MCP App StoreMCP App Store
from claude-code280
Run on-demand security, dependency and code-quality audits to find vulnerabilities, exposed secrets, and maintainability issues.
The Audit skill performs comprehensive on-demand security and code-quality scans across a codebase. It combines static analysis, dependency checks, secret scanning, and simple metrics (complexity, duplication, LOC) to produce a prioritized report of Critical/High/Medium/Low findings and remediation guidance.
Use before deployments, during security reviews, or as a CI check: run a full audit (OWASP-focused), dependency-only scans, secret-only scans, or targeted audits for specific directories or files. Ideal for pre-release checks and triaging technical debt.
This skill is authoring-agnostic but maps well to developer-focused agents and code-analysis plugins (Claude Code, Codex-style assistants, GitHub Actions integrations).
This skill has not been reviewed by our automated audit pipeline yet.
Performance Correlation (SEO)
Correlates GA4 and GSC metrics with content changes to identify drivers of performance and generate testable optimization hypotheses.
OpenRouter — Trending Programming Models
Fetch the current top programming models from OpenRouter (weekly), including model IDs, context windows, pricing and usage stats to help choose and compare mode
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Spring Boot Migration
Guided, phased migration for existing Spring Boot apps to Boot 4 / Java 25 (including Modulith 2 and Testcontainers 2), with scanners and reference guides.
Java 25 & Spring Boot 4 Code Reviewer
Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an
ArcKit — French Public Procurement (fr-marche-public)
Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d
ArcKit Architecture Conformance
Run a systematic architecture conformance assessment that compares ADRs and principles against HLD/DLD artifacts to surface drift, violations, and technical deb
Vibe Security Auditor
Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.
Speak Security Basics
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy
RemoFirst — Core Workflow A
Onboarding workflow for RemoFirst: create employee records, upload compliance documents, and track country-specific onboarding status.