skill CX Codex

security-passwords — Claude Code skill: how to install

Q: How do I install security-passwords in Claude Code?

Run `npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a claude-code`. The files will install directly into your agent setup.

This skill adds curated password wordlists from SecLists to your agent for authorized login audits and credential testing.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a claude-code

Open on GitHub

What security-passwords does

This skill packages a curated collection under 10MB extracted from the SecLists project. It includes five focused text files: 500-worst-passwords.txt, 10k-most-common.txt, 100k-most-used-passwords-NCSC.txt, darkweb2017_top-10000.txt, and probable-v2_top-12000.txt. The full upstream repository requires 4.5 GB of disk space. This package keeps only essential wordlists to avoid heavy downloads.

All files reside in references/Passwords and load easily through automated testing scripts. The wordlists target password policy validation, credential spraying, and authorized penetration tests. Running dictionary attacks without explicit written permission is prohibited by the license rules.

What it helps with

validate password strength against known weak combinations
run authorized password spraying against login endpoints
load targeted breach dictionaries for CTF competitions
test authentication flows against leaked credential lists

Example prompts for the agent

Audit our auth endpoint using the wordlist in references/Passwords/500-worst-passwords.txt
Write a Python script to validate account passwords against darkweb2017_top-10000.txt

How to install security-passwords

1Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a claude-code

2Manually: put the files in place

~/.claude/skills/security-passwords/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/security-passwords/

1Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a codex

2Manually: put the files in place

.agents/skills/security-passwords/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a cursor

2Manually: put the files in place

.cursor/skills/security-passwords/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install Eyadkelleh/awesome-skills-security security-passwords

2Manually: put the files in place

.github/skills/security-passwords/SKILL.md

1Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a gemini-cli

2Platform CLI

gemini skills install https://github.com/Eyadkelleh/awesome-skills-security --path skills/security-passwords

Manually: put the files in place

.devin/skills/security-passwords/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about security-passwords

How do I install security-passwords in Claude Code?

Run npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a claude-code. The files will install directly into your agent setup.

What does security-passwords do?

It provides curated password lists from the SecLists project for authorized credential testing and security validation.

How does this skill differ from the full SecLists repository?

The upstream SecLists repository takes 4.5 GB across multiple categories, while this skill packages only five essential password lists under 10MB.

Similar skills

Everything for Security →

fix-security-vulnerabilities-with-strix usestrix This skill triages validated Strix findings, fixes their root causes, and runs Strix again to verify the result. Use it after a CLI or cloud scan. CX Codex +1 15,700installs pentestify-security-report-generator reason-machines A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export. CX Codex +1 747installs macos-security-bypass yaklang A playbook for bypassing TCC, Gatekeeper, SIP and the sandbox on macOS. Built for authorized pentests and red team work. CX Codex +1 3,500installs remediating-with-aws-security-agent aws Pulls AWS Security Agent scan results and helps patch discovered vulnerabilities. Useful when you need to triage penetration test findings directly in your repo. CX Codex +1 1,500installs email-and-password-best-practices better-auth Configures email verification, password reset flows, and password policies in Better Auth. Helpful when adding credential authentication to your backend. CX Codex +1 46,900installs owasp-top-10-testing usestrix Runs Strix AI agents to execute exploits across OWASP Top 10:2025 categories. Useful for verifying attack paths with concrete proofs-of-concept before audits. CX Codex +1 12,800installs

From the same set6

security-fuzzing Provides curated SecLists fuzzing payloads for injection testing and input validation. Essential for authorized code audits, bug bounties, and CTFs. CX Codex +1 583installs security-payloads Delivers curated SecLists attack payloads for testing anti-virus filters and file upload handlers. Built for authorized penetration testers and auditors. CX Codex +1 564installs llm-testing A security testing prompt suite to evaluate language models for bias, data leakage, and adversarial bypasses. CX Codex +1 544installs security-webshells A set of PHP, ASP, ASPX, JSP, Python and Perl web shell samples for testing detection systems and analysing malware. CX Codex +1 539installs security-usernames Curated username wordlists from SecLists for user discovery, enumeration, and default credential testing in authorized security assessments. CX Codex +1 537installs