NPMscan MCP Plugin
Repository Index
47,133 repositories indexed
25–48 of 61 · Most stars
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
- agent-security
- ai-security
- llm-security
- mcp-security
Threat modeling for AI coding agents: point Claude Code, Codex or any agent at your repo and get an evidence-traced threat model. 36 architectures, 29 methods, MIT.
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
- agent-skills
- ai-security
- blue-team
- claude-code
Open source autonomous engineering harness in your cloud. One sandbox per task, no real secrets inside.
- agent-harness
- agent-sandbox
- agent-security
- agentic-coding
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
- ghidra
- llm-agent
- malware-analysis
- ollama
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Codex or Gemini needs you. Touch ID unlock.
Autonomous desktop intelligence with MCU Ultron persona, mood-aware workspace orchestration, cyber security sentry, and full PC control.
- aegnts
- ai
- jarvis
- jarvis-ai
In the midst of all the tools out there that you can possibly use to keep track of them. Here's a "shovel" that just works to try them all out.
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
Pure-Go SQL parser, formatter, linter and security scanner for 8 dialects. Zero-copy, race-free, with an LSP and MCP server.
Open-source agentic security operations platform:
- agentic-ai
- agentic-security
- agentic-workflow
- cyber-security
Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Audit and fix your Mac's security in one command. No agent, no signup, open source.
- cli
- compliance
- endpoint-security
- golang
CLI tool for running coding agents inside hardware-isolated microVMs
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
- action-proposals
- agentic-ai
- agents
- ai