cerno: TUI and MCP server for triaging multi-scanner vulnerability findings

by ridgebackinfosec · MCP Server · ★ 71

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install cerno

pipx install git+https://github.com/ridgebackinfosec/cerno.git
pip install git+https://github.com/ridgebackinfosec/cerno.git

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: CAUTION · quality 72/100

Flagged: sudo usage. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

claudecliinfosecmcpmcp-servermetasploitnessusnetexecnmapnuclei

Quick Facts

Stars71
Forks7
LanguagePython
CategoryMCP Server
LicenseMIT
Quality Score72/100
Open Issues9
Last Updated2026-11-06
Created2025-10-31
Platformsclaude-code, cli, mcp, python
Est. Tokens~19k

About cerno

Cerno A TUI tool for reviewing Nessus scan findings and orchestrating security tools (nmap, NetExec, custom commands). Import files into a SQLite database for organized, persistent vulnerability verification and exploitation.

Compatible Skills

These tools work well together with cerno for enhanced workflows:

  • red-run — semantic(0.31)+complementary+same_lang+similar_pop+shared_platform (61%)

cerno alternative? Top 6 similar tools

Looking for a cerno alternative? If you're comparing cerno with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • tengu by rfunix · ⭐ 64

    AI-powered penetration testing MCP server

  • RedTeam-Agent by ktol1 · ⭐ 66

    RedTeam-MCP: AI-Powered Autonomous Red Team Framework via Model Context Protocol. AI红队与内网渗透自动化框架,支持 gogo, fsca

  • AutoRedTeam-Orchestrator by Coff0xc · ⭐ 263

    MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static AI/MCP attack-surface

  • mychatarchive by 1ch1n · ⭐ 65

    Local-first AI memory archive. Import ChatGPT, Claude, and Grok exports, generate semantic embeddings, and sea

  • Wazuh-MCP-Server by gensecaihq · ⭐ 246

    Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability

  • kali-pentest by x-glacier · ⭐ 158

    Kali Linux penetration testing skill for AI agents (Claude Code, OpenClaw, Hermes Agent). 200+ CLI tools, 15 s

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools