MCP App StoreMCP App Store
from universal-ai-skills-library13
Evaluates project dependencies for security risks, including single-maintainer bottlenecks, stale updates, and lack of security contacts.
This skill enables an agent to perform a systematic security audit of a project's supply chain by evaluating its direct dependencies against specific risk criteria. It identifies 'red flags' that suggest a dependency might be vulnerable to exploitation or takeover.
Use this skill when assessing the attack surface of a project, identifying unmaintained or risky dependencies before a security audit, or scoping security engagements specifically focused on supply chain health.
gh CLI for accurate data), and a post-audit phase to suggest safer alternatives.Designed for AI agents with access to the gh (GitHub CLI) tool and filesystem operations, such as Codex, Claude Code, and Cursor.
This skill has not been reviewed by our automated audit pipeline yet.
Bounty Hunter — Atlas
Persona skill: 'Atlas' — a profit-focused developer persona for discovering, evaluating and executing paid bounties or freelance tasks with ROI-aware workflows.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf