Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when auditing dependencies for known vulnerabilities, triaging package-manager audit findings, or assessing supply-chain risk in a new package. Use when personal data or privacy compliance (GDPR, CCPA) is involved.

source

在 SkillsMP 查看

hipaa-compliance

vmain

SkillSkillsMP

io.github.affaan-m/ECC/hipaa-compliance

HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.

source

在 SkillsMP 查看

mobile-security

vmain

SkillSkillsMP

io.github.transilienceai/communitytools/mobile-security

Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC, storage, crypto, signing), dynamic analysis (Frida/objection, TLS-pinning + root/jailbreak bypass, traffic interception), and privacy testing.

source

在 SkillsMP 查看

local-ai-agents

vmain

SkillSkillsMP

io.github.microsoft/ai-agents-for-beginners/local-ai-agents

Bumuo ng mga local-first AI agents na tumatakbo nang buong-buo sa isang developer workstation gamit ang Microsoft Foundry Local at Qwen function-calling models. Saklaw nito ang Small Language Models (SLMs), ang OpenAI-compatible na lokal na endpoint, sandboxed local tools, lokal na RAG gamit ang Chroma, lokal na MCP servers, hybrid cloud/local routing, at ang privacy/cost/offline trade-offs. Batay sa Lesson 17 ng AI Agents for Beginners. GAMITIN PARA SA: pagpapatakbo ng agent nang lokal, offline agent, on-device agent, Foundry Local, Qwen function calling, local tool calling, lokal na RAG, Chroma vector database, lokal na MCP server, privacy-preserving agent, hybrid local at cloud agent, small language model agent, engineering assistant sa aking makina. HUWAG GAMITIN PARA SA: pag-deploy ng mga agents sa cloud nang malakihan (gamitin ang deploying-scalable-agents / Lesson 16), paggawa ng iyong unang agent concept (Lesson 01), Foundry (cloud) hosted agents, GPU cluster / server-side inference provisioning.

source

在 SkillsMP 查看

local-ai-agents

vmain

SkillSkillsMP

io.github.microsoft/ai-agents-for-beginners/local-ai-agents

Build local-first AI agents wey dey run fully for developer workstation wit Microsoft Foundry Local and Qwen function-calling models. E cover Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG wit Chroma, local MCP servers, hybrid cloud/local routing, and di privacy/cost/offline trade-offs. E based on Lesson 17 of AI Agents for Beginners. USE FOR: run agent locally, offline agent, on-device agent, Foundry Local, Qwen function calling, local tool calling, local RAG, Chroma vector database, local MCP server, privacy-preserving agent, hybrid local and cloud agent, small language model agent, engineering assistant for my machine. DO NOT USE FOR: deploying agents to di cloud at scale (use deploying-scalable-agents / Lesson 16), building your first agent concept (Lesson 01), Foundry (cloud) hosted agents, GPU cluster / server-side inference provisioning.

source

在 SkillsMP 查看

local-ai-agents

vmain

SkillSkillsMP

io.github.microsoft/ai-agents-for-beginners/local-ai-agents

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the privacy/cost/offline trade-offs. Based on Lesson 17 of AI Agents for Beginners. USE FOR: run an agent locally, offline agent, on-device agent, Foundry Local, Qwen function calling, local tool calling, local RAG, Chroma vector database, local MCP server, privacy-preserving agent, hybrid local and cloud agent, small language model agent, engineering assistant on my machine. DO NOT USE FOR: deploying agents to the cloud at scale (use deploying-scalable-agents / Lesson 16), building your first agent concept (Lesson 01), Foundry (cloud) hosted agents, GPU cluster / server-side inference provisioning.

source

在 SkillsMP 查看

local-ai-agents

vmain

SkillSkillsMP

io.github.microsoft/ai-agents-for-beginners/local-ai-agents

source

在 SkillsMP 查看

review-swarm

vmain

SkillSkillsMP

io.github.sickn33/antigravity-awesome-skills/review-swarm

Parallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, security or privacy risks, performance or reliability issues, and contract or test coverage gaps. Use when the user asks for a review swarm, parallel review, diff review,...

source

在 SkillsMP 查看

automation-loop-designer

vmain

SkillSkillsMP

io.github.thinkwork-ai/thinkwork/automation-loop-designer

Design a ThinkWork Automation from a prompt by interviewing for goal, Space, trigger, verification, judge settings, stop guards, and privacy boundaries, then emit a reviewable AutomationDraft.

source

在 SkillsMP 查看

prediction-market-risk-review

vmain

SkillSkillsMP

io.github.affaan-m/ECC/prediction-market-risk-review

Review prediction-market, basket, oracle, and trading-agent workflows for compliance, safety, data-quality, privacy, and execution risk. Use before any workflow handles venue auth, user portfolio data, API keys, or trade planning.

source

在 SkillsMP 查看

mobile-analytics

vmain

SkillSkillsMP

io.github.FerroxLabs/wayland/mobile-analytics

Expert mobile analytics covering attribution tracking, funnel analysis, crash reporting integration, A/B testing frameworks, retention and cohort analysis, event taxonomy design, privacy-compliant data collection, real-time dashboards, and actionable metric strategies for iOS and Android applications. Use when the user asks about mobile analytics, mobile analytics best practices, or needs guidance on mobile analytics implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

source

在 SkillsMP 查看

twinmind-security-basics

vmain

SkillSkillsMP

io.github.jeremylongshore/claude-code-plugins-plus-skills/twinmind-security-basics

Security best practices for TwinMind: on-device audio processing, encrypted cloud backups, microphone permissions, and data privacy controls. Use when implementing security basics, or managing TwinMind meeting AI operations. Trigger with phrases like "twinmind security basics", "twinmind security basics".

source

在 SkillsMP 查看

speak-security-basics

vmain

SkillSkillsMP

io.github.jeremylongshore/claude-code-plugins-plus-skills/speak-security-basics

Security best practices for Speak API keys, audio data privacy, student data protection, and COPPA/FERPA compliance. Use when implementing security basics features, or troubleshooting Speak language learning integration issues. Trigger with phrases like "speak security basics", "speak security basics".

source

在 SkillsMP 查看

granola-security-basics

vmain

SkillSkillsMP

io.github.jeremylongshore/claude-code-plugins-plus-skills/granola-security-basics

Security and privacy configuration for Granola meeting data. Use when reviewing data handling practices, configuring encryption, ensuring SOC 2/GDPR compliance, or securing meeting recordings. Trigger: "granola security", "granola privacy", "granola encryption", "granola SOC 2", "granola GDPR", "secure granola".

source

在 SkillsMP 查看

传输类型是什么？

stdio（本地进程）— MCP 以子进程运行在本地，通过标准输入/输出与 Cursor、Claude 等通信。最常见，适合 npx/uvx 启动的工具。
streamable-http（远程 HTTP）— MCP 托管在远程服务器，客户端通过 HTTP 连接。适合团队共享或无法本地安装的服务。
sse（远程 SSE）— 通过 Server-Sent Events 长连接访问远程 MCP。部分托管平台使用此方式。

来源

全部来源官方 MCP Registry SkillsMP ClawHub smithery GitHub MCP Hub 中国