NeVibeCode · 17,648 items
Everything for Gemini CLI
What installs into Gemini CLI: skills, MCP servers and plugins. Each card has an install command and example prompts.
http2-specific-attacks skill A skill for assessing HTTP/2-specific attack paths such as h2c, pseudo-headers, HPACK, and multiplexing. Use it when an authorised target supports HTTP/2.
CX Codex +1
3,600installs
clickjacking skill A clickjacking playbook: find out whether a page can be framed and whether an invisible overlay can trigger a sensitive action.
CX Codex +1
3,600installs
jndi-injection skill A playbook for JNDI injection: lookup abuse over RMI and LDAP, JDK version limits, and post-8u191 bypasses. Useful when testing Java apps for Log4Shell.
CX Codex +1
3,600installs
active-directory-acl-abuse skill A playbook for abusing misconfigured Active Directory permissions: dangerous ACEs, DCSync, shadow credentials, LAPS and BloodHound paths.
CX Codex +1
3,600installs
csv-formula-injection skill A skill for testing how CSV exports and spreadsheets handle formulas coming from user fields. Useful when reports or exports reach a spreadsheet.
CX Codex +1
3,600installs
expression-language-injection skill An Expression Language injection attack playbook for Java frameworks. Helps security testers detect and exploit vulnerabilities across SpEL, OGNL, and Java EL.
CX Codex +1
3,600installs
dependency-confusion skill Reviews dependency-confusion risk in manifests and CI. Use it for npm, pip, RubyGems, Maven, Composer, and Docker supply-chain checks.
CX Codex +1
3,600installs
subdomain-takeover skill A playbook for finding dangling CNAME, NS and MX records and claiming the resources behind them. Useful for pentests and bug bounty work.
CX Codex +1
3,600installs
http-host-header-attacks skill Playbook for HTTP Host header attacks: password reset poisoning, cache poisoning, routing SSRF, and virtual host bypass. Useful for auditing applications that trust incoming headers.
CX Codex +1
3,600installs
web-cache-deception skill This skill guides checks for cached authenticated pages and cache poisoning conditions. Use it when auditing a CDN, reverse proxy, or application cache.
CX Codex +1
3,600installs
mobile-ssl-pinning-bypass skill A playbook for bypassing SSL pinning in mobile apps: Android and iOS methods plus framework-specific tricks for Flutter, React Native and Xamarin.
CX Codex +1
3,600installs
insecure-source-code-management skill Detects exposed .git, .svn, and .hg repositories along with leaked .env files. Guides extraction workflows during authorized security tests.
CX Codex +1
3,600installs
crlf-injection skill A playbook for CRLF injection: smuggling carriage-return and line-feed characters into response headers, redirects and logs. Useful when scanners miss it.
CX Codex +1
3,600installs
symbolic-execution-tools skill A symbolic execution playbook that keeps your agent's angr, Z3 and Unicorn scripts from breaking on state setup and missing libc hooks.
CX Codex +1
3,600installs
browser-exploitation-v8 skill A playbook for exploiting JavaScript engine bugs: JIT type confusion, bounds elimination, V8 sandbox bypass. Built for CTF work and Chrome bug analysis.
CX Codex +1
3,600installs
csp-bypass-advanced skill A skill for picking apart Content Security Policy: which directives the policy leaves open and how data leaves the page without JavaScript.
CX Codex +1
3,600installs
race-condition skill A skill for testing web apps for race conditions and TOCTOU: parallel requests, rate-limit bypass, one-time operations.
CX Codex +1
3,600installs
http-parameter-pollution skill Guides agents through HTTP Parameter Pollution tests when WAFs, proxies, and backends parse duplicate parameters differently. Built for API security assessments.
CX Codex +1
3,600installs
deserialization-insecure skill This skill helps find unsafe deserialization in Java, PHP, and Python and review possible attack chains. Use it for source and traffic analysis.
