x=hub

your toolset

    build deployment
    sign in

    capa

    projectother official scan blocked
    io.github.infragate/capa · v
    deploy just this

    One capabilities.yaml wires skills, tools, rules, sub-agents, MCP servers, and plugins into Cursor, Claude Code, Codex, Windsurf, GitHub Copilot, and 30+ other AI coding agents

    run it

    blocked by the security scan
    Blocked by the security scanThe worker scanned github.com/infragate/capa at 2ba897b6751c for v with [email protected][email protected] on 2026-10-17, before building it, and found code that looks malicious: threat-runtime-obfuscation-steganography in src/shared/__tests__/skill-security.test.ts:43. It built nothing, and the hub offers no way to run this version: no package, no image, no build, no web service. An operator can look at the findings and let it run; a new version is scanned again.

    connect to it

    copy what your client needs
    {
  "mcpServers": {
    "capa": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    #!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add capa -- CHANGE_ME

    {
  "mcpServers": {
    "capa": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    {
  "servers": {
    "capa": {
      "type": "stdio",
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    name: my-agent
target: local
servers:
- hub: io.github.infragate/capa
    • not probed yet: tools unpinned, ingest lists them
    • blocked: the worker's security scan of github.com/infragate/capa at 2ba897b6751c on v found code that looks malicious (threat-runtime-obfuscation-steganography); nothing is deployed for it

    tools

    Probe result: faileddocker: security scan: github.com/infragate/capa at 2ba897b6751c has code that looks malicious: threat-runtime-obfuscation-steganography in src/shared/__tests__/skill-security.test.ts:43

    runs · 1

    the latest tests of this entry by the hub and its workers, newest first
    dateworkermethodstatussandboxreason
    2026-10-17 12:41 local-mac-vm docker failed gvisor docker: security scan: github.com/infragate/capa at 2ba897b6751c has code that looks malicious: threat-runtime-obfuscation-steganography in src/shared/__tests__…