CyberAgents Exchange

Open, vendor-neutral exchange to share cybersecurity AI agents, skills, and MCP servers. Built by defenders, for defenders.

[CyberAgents Exchange @CyberAgentEx]

Our Discord community is live!

Come share what you're building, get help, and meet others working on agents, skills, MCP servers, and playbooks for security.

Open-source and vendor-neutral.

https://t.co/ZfqDzgnRaV

[CyberAgents Exchange @CyberAgentEx]

Run all three at once with /php2shell-playbook in Claude Code. All three are contributed by Tenable, and the playbook walks through each step.

Get the playbook on the CyberAgents Exchange: https://t.co/gHY6YAJnKS

[CyberAgents Exchange @CyberAgentEx]

Step 3: Hunt for it. Were we hit before we patched?

SOC-Hunter runs a structured threat hunt across your security tools to look for signs of compromise.

Run it on its own: /soc-hunter

[CyberAgents Exchange @CyberAgentEx]

Step 2: Fix it. What do we fix first?

The Remediation Priority & Impact Agent ranks your affected hosts so the most exposed ones get fixed first.

Run it on its own: /fix-today

[CyberAgents Exchange @CyberAgentEx]

PHP2Shell is a set of two critical PHP flaws that allow attackers to run code on web servers without logging in. Attacks have already been reported.

One Claude Code command, /php2shell-playbook, takes you from exposed to patched and checked for compromise.

A thread:

[CyberAgents Exchange @CyberAgentEx]

Step 1: Find it. Where are we exposed?

The PHP2Shell Tenable Skill reads your assets in Tenable One and provides a report on what needs attention.

Run it on its own: /php2shell-tenable

[Christine Bufalini @cbufalini]

New on the CyberAgents Exchange: PHP2Shell Tenable Skill Reports exposure to PHP2Shell (CVE-2026-109618, CVE-2026-109619) from your Tenable data via Tenable Hexa AI MCP. Read-only. Outputs HTML, PDF and CSV. https://t.co/NdNuOcN9Un https://t.co/6nCDPH9d8p

[Jeremiah @macrofern]

For the tech nerds concerned about cyber security, the Tenable Cyber Agent Exchange is a free, open source repository for sharing to make your agents more effective during this storm. https://t.co/6yDEb7bOIb

[CyberAgents Exchange @CyberAgentEx]

New skill: PHP2Shell Tenable Skill

Reports exposure to PHP2Shell (CVE-2026-109618, CVE-2026-109619) from your Tenable data via Tenable Hexa AI MCP. Read-only. Outputs HTML, PDF and CSV.

https://t.co/KEe4wIyRLN

[CyberAgents Exchange @CyberAgentEx]

Your build could land in front of judges from @TenableSecurity and @AnthropicAI. SWARM Global's top teams get the opportunity to pitch live on Nov 5. Think you've got it?

https://t.co/f31S7NGnBT

#SWARMGlobal

[CyberAgents Exchange @CyberAgentEx]

Encrypted malware in. New detection rules out. Nobody in between.

Tom Abai at @TenableSecurity built the "Malware Analyst" skill: it writes its own deobfuscator, decodes the sample, and writes the Sigma and YARA rules itself.

Free on the #CyberAgentsExchange: https://t.co/QngSHgOvMl

[CyberAgents Exchange @CyberAgentEx]

Win big at #SWARMGlobal, happening Nov 2-6. Prizes include:

💰 $10K in Claude credits (split among 1st, 2nd, 3rd place)
🎟️ A spot at EXPOSURE 2027
💻 Publication to the CyberAgents Exchange
🏆 SWARM Winner's patch

Register here: https://t.co/f31S7NGnBT

#Tenable #Anthropic

[CyberAgents Exchange @CyberAgentEx]

Monday question for #infosec folks. What’s the first thing you’d hand to an AI agent, and the one thing you’d keep for yourself?

[CyberAgents Exchange @CyberAgentEx]

Join @TenableSecurity & OpenAI Oct 28, 11:30 AM ET: Vetting open-source AI agents with GPT cyber models

🤖 Vet open-source agents, skills & MCP servers with Exchange Inspector
💡 Lessons from frontier cyber models in real security work
🚀 Explore & contribute to the CyberAgents Exchange

https://t.co/8mpI9nN4tR

[Tenable @TenableSecurity]

Win big at #SWARMGlobal, happening Nov 2-6. Prizes include:

💰 $10K in Claude credits (split among 1st, 2nd, 3rd place)
🎟️ A spot at EXPOSURE 2027
💻 Publication to the CyberAgents Exchange
🏆 SWARM Winner’s patch

Register here: https://t.co/J4aZ16SNZa

#Tenable #Anthropic #Cybersecurity @CyberAgentEx

[CyberAgents Exchange @CyberAgentEx]

A risk score can’t tell you which vulnerabilities attackers are actually using. An agent can.

One command "/fix-today," and the Remediation Priority & Impact Agent ranks your fixes by real exploitation and blast radius, with the exact KB article and package version for each, plus change tickets ready to paste.

Free and open source on the Exchange, built to run on @Tenable One: https://t.co/XmR989NSCm

#AgenticAI #VulnerabilityManagement #CyberAgentsExchange

[CyberAgents Exchange @CyberAgentEx]

What is SWARM Global? A free virtual build event where security practitioners build open-source AI agents, skills & MCP servers solving real problems like alert triage and remediation orchestration.

Register now https://t.co/f31S7NGnBT

#SWARMGlobal

[CyberAgents Exchange @CyberAgentEx]

@0xTobiasDev Let's make dreams come true!

[CyberAgents Exchange @CyberAgentEx]

Ask Tenable Security Center anything in plain English.

Ahmad Jaber’s https://t.co/4EcBArYnGT MCP Server turns a three-hour Log4Shell hunt into one prompt: find it, rank it, open the Jira ticket, ping the manager. 15 tools, 100+ resources, your RBAC intact.

Open source. Read the code, then deploy it: https://t.co/CW2gKEr7X5

#MCP #AIAgents

[CyberAgents Exchange @CyberAgentEx]

🐝 SWARM Global is going virtual, Nov 2-6.

Haven’t registered yet? Hear from last year’s winners on what the competition was really like.

[Tenable @TenableSecurity]

Mark your calendars: #SWARMGlobal is coming Nov 2-6. A virtual agentic AI build event, sponsored by Tenable with support from Anthropic. All skill levels are welcome. Cool prizes to win! Register: https://t.co/2puASmOzEj

@CyberAgentEx

[CyberAgents Exchange @CyberAgentEx]

Pentesters didn’t sign up for screenshot folders and report formatting. Now an AI skill will do it all for you.

The Webapp Testing Checklist skill walks all 12 OWASP WSTG categories, files the evidence as you go, and writes the findings report. No payloads, no scanners, just a junior tester in the backseat. Kevin, who built the skill, puts the savings at 40% to 50% of a tester’s time.

Free and open source on the CyberAgents Exchange: https://t.co/bcnEEWd0i3

#AgenticAI #Pentesting