MCP App StoreMCP App Store
from trezor-suite1,019
Ensures generated code aligns with security headers and permissions policies, specifically for navigator object interactions.
This skill provides a rigorous framework for maintaining security header compliance within the Trezor Suite ecosystem. It ensures that any code generated or modified adheres to strict security constraints, preventing unsafe JavaScript execution (like eval) and managing the Permissions-Policy to restrict sensitive browser features.
Use this skill when modifying code that interacts with the navigator object, updating web security constants, or implementing new browser-based features that require specific hardware or API access (USB, Camera, Clipboard).
usb, camera, clipboard-write, and local-network-access.packages/suite-web/constants/webSecurityHeaders.ts and MDN documentation for Permissions Policy.Designed for agents operating within the Trezor Suite monorepo, likely using Codex or similar ACP-based harnesses with filesystem access.
This skill has not been reviewed by our automated audit pipeline yet.
Trezor Suite — Naming Conventions
Coding and naming conventions for Trezor Suite: guidance on variable, function, boolean, component names and project-specific conventions.
Skills & Code Style Contribution
Guidelines and workflows for proposing and contributing code style changes to the Trezor Suite repository.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
GRC & Compliance (ServiceNow)
Guides Governance, Risk & Compliance (GRC) work in ServiceNow: policies, controls, risk records, audits and ES5 script examples for automating GRC workflows.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf