Aegis Security Skills

io.github.drupadsachania由 GitHub 帳號 drupadsachania 發布v1.5.0更新於 Oct 24, 2026

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

已驗證Streamable HTTP可網頁執行知識與記憶安全與監控

概覽

AI 產生的概覽

唯讀 MCP 伺服器，提供 24 項防禦性網路安全技能（ATT&CK、ATLAS、DFIR、CTEM 等），讓助理依階段查閱方法論。

可以做什麼
  • 列出可用的防禦性安全技能，可依技能族或自由文字查詢篩選
  • 讀取某項技能的描述、框架、標籤、情境與有序階段 ID
  • 依階段 ID 或從 0 開始的索引載入某項技能中單一階段的方法論內容
適用情境
適合需要助理依循結構化防禦性安全方法論（威脅導向防禦、事件應變、威脅建模等），並按需取得技能內容，而非把全文塞進提示詞的情境。
執行需求
可使用託管的遠端端點，或以 Node.js 透過 npx 在本機執行 npm 套件；未宣告需要帳號、API 金鑰或環境變數。安裝器會把技能檔案寫入工具的 skills 資料夾並修改其 MCP 設定。
安裝前請注意
工具為唯讀，回傳固定的公開文字；託管伺服器會收到工具呼叫本身及 IP 位址等一般請求中繼資料。安裝器會修改工具設定檔（先備份），並在 ~/.aegis 下保存安裝紀錄；升級後的自動重新整理可用 AEGIS_NO_AUTO_REFRESH 關閉。技能僅限用於自有或獲明確授權的系統進行防禦性用途。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Aegis Security Skills，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.drupadsachania%2Faegis-skills/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "aegis-security-skills": {
      "type": "http",
      "url": "https://aegis-skills.vercel.app/api/mcp"
    }
  }
}

README

aegis-skills

24 defensive cybersecurity skills in the open Agent Skills format, with a native installer and a read-only MCP server.

Install

npx aegis-skills install --platform claude          # or codex, gemini, cursor, vscode, antigravity, allnpx aegis-skills install --platform claude --project

Skills go into each tool's own skills folder and the aegis MCP server is registered in its config (the file is backed up first). After an upgrade, installed skills refresh automatically; files you edited are kept as .bak. Opt out with AEGIS_NO_AUTO_REFRESH=1.

Claude Code plugin: /plugin marketplace add drupadsachania/aegis-skills, then /plugin install aegis-skills@aegis-skills.

Commands

install (alias init), uninstall, update, list, mcp. Run aegis --help.

MCP

npx aegis-skills mcp serves list_skills, get_skill and get_skill_phase on stdio. Hosted: https://aegis-skills.vercel.app/api/mcp.

What this plugin runs, sends and fetches

  • Claude Code plugin (.mcp.json): connects to one remote MCP server, https://aegis-skills.vercel.app/api/mcp. It runs no local command. The three tools (list_skills, get_skill, get_skill_phase) are read-only and return fixed public skill text. What is sent is the tool call itself (a skill name, a phase or a search word) and the usual request metadata such as your IP address. The server keeps only an in-memory request counter, makes no model calls and stores nothing. The skills themselves are plain Markdown that your assistant reads locally.
  • npx aegis-skills (the installer and stdio server): runs the pinned npm package aegis-skills. install writes skill files into your tool's skills folder and adds an aegis entry to its MCP config (backed up first). A ledger of what it installed is kept under ~/.aegis (override with AEGIS_HOME). mcp serves the same three read-only tools from the bundled skills on stdio. Neither command makes a network request of its own beyond npm downloading the package.
  • No telemetry, no analytics and no credentials. Nothing is read from your conversations, memory or uploaded files.

Every skill is for defensive use on systems you own or are explicitly authorized to assess.

Licence: Apache-2.0 OR MIT.

來源：packages/aegis/README.md，提交 d0b2072

工具

3

list_skills

List Aegis skills

List available defensive security skills, optionally filtered by family or a free-text query (matched against name, description, tags and frameworks).

輸入參數queryfamily

get_skill

Get an Aegis skill

Return a skill's description, frameworks, tags, context and ordered phase ids.

輸入參數name必填

get_skill_phase

Load a skill phase

Load the methodology content for one phase of a skill. The phase is given as a phase id or as a 0-based index among authored phases.

輸入參數name必填phase必填

版本歷史

1
  1. v1.5.0最新Oct 13, 2026

評分

已滿足適用檢查項的 90%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。