Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 3301 to 3335 of 3,335 Grade C entries. Page 67 of 67.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:42 preparePuremd Mcp (MCP server)
Compatibility: Not stated.
Welcome to the Model Context Protocol (MCP) server for [pure.md](https://pure.md).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
src/index.ts:68 async fetch(request: Request, env: Env): Promise<Response> {Resonant Mind (MCP server)
Compatibility: Not stated.
A Postgres-backed cognitive substrate for persistent AI memory, identity, dreams, drives, relationships, and continuity.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/http.ts:41 /** fetch() with redirects followed by hand so every hop is checked with assertPublicUrl. */Reverse Engineer Marketing (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
roampal/profile_manager.py:472 shutil.rmtree(resolved)Roampal Core (MCP server)
Compatibility: Not stated.
<h1 align="center">roampal-core</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
dl_2542df2.svg:12 @font-face{font-family:"Inter";src:url("data:font/woff2;base64,d09GMgABAAAAADYEABEAAAAAgLgAARoblox Studio Agent Bridge (MCP server)
Compatibility: Not stated.
Welcome to **Orbit Studio Forge**, an open-source companion daemon and browser-native command deck that turns Roblox Studio into a shared, conversational construction site.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
package.json:29 prepareRozklad Mcp (MCP server)
Compatibility: Not stated.
<h1 align="center">rozkład-mcp 🚆🚌</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +1 more
requirements.txt:1 fastembed>=0.3.0searchpin (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.telly6/searchpin -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
scripts/check-mcp-artifacts.py:43 child = subprocess.Popen(args, cwd=cwd, env=env)Sendmux Sdk (MCP server)
Compatibility: Not stated.
Official SDK, CLI, and MCP workspace for Sendmux.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_UNCONFIRMED
package.json:15 prepareShadcn Ui Mcp Server (MCP server)
Compatibility: Not stated.
MCP server for shadcn/ui component references
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL +1 more
deploy/aggiorna.sh:31 const res = await fetch(url, { method: "POST", headers });sharebox (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
scripts/deploy-site.mjs:9 const r = await fetch(url, { method, headers: H, body: body && JSON.stringify(body)Sheets Mcp (MCP server)
Compatibility: Not stated.
The power tool for Google Sheets in Claude.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:20 prepareShinzo Ts (MCP server)
Compatibility: Not stated.
<div align="center"> <a href="https://github.com/shinzo-labs/shinzo-ts"> <img src="https://github.com/user-attachments/assets/64f5e0ae-6924-41b1-b1da-1b22627e5c43" alt="Shinzo Logo" width="180" height="180"> </a> <h1 align="center"> Shinzo TypeScript SDK: Complete Observability f
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
package.json:35 prepareShodan Mcp Server (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that provides access to Shodan API functionality and CVE database, allowing AI assistants to query information about internet-connected devices, services, and vulnerabilities.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
requirements.txt:1 anthropic>=0.40.0Smart Study Agent (MCP server)
Compatibility: Not stated.
> The AI study agent that **learns how you learn** , a reinforcement-learning policy decides *what* you study next, an FSRS memory model decides *when* you review it, and an LLM generates the quizzes in between.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
SMARTTUNE_MCP_IMPLEMENTATION_PLAN.md:344 - `../../.ssh/id_rsa`Smarttune Cli (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/banner-hero.png" alt="SmartTune" width="100%" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +1 more
install.sh:45 VERSION=$(curl -fsSL "https://api.github.com/repos/$REPO/releases?per_page=100" \solos (MCP server)
Compatibility: Not stated.
<img src="docs/assets/soleebee-flying-kawaii.png" alt="Soleebee, the flying solOS robot bee mascot, holding a wrench" width="320" />
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
src/sonicproof/audio.py:116 out = subprocess.run(cmd, capture_output=True, check=False)sonicproof (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
internal/answers/answers.go:89 if body, err := c.fetch(ctx, VSPURL+"/vibpredmet/"); err != nil {Spbstu Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED
src/srclight/cli.py:991 return subprocess.run(srclight (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.srclight/srclight -->
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:11 prepareSvelte5 Mcp (MCP server)
Compatibility: Not stated.
A specialized Model Context Protocol (MCP) server for Svelte 5 frontend development
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
packages/mcp/scripts/check-generator.mjs:18 fs.rmSync(work, {recursive: true, force: true});Table Bro (MCP server)
Compatibility: Not stated.
Pixel-perfect Material data tables for Angular, and more.\ A Web Components table engine on top of existing UI components.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
client/tasogare.js:70 const res = await fetch(API + path, {tasogare (MCP server)
Compatibility: Not stated.
音音和克先生一起读书、一起批注的地方。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
apps/dashboard/components/ReportViewer.tsx:51 fetch("/api/reports")TCalc (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./assets/readme/hero.svg" width="100%" alt="TCalc measures local workspace tokens and turns them into model recommendations and agent-ready context"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
scripts/build_app.sh:294 command -v uv >/dev/null 2>&1 || die "'uv' was installed but isn't on PATH. Open a TeTintins Chess Analysis (MCP server)
Compatibility: Not stated.
A chess coach you can actually **talk to**, and one that **doesn't make things up**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
npm/tmux-mcp-rs/bin/tmux-mcp-rs.js:166 fs.rmSync(tmp, { force: true, recursive: true });Tmux Mcp (MCP server)
Compatibility: Not stated.
`tmux-mcp-rs` is a Model Context Protocol (MCP) server for tmux.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/viajante/booking.py:200 def fetch(viajante (MCP server)
Compatibility: Not stated.
<h1 align="center"> <img src="https://raw.githubusercontent.com/felipebasurto/viajante/main/docs/assets/viajante-hero.svg" alt="Viajante: flight and hotel search for your terminal, Python, and AI assistants.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
INSTALL_GUIDE.md:27 curl -fsSL https://tailscale.com/install.sh | shVibecoding Ultimate Starter (MCP server)
Compatibility: Not stated.
Setup vibe coding saya di Windows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:22 prepareWavescope Mcp (MCP server)
Compatibility: Not stated.
Wavelet-based multi-resolution context management for LLMs via MCP.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED SECRETS_PATH_DOTENV
package.json:9 postinstallweb2mcp (MCP server)
Compatibility: Not stated.
A system that automatically generates expressive Model Context Protocol (MCP) implementations for any web application (SaaS or consumer-facing).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
README.md:156 | Environment variables | `.env` file or process environment | Prefix `WA_`; recommended for DocWhatsapp Mcp Server (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/WhistleClient.ts:42 const response = await this.http.get("/cgi-bin/rules/list");Whistle Mcp (MCP server)
Compatibility: Not stated.
English | [中文](README_CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:22 prepareWhois Mcp (MCP server)
Compatibility: Not stated.
[Model Context Protocol](https://modelcontextprotocol.io) server for whois lookups.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
.start-test.sh:163 if printf '%s' "$(curl --silent --noproxy '*' --max-time 2 "$url/api/health" 2>/dev/null ||Yolo Data (MCP server)
Compatibility: Not stated.
[English](README_EN.md) | 简体中文
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
server.js:693 maxResults: { type: "number", description: "Number of videos to fetch (default 50, max 50)" },Youtube Marketing Skills (MCP server)
Compatibility: Not stated.
**Build a YouTube personal brand with live channel data, AI-generated SEO, and organic-only growth strategy , no paid ads, no $99/month subscription.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
package.json:15 prepareZig Mcp Server (MCP server)
Compatibility: Not stated.
**Modern Zig AI 10x dev assistant with comprehensive build system support**
This grade is a hygiene screen, not proof of safety.
