Agent skill · security · aradotso
mcp-security-hub
Deploy and orchestrate 38 MCP servers for offensive security tools (Nmap, Nuclei, Ghidra, SQLMap, etc.) via Docker
Why this skill is useful
Adds 38 Dockerized MCP servers for offensive security tools, enabling automated security assessments and vulnerability scanning workflows that the AI cannot generate on its own.
What it needs
Requires docker, docker-compose installed locally. Requires burp-suite, shodan, virustotal, zoomeye account access. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
mcp-security-hub Skill by ara.so — Security Skills collection. Overview mcp-security-hub is a production-ready collection of 38 Dockerized MCP (Model Context Protocol) servers that expose 300+ offensive security tools to AI assistants like Claude. It enables natural language security assessments, vulnerability scanning, binary analysis, and penetration testing workflows. Key capabilities: 8 reconnaissance servers (Nmap, Shodan, ProjectDiscovery tools, WhatWeb, Masscan, ZoomEye) 6 web security servers (Nuclei, SQLMap, Nikto, ffuf, Burp Suite) 6 binary analysis servers (radare2, Ghidra, Binwalk, YARA, Capa, IDA Pro) 3 blockchain security servers (DAML Viewer, Medusa, Solazy) 3 cloud security servers (Trivy, Prowler, RoadRecon) Plus: secrets detection, fuzzing, OSINT, threat intelligence, Active Directory, password cracking Installation Prerequisites Docker 20.10+ Docker Compose 2.0+ Claude Desktop or MCP-compatible client Clone and Build Verify Installation Configuration Claude Desktop Integration macOS: ~/Library/Application Support/Claude/claudedesktopconfig.json Windows: %APPDATA%\Claude\claudedesktopconfig.json Project-Level Configuration Create .mcp.json in your project root: Environment Variables Many MCP servers require API keys for external services: Pass environment variables to Docker containers: Key MCP Servers Nmap MCP (Network Scanning) Available tools (8): scanhosts - Basic host discovery scanports - Port scanning with service detection scanos - OS fingerprinting scanvuln - Vulnerability scanning with NSE scripts scancustom - Custom nmap command execution listnsescripts - List available NSE scripts getnsescriptinfo - Get NSE script details scanwithscript - Run specific NSE script Example prompts: "Scan 192.168.1.0/24 for open ports" "Perform OS detection on 10.0.0.1" "Run vulnerability scan on example.com" Nuclei MCP (Vulnerability Scanning) Available tools (7): scantarget - Scan with default templates scanwithseverity - Filter by severity (critical, hig …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/mcp-security-hub