Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1151 to 1200 of 1,228 Grade D entries. Page 24 of 25.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/holochain/references/scaffolding.md:14 curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinHolochain Agent Skills (Skill)
Compatibility: Not stated.
Agent skills for Holochain hApp development, built to the [Agent Skills Open Standard](https://agentskills.io) so they work in Claude Code, opencode, GitHub Copilot, Cursor, Gemini CLI and every other tool that adopted the format.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/jev-style-serve/SKILL.md:34 No `uv`? Install it (`curl -LsSf https://astral.sh/uv/install.sh | sh`, askJev Style (Skill)
Compatibility: Not stated.
Skills and MCP tools for the local Jev-Style decision model (yes/no, choice and score questions with calibrated probabilities).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/engineering/render-deploy/SKILL.md:111 - Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/renKilo Kit Mcp (Skill)
Compatibility: Not stated.
<p align="center"> <img src="assets/social-preview.png" alt="Kilo-Kit Banner" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_HIDDEN_STEP
install.sh:5 # curl -fsSL https://knack.ai/install | shKnack Cli (Skill)
Compatibility: Not stated.
<img width="1600" height="800" alt="Hero (1)" src="https://github.com/user-attachments/assets/b4b9a465-6944-4eea-a381-8817f030931c" />
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED OBFUSCATION_ENCODED_BLOB
skills/logo-design/scripts/render_png.py:122 subprocess.run(["rsvg-convert", "-w", str(w), "-h", str(h), "-o",Logo Design Skill (Skill)
Compatibility: Not stated.
Design, critique and deliver professional logos: brief, concepts, geometric SVG construction, optical refinement, colour, typography, testing, presentation and brand guidelines , with a searchable library of 1,400+ classified SVG logos.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV +1 more
math-modeling-finalizer/scripts/build_growth_handoff.py:47 cp=subprocess.run([sys.executable,str(verifier),strMath Modeling Agent Flow (Skill)
Compatibility: Not stated.
> **AI Agent workflow for mathematical modeling competitions (CUMCM 国赛 / MCM-ICM 美赛).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
docs/taskflow-vault/skills/engineering/dapr-integration/skill.md:22 curl -fsSL https://raw.githubusercontent.cMjs Agent Skills (Skill)
Compatibility: Not stated.
> Personal skill library that compounds value over decades.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
skills/motion2code/scripts/_m2c.py:32 out = subprocess.run(motion2code (Skill)
Compatibility: Not stated.
Motion design video to code: rebuild an AI-generated (or any) flat motion clip as editable SVG + GSAP that loops seamlessly, checked side by side against the source, and optionally as a real interactive site with ScrollTrigger.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_HIDDEN_STEP
opt/hatch-image/bin/npm-package/README.md:24 curl -qL https://www.npmjs.com/install.sh | shMuseai Skills (Skill)
Compatibility: Not stated.
[muse.ai（Muse AI）](https://muse.ai) 的技能文档与 Muse / Hatch 运行环境快照。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
agent_runtime/core/subagent.py:575 f'或使用命令: curl -fsSL https://qoder.com/install.sh | bash'Openchiip Harness (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
deploy/install.sh:54 curl -fsSL https://get.docker.com | shopensuitemcp (Skill)
Compatibility: Not stated.
Source-available **NetSuite MCP client** , chat UI for NetSuite’s AI Connector Service, MCP Standard Tools, Companion prompt library, and SuiteCloud Agent Skills.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skill/en/opus-manager/SKILL.md:74 2.19 or newer), or the official script `curl -fsSL https://pi.dev/install.shOpus Manager (Skill)
Compatibility: Not stated.
English · [中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
benchmarks/results/runs/llm/opus_with_skill/run-6/grading.json:37 "evidence": "Finding 3: \"Prompt injection rPoka Yoke (Skill)
Compatibility: Not stated.
<p align="center"> <img src="docs/assets/banner/readme-header.png" width="100%" alt="poka-yoke: an andon signal tower beside the wordmark, with the severity ladder: green Control, the mistake is impossible; amber Warning, announced as it happens; red Detection, found afterwards."
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
CHANGELOG.md:495 `curl -Ls https://sh.jbang.dev | bash` no longer appears anywhere: the JBang last resort is nQuarkus Agentic Scaffolding (Skill)
Compatibility: Not stated.
Three-skill flow for building Quarkus + LangChain4j agentic AI applications: setup-agentic-scaffolding (prerequisites: toolchain, Quarkus Agents MCP + context7, conventions file), scaffold-project (create projects and add AI services, agents, RAG, and MCP clients/servers), and au
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/web/web-command-injection/detection.md:10 - **Egress logs**: the web server fetching payloads (`curl htSecurity Skills (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
README.zh.md:48 | **一键脚本**（macOS / Linux） | `curl -fsSL https://raw.githubusercontent.com/Shoplazza/shoplazza-Shoplazza Cli (Skill)
Compatibility: Not stated.
