MCP App StoreMCP App Store
from marketplace378
Automate professional red teaming and bug bounty workflows, from subdomain enumeration to vulnerability discovery.
This skill equips an agent with the methodologies and tool-chains used by top security researchers. It transforms the agent into a reconnaissance and vulnerability discovery engine capable of systematically mapping attack surfaces.
Use this skill when you need to perform bug bounty hunting, automate reconnaissance, hunt for XSS vulnerabilities, enumerate subdomains, or apply professional red team methodologies to a target scope.
Claude Code, Codex, and other AI agents with shell access and security tool installation capabilities.
This skill has not been reviewed by our automated audit pipeline yet.
Minimal Run & Audit (repro reporting)
Execute a README-first smoke test and produce standardized reproducibility outputs (`repro_outputs/`) and PATCHES.md — trusted reporting for repo reproduction r
Humanize AI Text
Rewrite AI-generated text into more natural, human-like prose using the HumanizerAI API, with before/after scores and credit tracking.
WP-Migrate — WordPress Migration Skill
Guides WordPress site migration and deployment using wp-migrate.sh: push/archive migrations, rollback, dry-runs, and automation-friendly flows for CI/CD.
SOP: Code Review Workflow
Structured 4-hour SOP for comprehensive code review: automated checks, specialized parallel reviews (quality, security, perf, architecture, docs), integration a
Obsidian CLI
Control and automate an Obsidian vault from the command line: read, create, search, update notes and developer workflows (reload plugins, run JS, screenshot, DO
MatchMS — Mass Spectrometry Utilities
Import, process and compare mass spectrometry spectra (mzML/MGF/MSP) with filters, similarity metrics and reproducible pipelines for metabolomics workflows.
Raindrop.io Bookmark Management
Save, organize, search, and manage Raindrop.io bookmarks and reading lists via natural language and MCP tools.
Configuring tmux — status bars, plugins & widgets
Guides setup and troubleshooting of tmux status bars, frameworks (oh-my-tmux/Catppuccin/tmux-powerline), plugin installation, and widget scripts (weather, finan
Seedance 2.0 Motion Graphics Prompt Generator
Generate 15s motion-graphics prompts for Seedance 2.0 (4 aesthetic styles), with reference-image placeholders and optional Dreamina CLI integration.
Colorize
Add strategic, accessible color to monochromatic interfaces to improve hierarchy, meaning, and visual engagement without sacrificing accessibility.
Bounty Hunter — Atlas
Persona skill: 'Atlas' — a profit-focused developer persona for discovering, evaluating and executing paid bounties or freelance tasks with ROI-aware workflows.
API Security Testing
Guided workflow for testing REST and GraphQL APIs: authentication, authorization, input validation, rate limiting, error handling, and common API vulnerabilitie
CTF Web Exploitation
Comprehensive web-exploitation playbook for CTFs: XSS, SQLi, SSTI, SSRF, XXE, JWT abuse, auth bypass, file upload chains, and web-related reconnaissance.
API Security Testing Workflow
A step-by-step workflow for testing REST and GraphQL APIs, covering authentication, authorization, input validation, rate limiting, GraphQL checks, and error-ha
Security Check
Performs a focused security audit of Ruby on Rails applications: auth/authz checks, parameter handling, query safety, output encoding, file handling, and secret
API Security Testing
A structured workflow for testing REST and GraphQL APIs covering discovery, authentication, authorization, input validation, rate limiting, and error handling.
Web Race Condition Tester
Send concurrent request bursts to detect TOCTOU, coupon reuse, double-spend and other web endpoint race conditions.
Kali Docker Pentesting
Provides a Kali Linux Docker container with 200+ penetration-testing tools and guidance for running scans, exploitation, and forensics via direct docker exec co