Install payload
Install payload is broadly covered in current results.
100% (12/12)
2 trusted · 57 review in this set — compare to see which signals differ.
Trust signals across 40 of 59 results
4 trust signals differ in this sample: Review status, Package trust, Source provenance, Submitter
Signals differ on Review status, Package trust, Source provenance — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
Install payload
Install payload is broadly covered in current results.
100% (12/12)
Most at-risk entries in this view
Adoption queue
0/59 visible results are ready for staged adoption under this preset.
1 blockers: Metadata review
70/100
Request metadata review from maintainers or internal owners.
skills/coderabbit-lite-pr-review-capability-pack · trust trusted · confidence 83%
1 blockers: Metadata review
70/100
Request metadata review from maintainers or internal owners.
skills/google-workspace-gemini-automation · trust trusted · confidence 83%
No required blockers for this preset.
64/100
Collect package checksum or signed artifact information.
mcp/contrastapi-mcp-server · trust review · confidence 83%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/catalog-collision-scan · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/mcp-auth-audit · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/pr-security-review · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/security · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/security-audit · trust review · confidence 67%
Decision confidence
2/59 results are high-confidence for the selected preset.
Confident candidate for staged adoption.
74/100
skills/coderabbit-lite-pr-review-capability-pack · trust trusted
Confident candidate for staged adoption.
74/100
skills/google-workspace-gemini-automation · trust trusted
Address Package integrity before broader rollout.
68/100
mcp/contrastapi-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
commands/catalog-collision-scan · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
commands/mcp-auth-audit · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
commands/pr-security-review · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
commands/security · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
commands/security-audit · trust review
Freshness distribution
Median age 43 days; 10 fresh, 2 aging or stale of 12 scanned.
Oldest entries in this view
Theme distribution
107 distinct themes with no dominant one. Most common: claude-code, capability-pack, mcp.
107 distinct themes across 24 scanned
Source-backed checklist for reviewing Claude Code MCP client configuration before a team rollout, covering scopes, transports, commands, secrets, allowlists, denylists, approvals, and rollback.
Create useful Gemini-powered Google Workspace automations for docs, sheets, email triage, and internal workflow productivity.
49 remote MCP security tools for CVE/KEV/CWE/EPSS lookup, composite CVSS+EPSS+KEV+PoC risk scoring, CVSS v3.x vector parsing, domain/IP/IOC enrichment, dependency and web intelligence checks, MITRE ATLAS AI/ML attacks, and MITRE D3FEND defenses. Anonymous tier available; Pro tier uses an API key.
Local-first GoodMemory MCP server for giving Claude durable, scoped memory with SQLite storage, auditable recall, explicit deletion, and opt-in governed writes.
Official AWS Labs MCP server for AWS CloudTrail that lets AI assistants query account activity for security investigations, compliance auditing, and operational troubleshooting via Event History and CloudTrail Lake SQL.
Manage ConfigCat feature flags from Claude — create, update, and delete flags and targeting rules, manage environments, find and clean up stale flags, and audit change history — with the official ConfigCat MCP server and its 52 tools for the full ConfigCat Management API.
Manage LaunchDarkly feature flags, AI configs, environments, and audit logs from Claude — with the official LaunchDarkly Model Context Protocol server backed by the LaunchDarkly REST API.
Vercel Labs' official Agent Skills collection for AI coding agents working on Vercel deployments, React and Next.js performance, React Native, web design guidelines, writing guidelines, composition patterns, view transitions, CLI token workflows, and Vercel optimization audits.
Community reusable agent prompt for reviewing new MCP server adoption in Claude Code using official security documentation: trusted providers, permissions configuration, trust verification, and settings checked into source control.
Expert MCP client config audit capability pack for reviewing Claude Code MCP server entries, scope placement, tool approval settings, env var secrets, and startup context load before enabling servers in production repositories.
Expert prompt caching cost audit capability pack for measuring Claude Code cache hit rates, identifying cache invalidation triggers, and reducing token spend from CLAUDE.md edits, model switches, and startup load changes.
Expert Claude Code context window audit capability pack for measuring what loads at session start, what each read and extension adds, when compaction drops path-scoped rules, and how to delegate or compact before quality drops.
Expert Claude Code terminal ergonomics capability pack for auditing multiline input, Option/Meta shortcuts, tmux passthrough, notifications, fullscreen rendering, themes, status lines, Vim mode, and custom keybindings before a user blames Claude for terminal behavior.
Read-only AWS FinOps MCP server that lets Claude query Cost Explorer cost and usage data, compare AWS CLI profiles, filter by tags or dimensions, check AWS Budgets, and audit for stopped EC2 instances, unattached EBS volumes, and unassociated Elastic IP addresses across selected regions.
Built-in Streamable HTTP MCP server for Dagu that lets AI agents read workflow state, inspect DAG specs and logs, preview or apply workflow changes, and start, enqueue, retry, or stop DAG runs.
MCP server for Odoo ERP systems, with tools for reading records, discovering models and fields, aggregating data, diagnosing access, scanning addons, planning migrations, and running gated safe-write workflows.
Built-in HTTP MCP server for Radar, the local-first Kubernetes UI that gives Claude token-optimized cluster topology, health, events, logs, audit, RBAC, GitOps, workload, and resource-management tools.
Expert Spectral review skill for auditing OpenAPI contracts, OAS rulesets, lint results, schema drift, CI gates, and API release readiness.
Decision-assurance layer for AI agents: returns calibrated Decision Assets and an auditable action boundary (approve / review / block / seek-evidence) plus a verifiable Decision Receipt before high-stakes actions. Advisory only — never transacts or modifies identity. MCP tools: health_check and bench_query.
Manage your Descope identity project from Claude — search users, configure auth flows, inspect audit logs, manage tenants, and search Descope documentation — with the official Descope remote MCP server hosted at mcp.descope.com.
Expert README and catalog integrity review capability pack for validating generated README tables against raw content files, slug consistency, broken links, duplicate entries, and source URL reachability before merge.
Source-backed agent that reviews active Claude Code sessions and configuration for security gaps, cross-references the official security guidance, and produces a ranked remediation plan covering permissions, MCP trust, prompt injection, credential handling, and hook safety.
Run Claude Code dynamic workflows for large codebase audits: scoping prompts, monitoring /workflows runs, keyword triggers, and safety guardrails.
Slash command for auditing a remote MCP server authorization setup, including protected resource metadata, authorization server discovery, OAuth resource indicators, token audience validation, scopes, and token passthrough risk.
A reusable agent prompt that reviews a Claude Code auto mode setup: whether autoMode.environment trusts the right repos, buckets, and domains, how the allow, soft_deny, and hard_deny tiers resolve, and whether $defaults is kept across settings scopes.
An agent prompt for planning an enterprise Claude Code rollout via server-managed settings: permission deny lists, disableBypassPermissionsMode, allowManagedPermissionRulesOnly, managed MCP allow/deny, and forceRemoteSettingsRefresh fail-closed startup.
A source-backed collection for reviewing API contracts before release: OpenAPI drift detection, JSON Schema validation, GraphQL schema checks, Spectral lint review, Pact consumer contract verification, and generated clients or stubs from approved specs.
Official Datadog MCP Server for connecting Claude, Codex, Cursor, and other MCP clients to Datadog observability, incidents, logs, metrics, traces, dashboards, monitors, notebooks, services, and security signals.
A defense-in-depth bundle for hardening an agentic Claude Code workstation: block secrets and sensitive data before they are written, verify dependency provenance and known vulnerabilities, review supply-chain risk and run code security audits, and harden MCP tool access against prompt injection.
Deploy 100 specialized sub-agents for comprehensive enterprise-grade security, performance, and optimization audit of production codebase