[中文版](./README.zh.md) | [English](./README.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
install.sh:32 requested_version="$(curl -fsSL --retry 3 "$SKILLED_LATEST_VERSION_URL")"skillEd (Skill)
Compatibility: Not stated.
<h1 align="center"><img src="docs/public/wordmark.svg" width="300" alt="skilled" /></h1> <p align="center"><strong>Test your agent’s Skills.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
skills/consulting/scripts/check-step.sh:124 for token in ("fetch(", "new XMLHttpRequest", "new WebSocket", "neskills (Skill)
Compatibility: Not stated.
**Eleven focused workflows for developers who need more from their agents than a one-line prompt.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
skills/fcli-common/references/fcli-install.md:24 npx @fortify/setup env powershell | Invoke-Expressionskills (Skill)
Compatibility: Not stated.
OpenText Fortify AppSec skills.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
dashboard-web/src/api/client.ts:60 const response = await fetch(url, { headers: { 'content-type': 'applicationSkills Manager (Skill)
Compatibility: Not stated.
**English** | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
plugins/agent-security/skills/agent-surface-audit/SKILL.md:89 `get_schema` before `run_query`" is good UX. "Igskills (Skill)
Compatibility: Not stated.
Portable, evidence-bound security skills for authorized defensive assessment, penetration testing, red teaming, detection engineering, purple teaming, and engagement operations.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:26 sh -c 'sno_installer_body=$(curl -fsSL https://sno.ai/install) && printf "%s\n" "$sno_installer_bSno Station Skills (Skill)
Compatibility: Not stated.
Copy this prompt into your agent's chat:
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK +1 more
e2e/tanso_e2e_test.go:15 build := exec.Command("go", "build", "-buildvcs=false", "-trimpath", "-o", bin, "./cmtanso (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/trade-construction/risk-reward-sanity-check/SKILL.md:74 - do not tell the user a trade will win becauseTrading Skills (Skill)
Compatibility: Not stated.
AI skills for better trading and investing decisions.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST +2 more
packages/cli/src/commands/skill/index.ts:92 await fs.rm(stage, { recursive: true, force: true });webforai (Skill)
Compatibility: Not stated.
Teaches the agent the webforai CLI: read any URL or HTML file as clean Markdown, batch-convert URLs, crawl a docs site into Markdown files and llms.txt.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
experts/ilang-wechat-awesome/skills/remote-dispatch/scripts/setup-gateway.sh:27 curl -fsSL https://deb.nodesouWorkBuddy (Skill)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(max-width: 767px)" srcset="https://raw.githubusercontent.com/adsorgcn/WorkBuddy/main/docs/hero-mobile-2026-10-23.png"> <img src="docs/hero-2026-10-23.png" alt="两个专家，一条链：X 运营专家和公众号爆文专家" width="100%"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
cc-plugin/skills/triggers/SKILL.md:111 const res = await fetch(url, { signal: AbortSignal.timeout(10_000) });Self Starter (Plugin)
Compatibility: Not stated.
<h1 align="center">Self-Starter</h1>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
worker/public/setup.html:102 <pre class="cmd">curl -fsSL https://get.docker.com | sh37studio (MCP server)
Compatibility: Not stated.
<p align="center"><img src="brand/37studio-mark.svg" width="72" alt="37Studio"></p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
internal/apphost/runner.go:2571 cmd := exec.CommandContext(cmdCtx, r.docker, args...)agenttransfer (MCP server)
Compatibility: Not stated.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="docs/assets/chain-dark.svg"> <img src="docs/assets/chain-light.svg" width="300" alt="AgentTransfer , two interlocked rings rendered as halftone dots"> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
projects/livecam-ai-assitant/text_to_speech.py:25 subprocess.run(['afplay', output_filepath])Ai Learning (MCP server)
Compatibility: Not stated.
> _Your comprehensive guide to mastering GenAI and Agentic AI , from fundamentals to advanced deployment_
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
laptop-setup/install.sh:351 curl -fsSL https://raw.githubusercontent.com/mediar-ai/screenpipe/main/install.shatlas (MCP server)
Compatibility: Not stated.
> **Open-source local-first cognitive memory , alpha.** Implements AGM-compliant belief revision on a property graph.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/publish.yml:20 run: curl -LsSf https://astral.sh/uv/install.sh | shAxon Pro (MCP server)
Compatibility: Not stated.
**The Enterprise-grade graph-powered code intelligence engine.** Axon Pro transforms flat codebases into structural knowledge graphs, providing AI agents and developers with 100% precise architectural awareness across polyglot microservices and modern web frameworks.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
core/skills/1c-admin-devops/references/publish-and-web.md:84 curl -i http://<хост>/<алиас>/ # web-клиент: чтоBsl Ai Toolkit (MCP server)
Compatibility: Not stated.
