MCP App StoreMCP App Store
from Keygraph Shannon39
Autonomous AI-driven pentesting tool for web apps and APIs. Performs real exploits to prove vulnerabilities with high success rates.
Shannon is an advanced, Docker-based autonomous pentesting agent that performs white-box security assessments. Unlike passive scanners, Shannon analyzes source code to identify attack vectors and then executes actual exploits to validate vulnerabilities, significantly reducing false positives.
Trigger this skill when you need a rigorous security audit of a web application or API in a local or staging environment. It is ideal for proving the impact of a vulnerability through a working Proof-of-Concept (PoC).
Requires agents capable of managing Docker containers and executing complex Bash workflows, such as Claude Code.
This skill has not been reviewed by our automated audit pipeline yet.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sync Production Database to Development
Run a safe, scripted workflow to download production database dumps and restore them into a development environment (download-only and restore options).
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf