1.NVIDIA / SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Ranked by Attention Score: stars gained over the last 7 complete days
19 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
Daemon to ban hosts that cause multiple authentication errors
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Dark Web OSINT Tool
Open-source agentic security operations platform:
Bandit is a tool designed to find common security issues in Python code.
Scapy: the Python-based interactive packet manipulation program & library.
A modular vulnerability scanner with automatic report generation capabilities.
Automated NoSQL database enumeration and web application exploitation tool.
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Infection Monkey - An open-source adversary emulation platform
:hammer: Manage your website via terminal
Open Source SIEM (Security Information and Event Management system).
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
A collection of fascinating and bizarre Censys Search Queries
Find exploit tool
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.