MCP App StoreMCP App StoreSKILL.md packages that extend Claude Code, Cursor, Copilot, and other AI agents.
Tags
deep-recon
Orchestrate parallel multi-agent reconnaissance rounds to explore a topic deeply and produce a structured recon document (vault/Obsidian friendly).
claude-bughunter
A five-phase bug-hunting workflow and critical-thinking playbook that orients security hunting sessions, maps steps from recon to report, and enforces quality g
CTF Skills Collection
Comprehensive web-exploitation playbook for CTFs: XSS, SQLi, SSTI, SSRF, XXE, JWT abuse, auth bypass, file upload chains, and web-related reconnaissance.
osint-ai
Turn an LLM into an OSINT analyst: generate advanced search queries, run recon pivots, build timelines, and produce structured intelligence reports using browse
osint-ai
Comprehensive OSINT playbook for agents: generates dorks, runs recon, builds timelines, analyzes metadata, and produces structured intelligence reports while re
aboutsecurity
High-speed, stateless subdomain brute-force and verification using ksubdomain; optimized for large-scale discovery and validation where raw-socket performance a
cti-expert
Comprehensive CTI/OSINT analyst skill that turns an agent into a multi-technique investigator for domain, email, username, phone, and image forensics without pa
guardian-cli
An AI-driven, production-ready CLI that automates authorized penetration testing workflows, orchestrating planner, tool, analyst and reporter agents to produce
decepticon
Directory, vhost and API enumeration hub with CMS scanning, WAF detection, auth mapping and cookie auditing — a reconnaissance orchestration skillset.
claude-bughunter
Enumerate and assess on-prem Microsoft SharePoint servers for version disclosure, anonymous endpoints, legacy SOAP login abuse, ToolShell preconditions (CVE-202
supergoal
Plan and autonomously execute end-to-end software tasks with a single ready-to-paste /goal, phase decomposition, and built-in retry + audit recovery.
TerminalSkills Skills Library
Automate penetration testing workflows by orchestrating security tools (nmap, subfinder, nuclei, sqlmap) with AI agents to find, prove, and report web applicati