26zl/cybersec-toolkit

Overview

One command installs more than 670 security tools on Linux and Termux. Its authorization-gated MCP server works with Claude Code, OpenCode, Codex, Gemini CLI, Ollama-backed agents, and other MCP clients. It includes over 870 agent skills for CTF, pentesting, bug bounty, DFIR, and red or blue team work, acting as a companion by default and switching to autonomous mode when asked.

Best for

Best for
Security practitioners on Linux or Termux who want an AI agent ready with a broad offensive and defensive toolset

Use cases

• Stand up a full security toolchain on a fresh Linux or Termux environment
• Give an MCP-compatible coding agent access to pentesting and DFIR tooling
• Attach a red or blue team skill library to an AI agent for CTF or bug bounty work

How to use

Tools exposed

• list_tools
• check_installed
• get_tool_info
• get_module_info
• get_profile_tools
• suggest_for_ctf
• suggest_for_bounty
• guided_assessment
• get_cve_info
• recommend_install
• list_profiles
• run_tool
• run_pipeline
• run_script
• manage_remote_hosts

Tested with

Claude Desktop, Claude Code, Cursor, Cline, Continue, VS Code

Notes

One command installs more than 670 security tools on Linux and Termux. Its authorization-gated MCP server works with Claude Code, OpenCode, Codex, Gemini CLI, Ollama-backed agents, and other MCP clients. It includes over 870 agent skills for CTF, pentesting, bug bounty, DFIR, and red or blue team work, acting as a companion by default and switching to autonomous mode when asked.

56 stars on GitHub. Last updated 2026-09-15. Licensed MIT.

Use cases

• Stand up a full security toolchain on a fresh Linux or Termux environment
• Give an MCP-compatible coding agent access to pentesting and DFIR tooling
• Attach a red or blue team skill library to an AI agent for CTF or bug bounty work

Pros

• Extremely broad tool and skill coverage in a single install
• Works across many popular agent runtimes via MCP
• Authorization gate gives agents safe default behavior

Cons

• Small community with only 56 stars, so limited peer validation
• No single vendor backing, which may affect long-term maintenance
• Autonomous mode carries inherent risk if used on unauthorized systems

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.