MCP App StoreMCP App Store
from Anthropic Cybersecurity Skills9
Identify and exploit critical JWT vulnerabilities including algorithm confusion, 'none' bypass, and weak secret exploitation.
This skill provides a comprehensive framework for security agents to audit and test JSON Web Token (JWT) implementations. It focuses on breaking authentication and authorization by exploiting common misconfigurations in JWT libraries and server-side verification logic.
Use this skill during API security assessments, penetration tests of SSO systems, or when evaluating OAuth 2.0 and OpenID Connect implementations where JWTs are used for session management.
jwt_tool for automation.Designed for security-focused agents with terminal access (bash/python) and common security tools like Burp Suite and Hashcat.
This skill has not been reviewed by our automated audit pipeline yet.
API BOLA/IDOR Security Testing
Comprehensive guide for testing REST and GraphQL APIs for Broken Object Level Authorization (BOLA) and IDOR vulnerabilities.
SailPoint Identity Governance Implementation
Deploy and configure SailPoint IdentityNow or IdentityIQ for enterprise identity governance, lifecycle management, and compliance reporting.
Clerk Vue Patterns
Vue 3 integration patterns for Clerk: composables, router guards, and Pinia auth store integration.
Cognitive Accessibility Specialist
Audits content, forms and authentication flows for cognitive accessibility (WCAG 2.2 / COGA) and gives prioritized remediation and plain-language guidance.
Analyzing Ransomware Leak Site Intelligence
Collect and analyze ransomware data-leak site (DLS) postings to extract victim, group, sector, and timeline intelligence for threat hunting and risk assessment.
Anthropic Security Basics
Practical security practices for Anthropic Claude integrations: API key management, input validation, prompt-injection defenses, and output scanning.
Evaluating Threat Intelligence Platforms
Guides procurement, evaluation, and proof-of-concept testing for Threat Intelligence Platforms (MISP, OpenCTI, ThreatConnect, Anomali, EclecticIQ) based on inte
Security Research Meta-Methodology
A structured vulnerability research framework distilled from 5600+ security docs, covering web injection, deserialization, binary exploitation, domain pentest,
Performing Threat Modeling with OWASP Threat Dragon
Use OWASP Threat Dragon to create data-flow diagrams, apply STRIDE/LINDDUN threat classifications, and generate threat-model reports to guide secure design revi
Nuxt Users
Add and configure user authentication, authorization, database and CLI tools for Nuxt 3/4 apps using the nuxt-users module.