Pentest Recon

Dark-web OSINT: fan-out onion search + Tor page scraping exposed over stdio MCP. Engine lifted from robin (MIT). Authorized threat-intel use only. Requires a local Tor daemon on 127.0.0.1:9050.

1 MCP server

Reporting methodology skill pack: turn raw findings into a clear, client-ready penetration-test report (pure knowledge, no runtime deps).

1 skill

Authorized-use enforcement: scope confirmation, rules-of-engagement, and hard-refusal boundaries for security work (pure knowledge, no runtime deps).

1 skill

Web application security testing methodology: WSTG-aligned test taxonomy, verification discipline, OpSec noise tagging, and reporting handoff (pure knowledge, no runtime deps).

1 skill

MCP wrapper around the `nuclei` scanner (shells out to a locally-installed binary via Docker; nothing weaponized is redistributed).

1 MCP server

Long-horizon goal planning, deep research orchestration, and adaptive replanning using GOAP

5 skills · 1 command · 4 agents

Build powerful, stateful CLI interfaces for any GUI application using the cli-anything harness methodology.

5 commands

Test-driven development methodology with red-green-refactor cycles and code review

4 commands · 2 agents

Local-first Agent Skills package and Claude Code plugin for source-cited Obsidian knowledge bases. Includes recoverable transactions, deterministic lint and retrieval, provenance ledgers, explicit vault adoption, offline-first capture foundations, and methodology modes.

15 skills · 3 agents · hooks

Looks up curated web security learning resources (XSS, SQLi, CSRF, SSRF, OAuth/JWT, recon, evasion, tools, CTF). Filters by topic, difficulty, language, and resource type. Returns top references with archive fallbacks. Defensive use only; refuses unauthorized targeting.

1 skill

理论溯源与案例重释。审查 PPT、课程、文案或方法论中的经验判断，先判断命题是否成立，再匹配并核实可信理论，用该理论重释案例并标明边界。适用于给自创理论找依据、给 PPT 补理论来源、判断一句话能否上升为理论、检查是否硬套名人；聚焦单次理论锚定，不默认展开历史同构研究。

1 skill