“MCP and agent security”

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Deterministically generates source documents (Markdown) from the FISC "Security Guidelines on Computer Systems for Financial Institutions" (安対基準 / Antai…

Create, search, update, and manage SOC cases via the Kibana Cases API.

Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.

Structured, adversarial, multi-phase security audit of a codebase — recon → coverage-led hunting → finder≠validator validation → machine-readable findings →…

对进入系统的文件或 URL 执行安全与合规扫描，输出 pass/reject 判定与扫描报告，作为所有文档处理的强制前置关卡。

信息安全分析师与软件开发工程师在搭建文档处理流水线时，当需要拦截违规文件或外部URL，请挂载此技能作为强制前置安检，自动输出 pass/reject 判定与详细合规扫描报告，一键守住零信任安全底线。

Grounds answers about GenAI/LLM/agentic AI security in the OWASP GenAI Security Project's published research -- the LLM Top 10, the Agentic Top 10, Data…

Use when evaluating MCP-enabled agents, tool-using LLM systems, multi-server workflows, tool-selection quality, trajectory quality, task completion, or MCP…

Authorized offensive and defensive security assessments, one router over per-surface playbooks: API, cloud/K8s, code audit & SAST review, database, digital…

Working with MCP (Model Context Protocol) servers in Freebuff Desktop: discovering tools via native search_mcp_tools / call_mcp_tool, bridging stdio servers…

Designs, deploys, and secures Google Cloud Agent Gateway solutions.

Security audit framework for AI agent skills, MCP servers, and packages.

Stop leaking secrets.

Security review and safe-op patterns.

Multi-agent source security audit with a coverage ledger, independently verified findings, and machine-checked records.

Audit MCP servers for tool poisoning, tool shadowing, rug pulls, SSRF, and unauthenticated exposure using Invariant Labs' mcp-scan for static/runtime scanning…

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more.

Configures Google Cloud API Gateway to act as a remote Model Context Protocol (MCP) server (Public Preview) that exposes REST APIs as agent tools over HTTP…

Run the pre-publish security audit for every publishable @tetherto/mdk-* package (or any non-private package in an npm monorepo).

STRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design.

Cloud posture security across AWS, Azure, and GCP — IAM least privilege, public exposure, encryption, logging coverage, landing-zone guardrails.

Build, review, or harden AI agents, LLM apps, RAG, tool-calling, coding agents, and agentic workflows with secure-by-default controls.