Statically audit MCP configs for mutable npm/npx package references before approval or CI, without executing discovered MCP servers.
Claude Skills Online Marketplace
Security
20 of 834
Secure Model Context Protocol (MCP) servers with transport encryption, tool authorization, input validation, and audit logging for safe AI agent integrations.
Meme coin and token security audit
Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for incident response and malware analysis.
⚠️ AUTHORIZED USE ONLY > This skill is for educational purposes or authorized security assessments only. > You must have explicit, written permission from the system owner before...
Microsoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions.
Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement
Authorized Android/iOS application reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection...
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns.
Microsoft 365 / Entra ID red-team attack chain
Authorized macOS and Mach-O reverse engineering: codesign inspection, Objective-C/Swift recovery, endpoint-security surfaces, and Apple-platform malware analysis.
Analyze suspected malware through static, dynamic, and behavioral techniques: IOC extraction, YARA/Sigma rule authoring, sandbox orchestration, and anti-analysis detection.
Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family...
Audit multi-role marketplace authorization across roles, resource ownership, tenant boundaries, and order-state transitions; use when access rules need evidence, not UI...
Authorized security assessment of LLM applications and AI agents: prompt injection, tool abuse, RAG exposure, memory poisoning, system-prompt extraction, and agent-compliance...
Implement Kubernetes security contexts, Pod Security Standards, and network policies.
Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.
Apply CIS benchmarks and secure Linux servers.
Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations, vulnerable services, and security weaknesses that allow elevation...
Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.