phoenix-cti-search
Cyber threat intelligence search across 595 curated security domains in 4 authority tiers, for CVEs, threat actors, malware families, exploits and breach reports. Ships a skill…
Pacote de plugins · de Phoenix Security
Resumo
phoenix-cti-search é um pacote de plugins para ferramentas de programação com IA publicado por Phoenix Security. Marketplaces que lemos e que o listam: 1 (Community GitHub marketplaces). Vimos pela primeira vez em 2026-11-05 e não registramos mudanças desde então. Conforme nossa passagem pelos marketplaces em 2026-11-07.
Cyber threat intelligence search across 595 curated security domains in 4 authority tiers, for CVEs, threat actors, malware families, exploits and breach reports. Ships a skill that needs no API key, a Node CLI, an MCP server, and a /cti-search command. Optional push to NotebookLM.
O que pede
- Instala-se como pacote de plugins
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Funciona com
- Claude Code
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.
Como plugin do Claude Code
Gerado a partir do que Community GitHub marketplaces declara.
/plugin marketplace add security-phoenix-demo/security-skills-claude-code
/plugin install phoenix-cti-search@phoenix-securityOnde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Marketplace da comunidade security-phoenix-demo/security-skills-claude-code (Abrir o código no GitHub) | Listado | 1.0.0 | Forks (GitHub): 11 Estrelas (GitHub): 81 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
Listado em um marketplace da comunidade
| Marketplace | Repositório | Estrelas (GitHub) |
|---|---|---|
| phoenix-security | security-phoenix-demo/security-skills-claude-code | 81 |
O que o pacote contém
Conforme publicado em Community GitHub marketplaces.
Skills: 1
cti-domain-research
Comandos: 1
cti-search
O que mudou
- Passou a ser um produto que acompanhamos
- Community GitHub marketplaces: apareceu
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev
-
Malware Patrol Threat Intelligence MCP server
Our MCP Server connects AI workflows to current, curated cyber threat intelligence
-
Skills covering threat intel triage, IOC enrichment, MITRE ATT&CK mapping, phishing analysis, report writing, and dark web monitoring workflows.
-
Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats
-
Real-time threat intelligence lookups and IOC parsing from your self-hosted Polarity instance.
-
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
-
Read-only honeypot observations and evidence. Invite-only API key; request access on our website.
-
isMalicious threat intelligence for AI agents
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
-
Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
-
Complete offensive security operator workspace: 27 specialist agents, 6 engagement commands, scope-gated hooks, and evidence logging
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
MalChela is a Rust-based malware analysis toolkit for DFIR analysts and malware researchers. It exposes file triage, string extraction with IOC detection and MITRE ATT&CK mapping…
-
AI-native security intelligence. Query your security posture, investigate threats, triage alerts, and run SQL against all your connected data sources — directly from Claude Code.
-
Use Resolve for investigations, incidents, and production context.
-
Security audit plugin that scans Claude Code skills, hooks, and MCP configurations for threats. Detects 37 attack patterns including prompt injection, data exfiltration, supply…
-
Reco SaaS & AI security — query app risks, shadow IT, AI agents, user posture, and access events directly from Claude Code
Listado em Claude Code: claude-plugins-official (5)
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
Listado em Claude: knowledge-work-plugins (5)
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Exa AI web search, deep research, and content extraction. Provides MCP tools and research skills for comprehensive web search, people discovery, company research, academic papers…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
Listado em Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Available for US1 customers only. Analyze, investigate, and act on your Datadog telemetry directly from ChatGPT using natural language. Ask questions about your production…
-
Inspect recent issues and events in Sentry from Codex.
Listado em Community GitHub marketplaces (5)
-
Skills covering threat intel triage, IOC enrichment, MITRE ATT&CK mapping, phishing analysis, report writing, and dark web monitoring workflows.
-
Complete offensive security operator workspace: 27 specialist agents, 6 engagement commands, scope-gated hooks, and evidence logging
-
Security auditing pipeline — OWASP checks, vulnerability scanning, threat detection, cyber-defense multi-agent pipeline, and 13 protective hooks
-
OSINT recon tools for Vibe Squad specialists (dns, whois, crt.sh, wayback, github leaked-secrets). Owner roles: scout, security-analyst, exploit-developer.
-
SentinelOne SecOps skills for Claude: PowerQuery threat hunting and STAR/Custom Detection rules; Management Console API; Singularity Data Lake API; SDL dashboards; log parsing…
Listado em Copilot CLI: github/awesome-copilot (5)
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Query Sumo Logic logs, alerts, dashboards, and SIEM insights directly from Copilot.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Three-layer verification pipeline for AI output. Extracts claims, finds sources, and flags hallucination risks so humans can verify before acting.
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
workiq
Query Microsoft 365 data with natural language — emails, meetings, documents, Teams messages, and more.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
workiq-productivity
WorkIQ productivity skills powered by the local WorkIQ CLI — read-only insights across email, meetings, calendar, Teams, SharePoint, projects, and people.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
Listado em Cursor: cursor/plugins (5)
-
Query and remediate compliance tests, controls, frameworks, risks, and vulnerabilities in Vanta.
-
Enrich people and companies, run AI research agents.
-
Track AI visibility, sentiment, and citations.
-
Research private companies, deals, investors, and funds.
-
Search media and social mentions and pull analytics.
Listado em Docker MCP Catalog (5)
-
MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).
-
This MCP server exposes tools to query the NVD/CVE REST API and return formatted text results suitable for LLM consumption via the MCP protocol. It includes automatic query…
-
Vectra AI MCP Server - An MCP server that connects AI assistants & agents to the Vectra AI security platform, enabling intelligent threat analysis and automated incident response.
-
Brings context about device inventory, threats, risks and utilization powered by the Cylera Partner API into an LLM.
-
Real-time web search, reasoning, and research through Perplexity's API
Listado em Official MCP Registry (5)
-
Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev
-
Malware Patrol Threat Intelligence MCP server
Our MCP Server connects AI workflows to current, curated cyber threat intelligence
-
Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats
-
Real-time threat intelligence lookups and IOC parsing from your self-hosted Polarity instance.
-
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Listado em PyPI (MCP servers) (5)
-
Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
-
Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.
-
Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.
-
Google Search Console MCP: search performance analytics, rankings, sitemaps, and indexing health.
-
mcp-safeguard com.cognivators/mcp-safeguard
MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
Listado em npm registry (MCP servers) (5)
-
virustotal io.github.BurtTheCoder/virustotal
MCP server for querying VirusTotal API with comprehensive security analysis tools.
-
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
-
MCP server that lets AI agents run maigret, an OSINT tool that searches a username across thousands of sites
-
nist-nvd-mcp-server io.github.cyanheads/nist-nvd-mcp-server
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
-
Ask Vulnify before an AI agent acts. Check, record, and read policy decisions.
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Quer esta marca no seu plugin em nosso catálogo?
Prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS, e você poderá mostrar esta marca na ficha, com banners ao vivo para o seu site e o README. Como funciona a verificação
Você também recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Community GitHub marketplaces. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.