io.github.TranHoaiHung/figma-ui-mcp

Bidirectional Figma MCP — AI draws UI on Figma canvas, reads designs back

io.github.PurpleAILAB/Decepticon/docker-socket-mount

Docker / containerd socket mounted into a container → host RCE. Common in CI runners, GitOps controllers (ArgoCD, Flux), and 'Docker-in-Docker' setups. Single-command escape via `docker run --rm --privileged -v /:/host alpine chroot /host`.

io.github.PurpleAILAB/Decepticon/api

Modern API category — gRPC, SOAP/WSDL, WebSocket, Server-Sent Events. Routing skill: identify the API protocol from the response Content-Type or wire format, then load the matching sub-skill.

io.github.PurpleAILAB/Decepticon/server-sent-events

Server-Sent Events (SSE / EventSource) exploitation — origin abuse for cross-site streaming exfil, prompt-injection via SSE messages into LLM clients, retry-after token leak, fragmenting events to bypass content-type sniffers.

io.github.PurpleAILAB/Decepticon/websocket

WebSocket exploitation — origin-bypass (CSWSH cross-site WebSocket hijacking), missing per-message auth, message-type confusion, msg-flood DoS, ws→wss downgrade, hidden RPC routes in the WS frame layer.

io.github.PurpleAILAB/Decepticon/grpc

gRPC API exploitation — reflection-based discovery via grpcurl, protobuf fuzzing, missing authz on streaming RPCs, gRPC-Web → backend SSRF, mTLS bypass, metadata header injection, h2c smuggling against gRPC fronts.

io.github.PurpleAILAB/Decepticon/soap-wsdl

SOAP / WSDL exploitation — WSDL enumeration via ?wsdl, XXE in SOAP envelope, WS-Addressing replay, WS-Security UsernameToken brute, SAML token injection in WS-Trust, schema validation bypass.

dev.danielsuchan/eu261

EU261 flight delay compensation: check eligibility, compute EV, track fares. 6 tools, 35+ airports.

io.clawhub.hanningwang/mano-cua

Computer use for GUI automation tasks via VLA models. Use when the user describes a task in natural language that requires visual screen interaction and no A...

io.github.luongnv89/claude-howto/code-review-specialist

提供全面的代码审查能力，覆盖安全、性能和代码质量分析。适用于用户请求代码审查、代码质量评估、Pull Request 审查，或提到安全分析和性能优化时。

io.github.luongnv89/claude-howto/code-review-specialist

Комплексне код-рев'ю з аналізом безпеки, продуктивності та якості. Використовуйте, коли користувачі просять переглянути код, проаналізувати якість коду, оцінити pull request, або згадують код-рев'ю, аналіз безпеки чи оптимізацію продуктивності.

io.github.luongnv89/claude-howto/code-review-specialist

Review code toàn diện với phân tích bảo mật, hiệu suất, và chất lượng. Sử dụng khi người dùng yêu cầu review code, phân tích chất lượng code, đánh giá pull requests, hoặc đề cập đến review code, phân tích bảo mật, hoặc tối ưu hóa hiệu suất.

io.github.julysoft/cloudtime

MCP server providing attendance data queries via the CloudTime API.

io.github.djtellado/nexus-finance

Nexus Finance API — compliance audit, VaR/RWA risk, market quotes and case management.

io.github.DigbyO/colour-memory

Cultural color intelligence. Every colour anchored to a person, a year, and a consequence.

io.github.sathya-sankaran/mdshare

Free markdown sharing. Upload, get links, collaborate. No login needed.

io.github.shaozhengkun123/yarrow

I-Ching (周易) oracle: cast a hexagram, read classical commentary, get a reflection. Bilingual.

io.github.luongnv89/claude-howto/code-review-specialist

Comprehensive code review with security, performance, and quality analysis. Use when users ask to review code, analyze code quality, evaluate pull requests, or mention code review, security analysis, or performance optimization.

io.github.JcJamet/ia-qa-toolbox

130+ QA & dev tools for AI agents: prompt injection, RAG testing, VLM eval, guardrails. Free.

io.github.zhengyanglsun/iflow-search

MCP server for iFlow Search web search, image search, and URL fetch tools.

ai.butlerbrain/mcp

Persistent memory for AI assistants. Save once; recall from Claude, ChatGPT, or any MCP client.

ParaSure

vlatest

io.smithery.brendan.parasure

AI-native parametric insurance infrastructure. Live weather risk assessment via x402 (USDC on Solana). Full quote, bind, and settle protocol loop available in sandbox; live carrier integration in progress.

io.github.littlebearapps/outlook-assistant

Microsoft Outlook MCP server — 22 tools for email, calendar, contacts, and mailbox management.

io.github.maraventano/map

A subtractive MCP for agent commerce: read · pay · publish. Teacher, not butler.