mukul975/Anthropic-Cybersecurity-Skills
A comprehensive open-source library featuring 754 structured cybersecurity skills for AI agents, mapped to five industry frameworks to provide expert-level guidance.
Awesome MCP › Security & Reverse Engineering
BurtTheCoder/mcp-shodan
Shodan MCP Server exposes Shodan, the search engine that continuously scans and fingerprints internet-connected hosts, to MCP clients. Its tools group into several areas. Host and device intelligence looks up an IP address and returns the open ports, detected services, banners, software versions and geolocation Shodan has recorded, and searches the index by query to find hosts matching a fingerprint. DNS tools resolve names to addresses and perform reverse lookups. Vulnerability tooling queries the Shodan CVEDB for CVE records and CPE identifiers, so a version discovered during reconnaissance can be checked against known vulnerabilities in the same session. All tools return structured, formatted output intended to be read and combined rather than raw API JSON. The server is TypeScript, published on npm as @burtthecoder/mcp-shodan, and requires a Shodan API key supplied through the SHODAN_API_KEY environment variable; the README gives one-line install commands for Claude Code, Codex CLI, Gemini CLI and Claude Desktop, and it is listed in the MCP registry and on Smithery. The audience is security researchers and defenders doing external attack-surface work, where the natural workflow — look up a host, enumerate its services, check those versions for known vulnerabilities — maps directly onto successive tool calls.
https://github.com/BurtTheCoder/mcp-shodan
Also in Security & Reverse Engineering
NVIDIA/SkillSpector
NVIDIA security scanner for AI agent skills and MCP tooling that detects prompt injection, data exfiltration, MCP tool poisoning and least-privilege problems, and can itself be run as an MCP server inside agent sessions.
mrexodia/ida-pro-mcp
ida-pro-mcp is an MCP server for IDA Pro that enables advanced reverse engineering capabilities through MCP-based interactions and automation.
LaurieWired/GhidraMCP
GhidraMCP is an MCP server that integrates Ghidra's reverse engineering capabilities with MCP clients, enabling automated binary analysis and decompilation through large language models.
invariantlabs-ai/mcp-scan
MCP-Scan is a security tool that statically and dynamically scans and monitors Model Context Protocol (MCP) connections to detect and prevent vulnerabilities such as prompt injections, tool poisoning, and cross-origin escalations.
zinja-coder/jadx-ai-mcp
JADX-AI-MCP is a JADX plugin integrating Model Context Protocol to enable AI-powered live reverse engineering, vulnerability detection, and code analysis of Android APKs using large language models like Claude.
mariocandela/beelzebub
Beelzebub is a secure low-code honeypot framework leveraging large language models and the Model Context Protocol (MCP) to detect and analyze cyber attacks, including prompt injection attempts against LLM agents.
svnscha/mcp-windbg
mcp-windbg is a Model Context Protocol server that enables AI models to analyze Windows crash dumps using WinDBG through natural language interaction and command execution.