# security-passwords

This skill adds curated password wordlists from SecLists to your agent for authorized login audits and credential testing.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 547 installs · ★ 393
- Author: Eyadkelleh
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Eyadkelleh/awesome-skills-security/tree/HEAD/skills/security-passwords/SKILL.md
- Updated: 2026-06-08
- HTML: https://affpapa.org/en/nevibecode/skills/security-passwords

## What it does

This skill packages a curated collection under 10MB extracted from the SecLists project. It includes five focused text files: `500-worst-passwords.txt`, `10k-most-common.txt`, `100k-most-used-passwords-NCSC.txt`, `darkweb2017_top-10000.txt`, and `probable-v2_top-12000.txt`. The full upstream repository requires 4.5 GB of disk space. This package keeps only essential wordlists to avoid heavy downloads.

All files reside in `references/Passwords` and load easily through automated testing scripts. The wordlists target password policy validation, credential spraying, and authorized penetration tests. Running dictionary attacks without explicit written permission is prohibited by the license rules.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/security-passwords/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/security-passwords/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/security-passwords/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/security-passwords/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install Eyadkelleh/awesome-skills-security security-passwords
```

2. **Manually: put the files in place**
- File: `.github/skills/security-passwords/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/Eyadkelleh/awesome-skills-security --path skills/security-passwords
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/security-passwords/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-passwords -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/Eyadkelleh/awesome-skills-security/tree/HEAD/skills/security-passwords/SKILL.md

## When to use it
- validate password strength against known weak combinations
- run authorized password spraying against login endpoints
- load targeted breach dictionaries for CTF competitions
- test authentication flows against leaked credential lists

## Example prompts
- Audit our auth endpoint using the wordlist in references/Passwords/500-worst-passwords.txt
- Write a Python script to validate account passwords against darkweb2017_top-10000.txt

## Similar
- [fix-security-vulnerabilities-with-strix](https://affpapa.org/en/nevibecode/skills/fix-security-vulnerabilities-with-strix.md) — skill · 15700 installs
- [pentestify-security-report-generator](https://affpapa.org/en/nevibecode/skills/pentestify-security-report-generator.md) — skill · 747 installs
- [macos-security-bypass](https://affpapa.org/en/nevibecode/skills/macos-security-bypass.md) — skill · 3500 installs
- [remediating-with-aws-security-agent](https://affpapa.org/en/nevibecode/skills/remediating-with-aws-security-agent.md) — skill · 1500 installs
- [email-and-password-best-practices](https://affpapa.org/en/nevibecode/skills/email-and-password-best-practices.md) — skill · 46900 installs
- [owasp-top-10-testing](https://affpapa.org/en/nevibecode/skills/owasp-top-10-testing.md) — skill · 12800 installs

From the same set: [eyadkelleh/awesome-skills-security](https://affpapa.org/en/nevibecode/by/eyadkelleh/awesome-skills-security.md) — 6 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md