EXPLORE COMPONENTS

secretscredentialsapi-keys+2

CldKit Team

85/100

Scans codebases for exposed secrets, API keys, credentials, and sensitive data.

Mar 10, 20263 recipes

K8s MCP (Red Hat)

MCP

Red Hat Containers

85/100

Red Hat-backed MCP server for Kubernetes and OpenShift cluster management, supporting kubectl, Helm, and Istio operation...

kubernetesopenshifthelm+1

Mar 25, 20261.9k

Semgrep Rule Variant Creator

skilltrail-of-bitssemgrep+3

Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Take...

Property Based Testing

skilltrail-of-bitsproperty+2

Provides guidance for property-based testing across multiple languages and smart contracts. Use when writing tests, revi...

Supply Chain Risk Auditor

skilltrail-of-bitssupply+3

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface,...

Supply Chain Risk Auditor

supply-chaindependenciesnpm-audit+1

Evaluates dependency threat landscapes for software supply chain security.

Feb 25, 20266.4k

Audit Context Building

skilltrail-of-bitsaudit+2

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug findi...

False Positive Check

Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE v...

skilltrail-of-bitscheck

Semgrep Rule Creator

skilltrail-of-bitssemgrep+2

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing S...

Mutation Testing

skilltrail-of-bitsmutation+1

Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. U...

DWARF Expert

skilltrail-of-bitsdwarf+1

Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers w...

Firebase APK Scanner

skilltrail-of-bitsfirebase+2

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication iss...

Insecure Defaults

skilltrail-of-bitsinsecure+1

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurel...

Entry Point Analyzer

skilltrail-of-bitsentry+2

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally call...

Modern Python

skilltrail-of-bitsmodern+1

Configures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, o...

Git Cleanup

Safely analyzes and cleans up local git branches and worktrees by categorizing them as merged, squash-merged, superseded...

skilltrail-of-bitsgit+1

Second Opinion

skilltrail-of-bitssecond+1

Runs external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific com...

Skill Improver

skilltrail-of-bitsimprover

Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycl...

Atlassian MCP

MCP

Atlassian

jiraconfluenceatlassian+1

Official Atlassian MCP server connecting AI agents to Jira and Confluence via SSE transport, enabling issue tracking, pr...

Mar 25, 2026926

Devcontainer Setup

skilltrail-of-bitsdevcontainer+1

Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use whe...