stealthstack.ai Status Publish a catalog

Security

Resources for security work.

They cover code and dependency scanning, secret stores, threat intelligence and OSINT, penetration testing, PII redaction, identity and access, and email security.

Listings are what publishers declare in their ARD catalogs and the registries StealthStack reads. The category and summaries are our reading of each listing. Each listing links to its own page with the publisher's endpoint.

All types MCP serversSkillsA2A agentsAPIs
AppSec scanningSecrets and credentialsThreat intel and OSINTPentestPrivacy and PIIIdentity and accessEmail security
  1. SKILLconstant-time-analysis Skill that detects timing side-channel vulnerabilities in cryptographic code.
  2. SKILLcodeql Skill that scans code for vulnerabilities with CodeQL data-flow and taint analysis.
  3. SKILLc-review Skill for C/C++ security review: memory corruption, overflows and race conditions.
  4. APIInfisical REST API OpenAPI spec for the Infisical API: secrets, projects, identities, PKI and PAM.
  5. SKILLagentic-actions-auditor Skill that audits GitHub Actions workflows for AI-agent integration vulnerabilities.
  6. SKILLrust-review Skill for Rust security review of unsafe code, concurrency and panic DoS.
  7. SKILLdifferential-review Skill for security-focused review of code changes, PRs and diffs.
  8. SKILLsecurity-threat-model Skill for repository-grounded threat modeling of assets and abuse paths.
  9. SKILLsupply-chain-risk-auditor Skill that identifies dependencies at heightened risk of exploitation or takeover.
  10. SKILLAzure Keyvault Secrets Rust Skill for the Azure Key Vault Secrets Rust library: store and retrieve secrets.
  11. SKILLFirebase Security Rules Auditor Skill to evaluate how secure Firestore security rules are.
  12. SKILLInsecure Defaults Skill that detects fail-open insecure defaults such as hardcoded secrets and weak auth.
  13. MCP SERVERInfisical MCP server Infisical MCP server to manage projects, environments and secrets as a machine identity.
  14. SKILLDjango Access Review Skill for Django access-control and IDOR security review.
  15. SKILLTwo Factor Authentication Best Practices Skill for Better Auth two-factor authentication: TOTP, OTP, backup codes.
  16. SKILLazure-keyvault-py Skill for secrets, keys and certificates with the Azure Key Vault Python SDK.
  17. SKILLdpop-adoption Skill for implementing OAuth 2.0 DPoP sender-constrained tokens with Google OAuth.
  18. CATALOGllmrt LLM Red-Team Scan (paid x402, USDC on Base) 44-probe adversarial scan of an LLM agent spec; 3 USDC or 8.1 XNO per scan.
  19. SKILLSecurity Review Skill for security code review for vulnerabilities.
  20. SKILLsecurity-best-practices Skill for language- and framework-specific security reviews with suggested fixes.
  21. SKILLGha Security Review Skill for GitHub Actions workflow exploitation security review.
  22. SKILLgoogle-cloud-scc-query Skill for querying Security Command Center findings, exposures and threats.
  23. SKILLOrganization Best Practices Skill for Better Auth organizations, members, roles and RBAC.
  24. SKILLwycheproof Skill on Wycheproof test vectors for validating cryptographic implementations.
  25. SKILLSecurity Skill for Better Auth security: rate limits, secrets, CSRF, cookies, token encryption.
  26. SKILLAzure Keyvault Keys Rust Skill for the Azure Key Vault Keys Rust library: RSA, EC and HSM keys.
  27. MCP SERVERDeepSearch MCP server Resolves a name, phone, email or username to candidate people and builds a dossier.
  28. SKILLfirebase-security-rules-auditor Skill that audits Firebase security rules for vulnerabilities and bypasses.
  29. SKILLcodeql Skill for setting up CodeQL code scanning via GitHub Actions and the CodeQL CLI.
  30. SKILLAzure Keyvault Certificates Rust Skill for the Azure Key Vault Certificates Rust library: manage X.509 certificates.
  31. MCP SERVERllm-red-team-scanner MCP for LLM red-team scans of prompts and tool specs; free 8-probe scan, paid full.
  32. SKILLgke-workload-identity Skill that diagnoses GKE Workload Identity Federation authentication failures.
  33. APIDeepSearch REST API DeepSearch REST API: people search, dossier, reverse image and VIN; API key.
  34. A2A AGENTllmrt (A2A agent) A2A LLM red-team auditor: free 8-probe scan or 3 USDC full kit via x402.
  35. SKILLdetection-engineering-coverage-evaluation Skill automating detection engineering and rule coverage in Google SecOps.
  36. SKILLazure-security-keyvault-keys-dotnet Skill for managing keys in Azure Key Vault and Managed HSM with .NET.
  37. SKILLentra-app-registration Skill for Entra ID app registration, OAuth setup and MSAL integration.
  38. SKILLgke-workload-security Skill for auditing and hardening workload-level security on GKE.
  39. SKILLBetter Auth Best Practices Skill for configuring Better Auth server, client, adapters, sessions and plugins.
  40. SKILLconstant-time-testing Skill on constant-time testing for timing side channels in crypto code.
  41. SKILLaddress-sanitizer Skill on using AddressSanitizer to detect memory errors during fuzzing.
  42. SKILLgke-platform-security Skill for hardening platform-level GKE cluster security.
  43. SKILLCreate Auth Skill Skill to scaffold authentication in TypeScript/JavaScript apps with Better Auth.

Related categories

Developer toolsCloud and DevOpsObservabilityData and databases All categories