studio (Plugin)
Compatibility: Not stated.
Codex AI game studio: 85 skills, 163 curated tools, Unity/Godot/Unreal/Blender workflows, img2threejs, reversible automation, and visual QA.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:8 credentials.jsonCodex Automation Audit (Skill)
Compatibility: Not stated.
Audit recent Codex automation and personal skill runs, compare task behavior with prompts and local docs, then prepare numbered patch-ready recommendations without changing files during the scheduled run.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
plugins/codex-base/skills/improve/runtime/git_worktree.py:25 result = subprocess.run(argv, cwd=cwd, env=env, iCodex Base (Plugin)
Compatibility: Not stated.
Our team's evolving Codex harness for planning, execution, and review.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/codex-binder-lane/skills/codex-binder-lane/scripts/campaign_overlay.py:774 shutil.rmtree(temporary, igCodex Binder Lane (Plugin)
Compatibility: Not stated.
Plan and design binders in Codex: pick target sites, tools and comp bio budget, then get your structures and sequences.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/codex/scripts/app-server-broker.mjs:110 fs.unlinkSync(listenTarget.path);Codex Claude Companion (Plugin)
Compatibility: Not stated.
Codex-native Claude review plugin for read-only, evidence-cited Opus review lanes.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
openclaw_codex_mcp/admin.py:113 process = subprocess.run(Codex Control Plane Mcp (MCP server)
Compatibility: Not stated.
English | [Русский](README.ru.md)
This grade is a hygiene screen, not proof of safety.
