by hahwul · MCP Server · ★ 133
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
brew install gori
git clone https://github.com/hahwul/gori.gitTaken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 133 |
| Forks | 19 |
| Language | Crystal |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 73/100 |
| Open Issues | 5 |
| Last Updated | 2026-11-07 |
| Created | 2026-06-13 |
| Platforms | cli, mcp |
| Est. Tokens | ~17k |
Hack from the terminal. Installation • Usage • Documentation • Contributing gori (고리 — Korean for ring, link, loop) sits in the loop between your client and its target, capturing every request and response as a flow you can replay, fuzz, and scan across HTTP/1.1, HTTP/2, WebSocket, gRPC, and SSE, and intercept in flight on HTTP/1.1 and HTTP/2.
These tools work well together with gori for enhanced workflows:
Looking for a gori alternative? If you're comparing gori with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
AI-native security toolkit — fray go target.com scans everything. 7,800+ payloads, 98 WAF vendors, 42+ recon c
MCP server that connects AI assistants to HackerOne for bug bounty hunting
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply cha
MCP server enabling agents to debug HTTP requests better (using powhttp)
AI-powered penetration testing MCP server
MCP server for SSH: let Claude Code, Codex and any MCP client run commands, transfer files and manage servers
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: