MCP App StoreMCP App Store
from joshft
Live adversarial red team assessment and goal-directed penetration testing.
A comprehensive skill for performing live adversarial red team assessments against running systems. Unlike standard vulnerability auditing, CredTeam focuses on goal-oriented penetration testing, mapping trust boundaries and exploiting "seams" between services, authentication layers, and tenants. It requires an isolated environment (localhost, private IP, or mesh network) and provides a structured approach to boundary mapping, attack execution, and reporting. The skill supports both solo and team-based attack strategies, emphasizing an attack narrative over a simple checklist of findings.
This skill has not been reviewed by our automated audit pipeline yet.
Correctless: Feature Specification (cspec)
Turn a feature idea into a structured, testable specification with configurable intensity, research, and STRIDE-backed invariants.
/credteam — Red Team Assessment
Goal-directed red team assessment skill for live systems with source-code access; enforces isolation and intensity gating before active testing.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf
AIML Spambot Benchmark (ISC)
Benchmark template for evaluating spam-detection models using anchored spam campaign examples (contains harmful anchoring content).