Miggo agent skills for Claude Code, Cursor and RevampKey

5 ready-made playbooks that teach an AI agent how to do real Miggo work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect Miggo

Connect Miggo once and all 5 skills install themselves and stay up to date. Mac, Windows and Linux.

All 5 Miggo skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereRead-only1 Miggo tools

Use the Miggo connector safely and efficiently

Shows how an AI assistant should confirm your Miggo environment, choose between count, facets, search and get, and page through live security inventory without overloading the context. It reads data only and does not change anything in Miggo.

Use it when

You have just connected Miggo and want to know what it can answer
A Miggo question comes back empty or incomplete and you need to check why
You want the assistant to size a question before pulling records

Tools it uses

services_count

Example

How many internet-facing endpoints do I have in Miggo, and show me the most critical ones?

Miggo reports 37 internet-facing endpoints. I pulled the top 10 sorted by risk, and two of them carry an unauthenticated flag, so I opened those two in full before drawing conclusions. The other 27 are listed by count only, and I have not inspected them.

Use in RevampKeyRead the full skill →

Read-only12 Miggo tools

CVE exposure check with Miggo

Checks whether a named CVE or vulnerable package is present in your Miggo environment, traces which services and endpoints it reaches, and separates confirmed exposure from what could not be established. It asks before changing any status.

Use it when

A new advisory is published and you need to know if you run the affected library
A security team asks which services run a specific package version
You want to know whether a vulnerable component is reachable from the internet

Tools it uses

dependencies_search
vulnerabilities_search
dependencies_count
vulnerabilities_count
dependencies_facets
vulnerabilities_facets
dependencies_get
vulnerabilities_get
services_get
endpoints_search
endpoints_get
findings_search

Example

Am I affected by CVE-2024-3094?

Your environment has the affected package on two services. The checkout-api service runs the vulnerable version and its endpoints are on the public surface, so that one is confirmed exposed and high priority. The reporting-worker service also runs it, but I found no external path to it, so it is present with reach unknown. I could not establish the version on a third service because its record has no version string.

Use in RevampKeyRead the full skill →

Read-only8 Miggo tools

Review your internet-facing endpoints with Miggo and AI

Maps which endpoints in your live environment are reachable from the internet, which lack authentication evidence, and which AI-related endpoints need attention. It reads full evidence only for the records that matter and never changes anything without asking first.

Use it when

You want to know which APIs can be reached from the internet
You need to find endpoints with no authentication evidence
You are auditing AI-related endpoints in your applications

Tools it uses

services_facets
endpoints_facets
endpoints_count
endpoints_search
endpoints_get
findings_search
third_parties_search
services_get

Example

Which of my internet-facing endpoints have no authentication evidence, and do any of them have findings?

Of 340 endpoints in scope, 58 are reachable from the internet. Of those, 9 have no authentication status recorded, and 3 of those also carry open findings. The top priority is the public admin route on the billing service, which has no auth evidence and links to two findings. I did not change anything; tagging or reconfiguring these needs your go-ahead.

Use in RevampKeyRead the full skill →

Read-only10 Miggo tools

Triage your live attack surface with AI

Ranks the findings and vulnerabilities in your Miggo environment by internet exposure and business impact, producing a short prioritized fix list. It only reads data and never changes findings or services.

Use it when

You want a security overview and need to know what to fix first.
Your findings count is too large to act on and you need the few items that matter most.
You are preparing a remediation plan for the next sprint.

Tools it uses

findings_count
vulnerabilities_count
services_count
findings_facets
vulnerabilities_facets
services_search
endpoints_search
findings_get
vulnerabilities_get
services_get

Example

Give me a security overview of my environment and tell me the top five things to fix first.

Of 412 open findings, 37 sit on internet-facing services, and 9 of those affect the checkout service through one vulnerable library. Fix first: upgrade that library on checkout (removes 9 findings), then restrict the unauthenticated export endpoint. The remaining 375 are internal and grouped by category in the backlog.

Use in RevampKeyRead the full skill →

Read-only8 Miggo tools

Map a service's blast radius with Miggo and AI

Walks outward from one named service through its third parties, endpoints, dependencies and findings to show what a compromise or outage would touch. It reads only and never changes anything in Miggo.

Use it when

You want to know what a service connects to before deciding how urgent a finding is.
You need to explain the impact of an outage or breach on a named service.
You are reviewing a critical service and want its downstream dependencies in one place.

Tools it uses

services_search
services_get
third_parties_search
third_parties_get
endpoints_search
dependencies_search
findings_search
vulnerabilities_search

Example

What's the blast radius if the checkout service is compromised?

Checkout is a wide blast radius. The most damaging path is an internet-facing endpoint leading to checkout and then a payments third party. Checkout has 14 endpoints in total, 9 of them internet-facing. Two shared dependencies also serve 4 other services. Two hops were walked; the fraud-scoring link could not be confirmed.

Use in RevampKeyRead the full skill →

Get all 5 without copying a file

RevampKey adds the skills when you connect Miggo, updates them for you and removes them when you disconnect.

Download RevampKey

How Miggo skills work

Connect Miggo
The Miggo MCP server gives the agent its tools.
Ask in plain words
“Am I affected by CVE-2024-3094?” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install Miggo skills

In RevampKey the skills install themselves when you connect Miggo. In other tools each skill is one folder with a SKILL.md file, and you also need the Miggo MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect Miggo. All 5 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “Am I affected by CVE-2024-3094?”
Download RevampKeyConnect Miggo · 1 click
Get RevampKey to connect Miggo
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and Miggo is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials cve-exposure-check endpoint-exposure-review security-exposure-triage service-blast-radius; do curl -fsSL --create-dirs -o .claude/skills/miggo-$s/SKILL.md https://revampkey.com/marketplace/miggo/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the Miggo MCP server in Claude Code.

Run this in your project folder to add all 5 skills:

for s in essentials cve-exposure-check endpoint-exposure-review security-exposure-triage service-blast-radius; do
  curl -fsSL --create-dirs -o .claude/skills/miggo-$s/SKILL.md https://revampkey.com/marketplace/miggo/skills/$s/SKILL.md
done

Ask in plain language, for example “Am I affected by CVE-2024-3094?”

Into the shared .agents/skills folder

Connect the Miggo MCP server in Cursor.

Run this in your project folder to add all 5 skills:

for s in essentials cve-exposure-check endpoint-exposure-review security-exposure-triage service-blast-radius; do
  curl -fsSL --create-dirs -o .agents/skills/miggo-$s/SKILL.md https://revampkey.com/marketplace/miggo/skills/$s/SKILL.md
done

Ask in plain language, for example “Am I affected by CVE-2024-3094?”

Into the shared .agents/skills folder

Connect the Miggo MCP server in Codex.

Run this in your project folder to add all 5 skills:

for s in essentials cve-exposure-check endpoint-exposure-review security-exposure-triage service-blast-radius; do
  curl -fsSL --create-dirs -o .agents/skills/miggo-$s/SKILL.md https://revampkey.com/marketplace/miggo/skills/$s/SKILL.md
done

Ask in plain language, for example “Am I affected by CVE-2024-3094?”

Into the shared .agents/skills folder

Connect the Miggo MCP server in VS Code.

Run this in your project folder to add all 5 skills:

for s in essentials cve-exposure-check endpoint-exposure-review security-exposure-triage service-blast-radius; do
  curl -fsSL --create-dirs -o .agents/skills/miggo-$s/SKILL.md https://revampkey.com/marketplace/miggo/skills/$s/SKILL.md
done

Ask in plain language, for example “Am I affected by CVE-2024-3094?”

RevampKey or copy the files?

In RevampKey

One click when you connect Miggo
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the Miggo MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

Miggo skills FAQ

What is a Miggo agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Miggo skill describes one job, which Miggo tools to use in which order, what to check first and when to stop and ask you.

Do the Miggo skills change anything on their own?

5 of the 5 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Miggo.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Miggo; elsewhere you copy the folders into your project or skills directory.

Do I need the Miggo MCP server too?

Yes. The skills tell the agent how to do the work; the Miggo MCP server gives it the tools to do it. The Miggo MCP setup guide covers every client.

Miggo MCP server setup · This page as Markdown

Put Miggo’s best workflows in your agent

Download RevampKey, connect Miggo and ask your first question in about a minute.

Download RevampKey Connect Miggo · 1 click

All 5 Miggo skills

Use the Miggo connector safely and efficiently

Use it when

Tools it uses

CVE exposure check with Miggo

Use it when

Tools it uses

Review your internet-facing endpoints with Miggo and AI

Use it when

Tools it uses

Triage your live attack surface with AI

Use it when

Tools it uses

Map a service's blast radius with Miggo and AI

Use it when

Tools it uses

Get all 5 without copying a file

How Miggo skills work

How to install Miggo skills

RevampKey or copy the files?

In RevampKey

Copy into your project

Miggo skills FAQ

Put Miggo’s best workflows in your agent

Skills for related tools