Aegis Security Skills
Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.
Should I use this
Quality & Safety
Findings (1)
- LOWTool 'get_skill' description lacks action verbin get_skill
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"aegis-skills": {
"command": "npx",
"args": [
"aegis-skills"
]
}
}
}Runnable packages
1.5.0stdioRemote endpoints
https://aegis-skills.vercel.app/api/mcpstreamable-httpWhat it can do
Tool inventory
Tools (3)
🟢list_skills(query, family)
List available defensive security skills, optionally filtered by family or a free-text query (matched against name, description, tags and frameworks).
Input Schema
{
"type": "object",
"properties": {
"query": {
"type": "string",
"maxLength": 200,
"description": "Free-text filter"
},
"family": {
"type": "string",
"enum": [
"framework",
"intel",
"response",
"domain",
"governance"
],
"description": "Skill family: framework, intel, response, domain, governance"
}
},
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}🟢get_skill(name)
Return a skill's description, frameworks, tags, context and ordered phase ids.
Input Schema
{
"type": "object",
"properties": {
"name": {
"type": "string",
"pattern": "^[a-z0-9][a-z0-9-]{0,63}$",
"description": "Skill slug, e.g. \"exposure-validation\""
}
},
"required": [
"name"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}🟢get_skill_phase(name, phase)
Load the methodology content for one phase of a skill. The phase is given as a phase id or as a 0-based index among authored phases.
Input Schema
{
"type": "object",
"properties": {
"name": {
"type": "string",
"pattern": "^[a-z0-9][a-z0-9-]{0,63}$",
"description": "Skill slug"
},
"phase": {
"type": "string",
"minLength": 1,
"maxLength": 80,
"description": "Phase id (e.g. \"edr-deployment\") or index (e.g. \"0\")"
}
},
"required": [
"name",
"phase"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}Community
Evidence