Browse the marketplace
Security-reviewed skills, MCP servers, and toolkits for AI agents. Filter by type, price, and delivery, then install any listing with one command. Every listing is scanned before an agent can run it.
Featured
PilotStack
Your agent flies the app — you stay in the cockpit. PilotStack is an MCP server that drives iOS, Android, and web side by side: cheap semantic UI context, deep Flutter introspection, and a human approve/deny gate on every action.
Grill With Docs
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
Grill With Docs
Grilling session that challenges your plan against the existing domain model, sharpens terminology, and updates documentation (CONTEXT.md, ADRs) inline as decisions crystallise. Use when user wants to stress-test a plan against their project's language and documented decisions.
Access Control
Detect missing or incorrect access control — missing modifiers, wrong role checks, privileged function exposure, public initializers, and role-escalation paths. Activate on any function that mutates state, transfers funds, mints tokens, sets admin parameters, upgrades implementations, or pauses/unpauses.
Flutter Build Responsive Layout
Build adaptive layouts using LayoutBuilder, MediaQuery, or Expanded/Flexible widgets to ensure the UI looks elegant across all mobile, tablet, and desktop form factors.
Flutter Animations
>-
Flutter Adaptive Ui
Build, fix, review, and validate adaptive or responsive Flutter UIs for mobile, tablet, desktop, web, large screens, foldables, and mixed input devices. Use when creating breakpoint-driven layouts, responsive navigation, adaptive dialogs/lists/grids, keyboard/mouse/touch behavior, window-size decisions with MediaQuery or LayoutBuilder, or Capability and Policy patterns for platform-specific behav…
Grill Me
A relentless interview that sharpens a plan or design before any work starts — one sharp question at a time, often 40–50 deep, until you (and Claude) actually know what you want.
Lex
Episodic memory and architectural policy for AI agents. Frames, Atlas, and Policy.
PaperLab
Local-first PDF reader for researchers: notes anchored to the page, AI answers that cite it. Runs offline with Ollama.
Websense Mcp
WebSense MCP — non-vision, AI-native browser automation via the Semantic Action Graph. No screenshots, no CDP, no bot detection.
Coco Mcp
Inspect and debug MCP servers in depth, from the command line or a native window. One Rust binary, drawn by GPUI.
Summarize
>
Review
>
Beastcover
Make covers that get the click: a thumbnail or header for an article, video, or post, sized for WeChat, X, YouTube, Bilibili, Xiaohongshu, Instagram, Douyin, or TikTok, plus the Open Graph image of a web page and a GitHub social preview. Start with a free photo cover: search cc0 stock, put the headline and project palette on it, no API key and no upload. Use this skill whenever the user asks for…
Proposal
>
Compare
>
Engineering Research
>
Scholarly Research
>
Hypothesis Generation
>
Habit
>
Electrical
>
Verifier
>
Artifact Reading
>
Peer Review
>
Mechanical
>
Gap Analysis
>
Standards Lookup
>
Eli5
>
Vitruvius Help
>
Audit
>
Vitruvius
>
Architectural
>
Civil
>
Evidence Ranking
>
Software
>
Fmea Brainstorm
>
Design Alternatives
>
Awesome Node Auth
The Sovereign Identity & Communication Layer for Node.js. Scalable by design. No SaaS/DB lock-in. MCP Server for auto-config in IDE, Hybrid Web/Mobile Auth, Dynamic in/out Webhooks via decorators, JWT/Api-Key, custom JWT Payload, RBAC/Metadata, Admin UI, served full-featured customizable Auth UI, SSE/tracking via AuthEventBus
Aibuildai Knowledge Base
AIBuildAI Knowledge Base: curated skills for building AI models, served to agents over MCP
Motion Kit
Code-drawn motion graphics, animated videos, explainers, kinetic typography, transitions, editing, Three.js scenes and browser games with strong game feel. Use when you need to make a good-looking animation, video, intro, interactive scene or game in HTML/JS and render it to MP4.
Afl Fuzzing
Greybox fuzz Android native libraries (.so) on-device with AFL++ — cross-compile the fuzzer for Android arm64, harness a JNI parser with a stub JNIEnv, detect memory bugs with ASan/libdislocator, and validate the harness actually reaches the target.
Mobile Vuln Hunt
Hunt mobile vulnerability classes in decompiled Android (jadx/apktool) and iOS (class-dump/otool/nm) trees — ripgrep signature scan first (zero deps), optional semgrep taint analysis for dataflow classes, then triage (exported check, attacker-APK discipline) and pick the matching dynamic PoC (adb/drozer/Frida) per class from the bundled reference docs.
Reverse Engineer
Perform static analysis on Android APK, iOS IPA, or bundled web apps to extract endpoints, secrets, permissions, code flow, and other security-relevant data
Vlm Code Context Mcp
MCP server that indexes codebases into a SQLite database, exposing file metadata, exports, dependency graphs, and per-file change tracking.
Zalo Agent
Self-hosted AI agent living inside Zalo (personal account). Multi-account, 15 tools + external MCP servers, web dashboard, scheduler, durable memory, rich-text messages. Provider-agnostic: any OpenAI-compatible endpoint or Anthropic. TypeScript + SQLite. MIT.
Jev Ra
Browser use for coding agents, 3-5x faster than browser-use. MCP server + CLI; TypeSafe Jev decides every step in ~300 ms.
Eyd V
🇮🇩 Ekosistem Pengetahuan, Dataset Terstruktur, AI Agent Skill & Linter Ejaan Bahasa Indonesia yang Disempurnakan (EYD Edisi Kelima) resmi Kemendikdasmen RI.