MCP App StoreMCP App Store
from vibehacking24
Advanced workflow for inspecting HTTP traffic, sitemaps, and WebSockets using Caido MCP tools for security analysis.
This skill enables an agent to interface with a running Caido instance via MCP tools to perform professional web security analysis. It focuses on an evidence-driven workflow: discovering traffic, narrowing results via HTTPQL, and extracting specific fragments using regex excerpts to avoid token leakage and noise.
Activate this skill when performing security audits, API fuzzing, or traffic analysis. It is particularly useful for triaging authentication headers, session cookies, and identifying IDOR vulnerabilities by comparing request IDs.
regex_excerpt for precise evidence extraction.Any agent supporting the Model Context Protocol (MCP) with the Vibe Hacking MCP plugin installed, such as Claude Desktop or other MCP-compatible hosts.
This skill has not been reviewed by our automated audit pipeline yet.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
Ip2Location IO Automation (Composio)
Automate Ip2location IO tasks via Composio's Rube MCP toolkit — discover tools, verify connections, and execute schema-compliant workflows safely.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Smalltalk MCP
Connects an LLM (Claude/OpenAI/etc.) to a live Smalltalk (Squeak/Cuis) image over MCP for browsing, evaluating and modifying Smalltalk code.
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r