MCP App StoreMCP App Store
from Awesome Omni Skill52
A read-only Kubernetes security audit toolkit for exporting resources, sanitizing metadata, and generating PSS/NSA-compliant reports.
Kube Audit Kit provides a standardized, scripted workflow for performing deep security audits of Kubernetes clusters. It operates strictly in read-only mode, ensuring no cluster state is modified while identifying security gaps, RBAC issues, and sensitive data leaks.
Use this skill when requested to perform a security review of a K8s cluster, audit a specific namespace, check for compliance with PSS/NSA standards, or analyze the risk of sensitive data exposure in ConfigMaps and Secrets.
export.py), sanitizing metadata (sanitize.py), grouping applications by topology (group_apps.py), and executing the final audit (audit.py).Designed for agents with shell access and Python execution capabilities, such as Claude Code, Codex, or any MCP-enabled agent with terminal tools.
Kube Audit Kit is a read-only Kubernetes security audit toolkit that exports cluster resources, sanitizes metadata, groups by application topology, and runs PSS/NSA-compliant security checks across workloads, RBAC, networking, and policies. Scripts are designed to run via `uv run` and fail standalone due to local import resolution (sys.path.append pattern). The skill is well-structured with a clear 4-step pipeline and comprehensive audit coverage, though the flat script layout and lack of references/ directory separation could be improved.
export.py uses subprocess.run with shell=True and user-provided context/namespace values — minor command injection surface if untrusted input is passed, though kubectl contexts/namespaces are typically admin-controlled. The `allowed-tools: Bash(export:*)` in frontmatter is overly broad. Scripts have good read-only design discipline and the SKILL.md includes proper security warnings about Secret data in output.
Reppo — AgentMind Publisher
Publish creative content to Moltbook and mint posts as on-chain pods on Reppo.ai (Base) to earn $REPPO through human voting.
Blender Build-Go (bgo)
Automate build → remove → install → enable → launch cycle for Blender extensions or add-ons to speed up iteration and CI workflows.
Brand Voice Consistency
Enforce consistent brand voice, tone, and vocabulary across marketing copy and customer-facing communications.
Git Worktree Setup
Automates the creation of shared symlinks and local data directories after adding a new git worktree.
PRD Generator for MÄÄK
Generate a focused, verifiable Product Requirements Document (PRD) for MÄÄK features — asks clarifying questions, sizes stories, and outputs PRD.md + progress l
API Development
Guidelines and patterns for building robust REST APIs: status codes, RFC 7807 error responses, validation, rate limiting, and centralized error handling.
Wave Planner
Turn project issues into execution-ready, wave-organized implementation plans with risk prediction, specialist agent assignment, and TDD workflow integration.
Aspire CLI
Concise guidance for using the .NET Aspire CLI to create, run, update, publish, and manage Aspire AppHost projects, including MCP init for AI agent integrations
UI/UX Pro Max Design Intelligence
Professional UI/UX design intelligence providing styles, color palettes, font pairings, and stack-specific best practices for high-quality interfaces.
Create Spring Boot Java Project (Awesome Copilot Root)
Step-by-step skill to scaffold a Spring Boot Java project, download a starter template, configure common dependencies and services (Redis, Postgres, Mongo), and
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Spring Boot Migration
Guided, phased migration for existing Spring Boot apps to Boot 4 / Java 25 (including Modulith 2 and Testcontainers 2), with scanners and reference guides.
Java 25 & Spring Boot 4 Code Reviewer
Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an
ArcKit — French Public Procurement (fr-marche-public)
Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d
ArcKit Architecture Conformance
Run a systematic architecture conformance assessment that compares ADRs and principles against HLD/DLD artifacts to surface drift, violations, and technical deb
Vibe Security Auditor
Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.
OpenShift Multi-Cluster Health Report
Generates consolidated health and resource reports across multiple OpenShift and Kubernetes clusters using the openshift-administration MCP server.
Speak Security Basics
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy