Ethical Hacker Toolkit
Defensive security expertise: vulnerability code reviews, STRIDE threat models, prioritized hardening.
by Kenji Yoshida4.5(2)804 installs
About this skill
Use case
Ethical Hacker GPT is a Store top-100 regular — this take is strictly defensive. OWASP-mapped code reviews with fixed code, STRIDE threat models that pick the 10 realistic threats over checkbox exercises, and hardening lists ordered by the attack they prevent.
Example prompts
- "Security-review this file-upload endpoint"
- "Threat model our license-key validation flow"
Connect in under a minute
- Choose a plan (the free tier needs no card).
- Copy your license key from the dashboard.
- Add the endpoint to your MCP client:
claude mcp add ethical-hacker-toolkit https://agently.tokyocorp.net/mcp/ethical-hacker-toolkit \
--transport http \
--header "Authorization: Bearer YOUR_LICENSE_KEY"
Works the same in Cursor and ChatGPT developer mode — every successful tool call is metered, failed calls are never billed.
Tools included
security_review_codeReview code for vulnerabilities (OWASP Top 10, injection, authz, secrets)threat_modelBuild a STRIDE threat model for a system or featurehardening_checklistGenerate a prioritized hardening checklist for a stack or serviceReviews
4.0(1)Threat models stay realisticPromptLabs Studio · 7/20/2026
Ten threats that could actually happen to us, not fifty theoretical ones. Refreshing.
5.0(1)Found a real path traversalToolsmith Collective · 7/20/2026
Second file we ran through it. Quoted the line, one-sentence exploit scenario, fixed code. Sold.