MCP App StoreMCP App Store
from david-skills57
Performs read-only security audits of systems and projects for CVEs, breaches, and malicious packages with structured reporting.
This skill enables an agent to conduct a non-destructive, read-only security audit of a user's local environment. It specifically looks for exposure to known CVEs, supply-chain attacks (malicious packages), and other security advisories. The agent investigates installed versions of software, running processes, and configuration files to determine if a system is vulnerable.
Activate this skill when a user shares a security advisory, asks if they are affected by a specific breach or malware, or requests a general vulnerability scan of their machine (e.g., "Am I affected by the latest X vulnerability?").
Designed for agents with shell access (Bash) and file-system read capabilities, such as Claude Code, Codex, and other ACP-compatible harnesses.
This skill has not been reviewed by our automated audit pipeline yet.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf
Analyzing Ransomware Leak Site Intelligence
Collect and analyze ransomware data-leak site (DLS) posts to extract victim, group, sector and geographic trends for threat intelligence and proactive defense.