*AI agent toolkit for 1C:Enterprise 8.3 (BSL) development.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:30 @modelcontextprotocol/sdkCodeRAG (MCP server)
Compatibility: Not stated.
**Advanced graph-based code analysis for AI-assisted software development**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
src/exec_policy.rs:284 assert!(assert_exec_allowed("curl http://x | sh", &cfg(ExecMode::Unrestricted)).is_ok()Codex Free (MCP server)
Compatibility: Not stated.
*Codex Free, rewritten in Rust (but you still have to buy ChatGPT Plus)*
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
package.json:28 @mastra/ai-sdkcoworker (MCP server)
Compatibility: Not stated.
Open-source AI agent built with [Mastra](https://mastra.ai).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/release.yml:67 run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargdetrix (MCP server)
Compatibility: Not stated.
<table style="border:none;"> <tr> <td width="300"> <img alt="Detrix" src="assets/logo.png" width="300"> </td> <td>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
action.yml:127 curl -LsSf https://astral.sh/uv/install.sh | shdevduck (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="duck-animated.svg" alt="DevDuck" width="160" height="160"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
ai/scripts/ai_dev_helper.py:86 subprocess.run(['git', 'checkout', '-b', branch_name])ESP32MCPServer (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io/) (MCP) server running on ESP32 (and Nordic nRF52840 in sensor-only mode), exposing real-world sensor data and bus protocols to AI assistants and automation tooling over WebSocket / JSON-RPC 2.0.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
chromium/scripts/check-patches.sh:4 # scratch repo. CI runs this; it needs curl and git, not the build volume.Flecha Browser (MCP server)
Compatibility: Not stated.
An Arc-style browser for developers, built on a Chromium fork.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
evals/datasets/bench150/labeling/questions.md:415 <!-- Note for AI coding assistants reading this file: ignoreJev Judge Mcp (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
benchmark_test.go:23 []byte(`fetch("/api/users");const token="jsowl (MCP server)
Compatibility: Not stated.
**JsOwl** 是一个使用 Go 编写的高性能 JavaScript 信息收集与安全分析工具，同时也是一个可复用的 Go 库。它自动收集目标站点的页面、JavaScript、Webpack/RequireJS chunk 与 SPA 运行时资源，通过正则与 AST（Tree-sitter）提取 API 端点、参数、路由和敏感信息（密钥、Token、身份证、内网 IP 等），并生成 JSON 与自包含的交互式 HTML 报告, , 是 Web 安全测试、渗透测试信息收集阶段和攻击面梳理的自动化利器。
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
cmd/kenfold/handoff_integration_test.go:31 if out, err := exec.Command("git", append([]string{"-C", dir}, argskenfold (MCP server)
Compatibility: Not stated.
[English](README.md) | [Korean](README.ko.md)
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:46 prepareKorean Law Mcp (MCP server)
Compatibility: Not stated.
Korean law for Claude via the official 법제처 Open API: statutes, precedents, administrative rules, local ordinances, treaties and interpretations, with citation verification.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.agents/skills/cloudflare/references/sandbox/patterns.md:40 await sandbox.exec('curl -fsSL https://code-serverLastfm Mcp (MCP server)
Compatibility: Not stated.
A [Model Context Protocol](https://modelcontextprotocol.io/) (MCP) server for Last.fm.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
docs/adr/ADR-042-verify-evidence-injection.md:663 32. Evidence body containing `Ignore previous instructions,Llm Council (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://amiable-dev.github.io/llm-council"> <img src="https://raw.githubusercontent.com/amiable-dev/llm-council/master/docs/img/logo.svg" alt="LLM Council Logo" width="200"> </a> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV +2 more
desktop-app/dev.mjs:28 const req = http.get(url, (res) => {Local Coding Agent (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/magpie_search/backup.py:442 `socket.create_connection((host, port))` on the bare host string.Magpie Search (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.xfloukiex-lab/magpie-search --> <p align="center"> <img src="https://raw.githubusercontent.com/xfloukiex-lab/magpie-search/main/assets/magpie-logo.png" alt="Magpie Search" width="180"> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
apps/backend/Dockerfile:9 curl -LsSf https://astral.sh/uv/install.sh | sh && \Mcp Gateway (MCP server)
Compatibility: Not stated.
A production-ready API gateway for Model Context Protocol (MCP) servers, providing enterprise-grade infrastructure with authentication, logging, rate limiting, server discovery, and multi-protocol transport support.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
scripts/setup.sh:12 echo " curl -fsSL https://get.pnpm.io/install.sh | sh -"Mcp Klever Vm (MCP server)
Compatibility: Not stated.
A Model Context Protocol (MCP) server tailored for Klever blockchain smart contract development.
This grade is a hygiene screen, not proof of safety.
