Malwarebazaar

This connects Claude to abuse.ch's MalwareBazaar, a public repository of malware samples used by security researchers. You get four tools: search by tag, family name, or YARA signature, plus a feed of recent submissions. It's free but needs an API key. Use it when you're triaging threats, hunting for specific malware variants, or pulling sample metadata without leaving your IDE. Routes through Pipeworx's gateway, which means you can either call tools directly or use ask_pipeworx to query in plain English. Part of a larger collection of 673+ data sources if you connect to the full gateway.