MCP App StoreMCP App Store
from marketplace360
Static pre-install security and provenance scanner for SKILL.md packages and marketplace listings.
Performs a static review of a SKILL.md or marketplace package before installation. It identifies risky patterns such as shell execution, environment/secret access, network calls, persistent jobs, and requests to override agent priorities, then emits findings and suggested fixes. The tool can run in a marketplace-safe stdin mode to avoid filesystem or network access.
Use this before installing or recommending third-party agent skills from marketplaces, GitHub repos, or MCP-linked bundles — especially when a skill requests filesystem, network, or privileged access. It's ideal for marketplace curators, security reviewers, and automated vetting pipelines.
Compatible with Node-based agent runtimes and common agent platforms listed by the author (Claude Code, Codex CLI, Cursor, Gemini CLI, OpenClaw).
This skill has not been reviewed by our automated audit pipeline yet.
Minimal Run & Audit (repro reporting)
Execute a README-first smoke test and produce standardized reproducibility outputs (`repro_outputs/`) and PATCHES.md — trusted reporting for repo reproduction r
Humanize AI Text
Rewrite AI-generated text into more natural, human-like prose using the HumanizerAI API, with before/after scores and credit tracking.
WP-Migrate — WordPress Migration Skill
Guides WordPress site migration and deployment using wp-migrate.sh: push/archive migrations, rollback, dry-runs, and automation-friendly flows for CI/CD.
SOP: Code Review Workflow
Structured 4-hour SOP for comprehensive code review: automated checks, specialized parallel reviews (quality, security, perf, architecture, docs), integration a
Obsidian CLI
Control and automate an Obsidian vault from the command line: read, create, search, update notes and developer workflows (reload plugins, run JS, screenshot, DO
MatchMS — Mass Spectrometry Utilities
Import, process and compare mass spectrometry spectra (mzML/MGF/MSP) with filters, similarity metrics and reproducible pipelines for metabolomics workflows.
Raindrop.io Bookmark Management
Save, organize, search, and manage Raindrop.io bookmarks and reading lists via natural language and MCP tools.
Configuring tmux — status bars, plugins & widgets
Guides setup and troubleshooting of tmux status bars, frameworks (oh-my-tmux/Catppuccin/tmux-powerline), plugin installation, and widget scripts (weather, finan
Seedance 2.0 Motion Graphics Prompt Generator
Generate 15s motion-graphics prompts for Seedance 2.0 (4 aesthetic styles), with reference-image placeholders and optional Dreamina CLI integration.
Colorize
Add strategic, accessible color to monochromatic interfaces to improve hierarchy, meaning, and visual engagement without sacrificing accessibility.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Code Spec Backfill
Identify missing function-level contracts and backfill docstrings and type annotations; report ambiguous gaps with misuse scenarios. Incremental, state-driven w
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf