Skip to main content

Browse the directory

Showing 7 resources for "vulnerability"
Saved
Active

Source-backed filter active — add entries to compare trust side by side.

Trust snapshot

7 results in this view

Claimed
0%(0/7)

1 trust signal differs in this sample: Submitter

Signals differ on Submitter — add entries to compare before you install.

Rollout signal scan

2 rollout risk signals in current results

Biggest gaps: metadata review, package integrity. 1 entries have 2+ required gaps.

7 scanned

Install payload

Install payload is mixed and needs spot-checking.

watch

71% (5/7)

Adoption queue

Browse adoption queue · balanced

2/7 visible results are in hold tier and need mitigation before adoption.

ready 0caution 5hold 2

CVE MCP Server

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

mcp/cve-mcp-server · trust review · confidence 67%

HexStrike AI MCP Server

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

mcp/hexstrike-ai-mcp-server · trust review · confidence 67%

NVIDIA SkillSpector

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

tools/nvidia-skillspector · trust review · confidence 67%

OSV Dependency Risk Statusline

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

statuslines/osv-dependency-risk-statusline · trust review · confidence 67%

Pentest AI MCP Server

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

mcp/pentest-ai-mcp-server · trust review · confidence 67%

Grype

2 blockers: Metadata review, Install payload

hold

36/100

Request metadata review from maintainers or internal owners.

Add install/config payload for reproducible team rollout.

Collect package checksum or signed artifact information.

tools/grype · trust review · confidence 50%

Garak

3 blockers: Metadata review, Safety notes

hold

10/100

Request metadata review from maintainers or internal owners.

Capture safety notes with misuse/guardrail guidance.

Add install/config payload for reproducible team rollout.

tools/garak · trust review · confidence 17%

Decision confidence

Decision confidence scan · balanced

2/7 results are low-confidence and need review before adoption.

high 0medium 5low 2

CVE MCP Server

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

mcp/cve-mcp-server · trust review

HexStrike AI MCP Server

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

mcp/hexstrike-ai-mcp-server · trust review

NVIDIA SkillSpector

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

tools/nvidia-skillspector · trust review

OSV Dependency Risk Statusline

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

statuslines/osv-dependency-risk-statusline · trust review

Pentest AI MCP Server

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

mcp/pentest-ai-mcp-server · trust review

Grype

Hold adoption until Metadata review, Package integrity are resolved.

low

36/100

Missing: Metadata reviewMissing: Package integrityMissing: Install payload

tools/grype · trust review

Garak

Hold adoption until Metadata review, Safety notes are resolved.

low

10/100

Missing: Metadata reviewMissing: Safety notesMissing: Privacy notes

tools/garak · trust review

Freshness distribution

Mostly fresh with a few aging entries

Median age 53 days; 6 fresh, 1 aging or stale of 7 scanned.

median 53d

Aging

91–180 days

14%

1 entry

Stale

> 180 days

0%

0 entries

Oldest entries in this view

Theme distribution

Results center on security

100% of this view shares the top theme. Leading themes: security, osv, agent-skills.

Focused

25 distinct themes across 7 scanned

Security intelligence MCP server that lets Claude look up CVEs, EPSS scores, CISA KEV status, OSV package vulnerabilities, exploit indicators, MITRE mappings, IP reputation, passive DNS, Shodan host data, malware intelligence, URL safety, and risk reports across optional third-party APIs.

Claude Code statusline that reads OSV-Scanner JSON results and prints a compact dependency vulnerability count for review sessions.

Open-source LLM vulnerability scanner for probing model behavior, prompt attack surfaces, and safety failures.

Safety · Privacy ·
Pentest AI logo

Offensive-security MCP server from pentest-ai that lets Claude list and run wrapped security tools, plan and install missing tools, launch authorized engagements, run web, recon, API, cloud, AD, credential, vulnerability, mobile, wireless, and LLM-red-team assessments, and retrieve findings, attack chains, reports.

Grype logo
Grypeby Anchore · submitted by oktofeesh1

Apache-2.0 vulnerability scanner from Anchore for container images, filesystems, archives, SBOMs, PURLs, and CPEs, with risk scoring, VEX filtering, and CI-friendly output.

Apache-2.0 security scanner from NVIDIA for AI agent skills, with static pattern checks, optional LLM semantic analysis, MCP least-privilege and tool poisoning analyzers, OSV.dev vulnerability lookups, risk scoring, and terminal, JSON, Markdown, and SARIF reports.

HexStrike AI logo

Offensive security MCP framework that connects AI agents to a large toolkit for authorized penetration testing, vulnerability discovery, CTF, OSINT, and security research workflows.