A practical security skills base for agents: web, API, privilege escalation, Active Directory, mobile, binaries and crypto
Pentest and security: skills, MCP and CLI
Tools for security: pentest, reverse engineering, threat analysis with an agent. For specialists who work on their own systems and with explicit authorization.
Access in the pick: extended for 2, broad for 10
Skills
All 79A skills router for authorized reverse engineering, pentest, CTF and threat analysis: it picks a methodology for the task and checks available tools
Cybersecurity Skills
Cybersecurity Skills for AI Agents
42 security skills for Claude Code, Cursor and Codex: code and cloud audits, authorization-gated pentesting and incident response
A set of skills for external OSINT recon: methodology, tactical arsenal and deep attack-surface analysis for authorized assessments
Ten pentest skills for Claude Code and Gemini CLI: recon, SQL injection, XSS, LFI and a report, driven by plain-language requests
MCP servers
All 112A bridge between an MCP client and a Kali Linux terminal so the agent can run nmap, sqlmap, hydra and other tools for authorized pentesting and CTF
An offensive security MCP server: the agent runs 150+ pentest and recon tools and drives automated target assessments
An MCP server and agent toolkit for reverse engineering: Ghidra, Frida, x64dbg and Rizin for binary analysis, CTF and malware research
Security scanner for coding agents: checks code, MCP servers, prompts and model-invented packages, and gives an A to F grade.
More tools
A CLI agent for authorized pentesting: from a natural-language brief it runs recon, finds and verifies vulnerabilities and prepares a report
Security scanner for agent skills and MCP servers: finds prompt injection, data exfiltration and supply chain risks before install
A pack of about fifty Claude Code subagents for authorized pentesting: planning, recon, exploit research and chaining, post-exploitation, detection and reportin
How to connect
What the access level meansAccess of the cards
11 of 12 work without VPN
Pack
Put every card of this pick into a pack: one link and the install order.
Install with one command
npx skillfoxx add skills/hack-skillsExample for “HACK.SKILLS”. The rest install the same way, by their catalog address. The CLI checks the recipe signature and writes the agent settings itself.
In short
Every entry has a high risk level and a direct note: use only where you have permission.
FAQ
Your task is not here?
Describe it to Foxx AI: it picks cards from the catalog and explains the choice.
Is this legal?
The tools are neutral. It is legal to use them only on your own systems or with the owner written permission. Otherwise it is a violation.
Good for beginners?
Partly. There are learning packs for CTF, but most target prepared specialists.
Other picks
All picks- DevOps1,598 on the topicFor example: kmcp, kubectl-mcp-server, DevOps AI Toolkit
- QA and testing811 on the topicFor example: agent-qa, qa-skills, Test Automation Skills and Agents
- 1C development244 on the topicFor example: 1C MCP Toolkit, 1C Client MCP Server, MCP server inside 1C
- Code reviewFor example: agentsre, agent-reviews, Code Review Skills
- UI design1,172 on the topicFor example: qiaomu-design, Superdesign, UI Skills