
This is a Docker orchestration system that packages 38 offensive security tools as MCP servers so you can run Nmap, Nuclei, SQLMap, radare2, and similar through natural language prompts to Claude. You get reconnaissance, web scanning, binary analysis, secrets detection, and cloud security all exposed through a consistent interface. The setup is straightforward with docker-compose and JSON config, though you'll need to provision API keys for external services like Shodan and VirusTotal. Most useful when you're doing security assessments and want to combine tool output with AI analysis instead of context-switching between terminals. Fair warning that this puts powerful offensive tools behind conversational commands, so the usual warnings about authorization and legal boundaries apply even more strongly here.
npx -y skills add aradotso/security-skills --skill mcp-security-hub --agent claude-codeInstalls into .claude/skills of the current project.
Select a file.