CX Codex +1
3,600installs
format-string-exploitation skill Walks through exploiting printf-family calls that take a user-controlled format string: stack reads, writes via %n, GOT overwrites. Built for CTF work and binary review.
CX Codex +1
3,600installs
kernel-exploitation skill A Linux kernel security research playbook for AI coding assistants. It covers QEMU debugging environments and mitigation mechanisms like KASLR and SMEP.
CX Codex +1
3,600installs
request-smuggling skill This skill tests HTTP desynchronization between front proxies and origin servers. Use it for CL.TE, TE.CL, HTTP/2-to-HTTP/1, and client-side desync checks.
CX Codex +1
3,600installs
file-access-vuln skill A routing skill for testing download endpoints, file paths, LFI and upload flows. It points the agent at the right topic skill.
CX Codex +1
3,600installs
xxe-xml-external-entity skill Guides your agent through XXE vulnerability auditing across XML, SVG, SOAP, and Office document parsing pipelines.
CX Codex +1
3,600installs
graphql-and-hidden-parameters skill A playbook for GraphQL and hidden parameter testing: introspection, batching, undocumented fields and authorization gaps.
CX Codex +1
3,600installs
ssti-server-side-template-injection skill An SSTI playbook: find server-side template injection, fingerprint the engine, and follow the chain to command execution.
CX Codex +1
3,600installs
binary-protection-bypass skill A skill that walks through ELF binary protections and the bypass for each one. Useful for CTF work and exploit analysis.
CX Codex +1
3,700installs
cmdi-command-injection skill This skill helps find command injection where user input reaches shells, process execution, converters, import pipelines, or blind OOB sinks.
CX Codex +1
3,700installs
anti-debugging-techniques skill Anti-debugging detection and bypass playbook for protected Linux and Windows binaries. Helps reverse engineers handle ptrace, PEB flags, execution timing checks, and thread hiding.
CX Codex +1
3,700installs
monetizing-innovation skill This skill tests willingness to pay, shapes pricing and packaging, and helps choose a monetization model before product work is locked in.
CX Codex +1
3,100installs
good-strategy-bad-strategy skill Turns a strategy doc into Rumelt's kernel — an honest diagnosis, a guiding policy, coherent action — and flags the fluff that passes for planning.
CX Codex +1
3,100installs
academic-humanizer skill Edits AI-assisted scientific papers and grant proposals into clear academic prose. It keeps citations and numbers intact without casualizing the text.
CX Codex +1
539installs
uv skill Directs AI coding assistants to manage Python projects and scripts with uv instead of pip or poetry. Handles lockfiles, dependencies, and tool execution.
CX Codex +1
4,900installs
tanstack-router-best-practices skill A rule set for TanStack Router in React: type safety, data loading, search params, navigation. Useful once routing in a project grows past a few pages.
CX Codex +1
7,100installs
ralph-tui-create-beads-rust skill Turns a PRD into an epic plus child beads through the br CLI, so ralph-tui can run the tasks on its own.
CX Codex +1
986installs
team-level skill Orchestrates game development subagents to design complete playable areas. It balances spatial layout, narrative beats, art requirements, and test checklists.
CX Codex +1
447installs
banner-creator skill Generates banners through AI image generation, offering batch variations, an HTML preview, and ratio cropping.
CX Codex +1
1,800installs
momentic-result-classification skill Reads failed Momentic runs through MCP, pinpoints the step where the run first went wrong, explains why, and files the verdict under a category.
CX Codex +1
68,500installs
momentic-test skill Guides coding agents in writing, running, and editing Momentic browser E2E tests in YAML format. Useful when building browser tests from natural language prompts.
CX Codex +1
68,500installs
documentation skill Structures technical documentation using the Diátaxis framework. It organizes content into tutorials, how-to guides, reference pages, and conceptual explanations.
CX Codex +1
1,800installs
4,681–4,720 of 17,648
