About Aegis Security Skills
A read-only library of 24 defensive cybersecurity skills in the Agent Skills format, for security practitioners and compatible assistants. It includes an installer and exposes skill text through local or hosted MCP access.
Key features
- 0124 defensive cybersecurity skills
- 02Coverage of ATT&CK, ATLAS, DFIR and CTEM
- 03Installer for supported tools
- 04Read-only skill retrieval over MCP
Use cases
- 01Install defensive skills for an assistant
- 02Browse available skills by name or phase
- 03Retrieve skill guidance through an MCP client
MCP support
The server exposes `list_skills`, `get_skill` and `get_skill_phase` as read-only tools over stdio or a hosted endpoint.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://aegis-skills.vercel.app/api/mcpclaude mcp add --transport http drupadsachania-aegis-skills https://aegis-skills.vercel.app/api/mcp{"mcpServers":{"drupadsachania-aegis-skills":{"type":"http","url":"https://aegis-skills.vercel.app/api/mcp"}}}Open in Cursor{"servers":{"drupadsachania-aegis-skills":{"type":"http","url":"https://aegis-skills.vercel.app/api/mcp"}}}Open in VS Code{"mcpServers":{"drupadsachania-aegis-skills":{"type":"http","url":"https://aegis-skills.vercel.app/api/mcp"}}}{"mcpServers":{"drupadsachania-aegis-skills":{"serverUrl":"https://aegis-skills.vercel.app/api/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
3| Parameter | Type | Required | Description |
|---|---|---|---|
| query | string | No | Free-text filter |
| family | enum | No | Skill family: framework, intel, response, domain, governanceframework | intel | response | domain | governance |
Details
From the project READMEaegis-skills
24 defensive cybersecurity skills in the open Agent Skills format, with a native installer and a read-only MCP server.
Install
npx aegis-skills install --platform claude # or codex, gemini, cursor, vscode, antigravity, all
npx aegis-skills install --platform claude --project
Skills go into each tool's own skills folder and the aegis MCP server is registered in its config (the file is backed up first). After an upgrade, installed skills refresh automatically; files you edited are kept as .bak. Opt out with AEGIS_NO_AUTO_REFRESH=1.
Claude Code plugin: /plugin marketplace add drupadsachania/aegis-skills, then /plugin install aegis-skills@aegis-skills.
Commands
install (alias init), uninstall, update, list, mcp. Run aegis --help.
MCP
npx aegis-skills mcp serves list_skills, get_skill and get_skill_phase on stdio. Hosted: https://aegis-skills.vercel.app/api/mcp.
What this plugin runs, sends and fetches
- Claude Code plugin (
.mcp.json): connects to one remote MCP server,https://aegis-skills.vercel.app/api/mcp. It runs no local command. The three tools (list_skills,get_skill,get_skill_phase) are read-only and return fixed public skill text. What is sent is the tool call itself (a skill name, a phase or a search word) and the usual request metadata such as your IP address. The server keeps only an in-memory request counter, makes no model calls and stores nothing. The skills themselves are plain Markdown that your assistant reads locally. npx aegis-skills(the installer and stdio server): runs the pinned npm packageaegis-skills.installwrites skill files into your tool's skills folder and adds anaegisentry to its MCP config (backed up first). A ledger of what it installed is kept under~/.aegis(override withAEGIS_HOME).mcpserves the same three read-only tools from the bundled skills on stdio. Neither command makes a network request of its own beyond npm downloading the package.- No telemetry, no analytics and no credentials. Nothing is read from your conversations, memory or uploaded files.
Every skill is for defensive use on systems you own or are explicitly authorized to assess.
Licence: Apache-2.0 OR MIT.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.