Pentest and security: skills, MCP and CLI

Tools for security: pentest, reverse engineering, threat analysis with an agent. For specialists who work on their own systems and with explicit authorization.

Access in the pick: extended for 2, broad for 10

Skills

5 toolsAll 79

A practical security skills base for agents: web, API, privilege escalation, Active Directory, mobile, binaries and crypto

Broad access2.7KRepository stars

A skills router for authorized reverse engineering, pentest, CTF and threat analysis: it picks a methodology for the task and checks available tools

Broad access44.6KRepository stars

Cybersecurity Skills

Cybersecurity Skills for AI Agents

42 security skills for Claude Code, Cursor and Codex: code and cloud audits, authorization-gated pentesting and incident response

Broad access517Repository stars

A set of skills for external OSINT recon: methodology, tactical arsenal and deep attack-surface analysis for authorized assessments

Broad access3KRepository stars

Ten pentest skills for Claude Code and Gemini CLI: recon, SQL injection, XSS, LFI and a report, driven by plain-language requests

Broad access364Repository stars

MCP servers

4 toolsAll 112

A bridge between an MCP client and a Kali Linux terminal so the agent can run nmap, sqlmap, hydra and other tools for authorized pentesting and CTF

Broad access872Repository stars

An offensive security MCP server: the agent runs 150+ pentest and recon tools and drives automated target assessments

Broad access13.5KRepository stars

An MCP server and agent toolkit for reverse engineering: Ghidra, Frida, x64dbg and Rizin for binary analysis, CTF and malware research

Broad access1.4KRepository stars

Security scanner for coding agents: checks code, MCP servers, prompts and model-invented packages, and gives an A to F grade.

Extended access123Repository stars

More tools

3 tools

A CLI agent for authorized pentesting: from a natural-language brief it runs recon, finds and verifies vulnerabilities and prepares a report

CLIBroad access3.9KRepository stars

Security scanner for agent skills and MCP servers: finds prompt injection, data exfiltration and supply chain risks before install

CLIExtended access25.5KRepository stars

A pack of about fifty Claude Code subagents for authorized pentesting: planning, recon, exploit research and chaining, post-exploitation, detection and reportin

PluginBroad access2.4KRepository stars

Access of the cards

11 of 12 work without VPN

Pack

Put every card of this pick into a pack: one link and the install order.

Install with one command

npx skillfoxx add skills/hack-skills

Example for “HACK.SKILLS”. The rest install the same way, by their catalog address. The CLI checks the recipe signature and writes the agent settings itself.

In short

Every entry has a high risk level and a direct note: use only where you have permission.

FAQ

Your task is not here?

Describe it to Foxx AI: it picks cards from the catalog and explains the choice.

Is this legal?

The tools are neutral. It is legal to use them only on your own systems or with the owner written permission. Otherwise it is a violation.

Good for beginners?

Partly. There are learning packs for CTF, but most target prepared specialists.

Other picks

All picks