Excession Labs

GitHub profile1 plugin in the catalog

Plugins by Excession Labs

1 plugins by Excession Labs in the catalog, most-starred first.

Excession Labshermes-security-pluginCheck the security headers of a public URL and look up sourced penetration testing provider data through two remote MCP servers (Streamable HTTP, no sign-in, no keys): check_security_headers on penetrationtestservices.com, and list_providers and get_provider on pentestcompare.com. Bundles the check-security-headers workflow skill. Agent Plugins v1 package (plugin.json + mcp.json + skills/), configuration only. Disclosure: hosted-only connector with no local code; the URL you check is sent to penetrationtestservices.com, which fetches it with one GET per redirect. The pts server also has request_pentest, which sends a contact request to Excession Labs and needs an agent key the plugin does not hold. Both servers are marked untrusted, so Hermes asks before any call that is not read-only. The tool set is served by the remote servers at runtime and is not covered by the pinned sha.Communitytools