# MCP Shamash

> Use this tool when you need to identify vulnerabilities and ensure compliance in your projects, as it enables security auditing, penetration testing, and validation through integrations with tools like Semgrep and OWASP ZAP. It solves problems related to security risks and compliance gaps by enforcing strict project boundaries and supporting major compliance frameworks like OWASP, CIS, and NIST. It takes in project code and configuration as input and outputs detailed security reports and compliance validation results.

Canonical page: https://skillsregistry.net/skills/neotecdigital-mcp-shamash  
JSON: https://api.skillsregistry.net/v1/skills/neotecdigital-mcp-shamash

## Description

Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.

## Trust

- **Trust score (0–1):** 0.72
- **Verification tier:** verified
- **Last scanned:** 2026-09-19

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** security
- **Updated:** 2026-09-19

## Source

- **Source listing:** [Glama](https://glama.ai/mcp/servers/dkack5y37f)
- **Repository:** <https://github.com/NeoTecDigital/mcp_shamash>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "neotecdigital-mcp-shamash"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/neotecdigital-mcp-shamash` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/neotecdigital-mcp-shamash/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt