Security Detections MCP

reason-machines

Query unified Sigma, Splunk, Elastic, KQL, Sublime, and CrowdStrike security detection rules via MCP server with MITRE ATT&CK mapping and coverage analysis

Install

The individual skill folder is not confirmed. This command opens the repository’s skill selector; follow the upstream instructions.

skills CLI

npx skills add reason-machines/security-skills

Trail of Bits SkillsTrail of BitsCollectionTrail of Bits plugin marketplace of skills for security research, vulnerability detection and audit workflows; Codex can load it through Claude marketplace compatibility.Security95 skills7.7k Repository stars
Author ContributionsMicrosoftOfficialIdentify all files a specific author contributed to on a branch vs its upstream, tracing code through renames. Use when asked who edited what, what code an author contributed, or to audit authorship before a merge. This skill should be run as a subagent — it performs many git operations and returns a concise table.Security194.2k Repository stars
Memory Leak AuditMicrosoftOfficialAudit code for memory leaks and disposable issues. Use when reviewing event listeners, DOM handlers, lifecycle callbacks, or fixing leak reports. Covers addDisposableListener, Event.once, MutableDisposable, DisposableStore, and onWillDispose patterns.Security194.2k Repository stars
Next Bundle OptimizerVercelOfficialAudit and reduce Next.js browser initial-load work. Use for slow route startup, oversized client bundles, duplicate browser dependencies, or features that can wait for interaction.Security143.1k Repository stars
Next Partial Prefetching AdoptionVercelOfficialTurn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the `partialPrefetching` flag, opt routes in with `export const prefetch = 'partial'`, audit `Link prefetch={true}` behavior, preserve existing prefetched UI with `instant()` tests, or resolve the instant-link-prefetch-partial and…Security143.1k Repository stars
CopywritingSupabaseOfficialWrite or audit UI copy (buttons, labels, empty states, error messages, tooltips, form text) anywhere in the monorepo. Load it before shipping or reviewing any user-facing text — including when copy is incidental to the task, like a new feature that adds buttons, toasts, dialogs, or validation messages.Security113.3k Repository stars

Install

Related