Search
GitHub Actions
Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.
GoldenWing-360
25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM coding failure modes (slopsquatting, hallucinated APIs, sycophancy), incident response, GDPR/DACH compliance. MIT, battle-tested.
...morecynative
Build your own security agents. Open-source framework for agents with live, read-only access to your infrastructure, with no path to widen it. Reasons across AWS, GCP, Azure, Kubernetes, GitHub and GitLab as one system.
...moresinewaveai
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
...moreGitHub Actions
TypeScript utilities for building LLM-optimized ESLint plugins - AST helpers, type utilities, security benchmarks, and SARIF output
...moremyarena
Deterministic security auditor for AI-built projects — Codebase Mode + URL Mode (offline-first, MIT).
Wagdy Saad <[email protected]>
[glama](https://glama.ai/mcp/servers/@msaad00/agent-bom) 🐍 🏠 ☁️ 🍎 🪟 🐧 - AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.
...morejustsouichi
Fast, private malware scanner for Node.js file uploads. TypeScript-first library with Express, Koa, Fastify, Next.js & Nuxt/Nitro adapters. Features deep ZIP inspection, YARA integration, ZIP bomb protection, and real-time threat detection. Zero cloud dep
...moresunnypatneedi
Secure Prompt Enforcement At Runtime - Defense-in-depth middleware for LLM security
neuralbridge-sdk-guigui
CCS v1.0 - Conformance Protocol for Agentic Runtime Systems
SkillTotal
Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.
cyproxio
MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
...morebackbond
Local deterministic security scanner for AI-agent tools, permissions, and traces.
hamzadenizyilmaz
Advanced firewall management library for Linux systems
contexthound
Developer-first prompt-injection scanner for CI and local use
open-cipher
Modern, fast penetration testing CLI — record browser interactions once, replay with security payloads, and find vulnerabilities like XSS and SQLi automatically. A lightweight, pluggable alternative to legacy security scanners.
...moreGeraldCrescione
Curated, vendor-neutral open-source tools, standards, benchmarks and labs for AI Security Engineering, organized by lifecycle (Discover, Design, Build, Break, Defend). From the AI Security Engineers Community.
...morebbconnor
Minimal Clawdstrike tool wrappers for LangChain tools
Correctover <[email protected]>
Cryptographic runtime receipts for MCP servers and clients — signed Ed25519 audit evidence for every tool call.