skill CX Codex

security-usernames — Claude Code skill: what it does, how to install

Q: How do I install security-usernames in Claude Code?

Run `npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a claude-code` in your terminal.

Q: What files are provided by security-usernames?

It provides `top-usernames-shortlist.txt` with frequent usernames, `cirt-default-usernames.txt` with default system accounts, and `Names/names.txt` with common names.

Curated username wordlists from SecLists for user discovery, enumeration, and default credential testing in authorized security assessments.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a claude-code

Open on GitHub

What security-usernames does

This skill installs curated username wordlists from the SecLists repository into your agent environment. It supplies files such as top-usernames-shortlist.txt for common handles, cirt-default-usernames.txt for factory defaults, and Names/names.txt for common personal names.

Targeting systems with these lists requires explicit written permission, defined bug bounty scope, or dedicated CTF infrastructure. The dictionaries reside in references/Usernames, ready for consumption by custom scripts during authentication testing.

What it helps with

enumerate user accounts during authorized penetration tests
identify active default system credentials on targeted assets
prepare focused username wordlists for CTF challenges
audit account validation behavior on test targets

Example prompts for the agent

Load top-usernames-shortlist.txt from references/Usernames to inspect common handles
Read cirt-default-usernames.txt to test known default accounts
Inspect references/Usernames and list all available wordlist files

How to install security-usernames

1Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a claude-code

2Manually: put the files in place

~/.claude/skills/security-usernames/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/security-usernames/

1Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a codex

2Manually: put the files in place

.agents/skills/security-usernames/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a cursor

2Manually: put the files in place

.cursor/skills/security-usernames/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install Eyadkelleh/awesome-skills-security security-usernames

2Manually: put the files in place

.github/skills/security-usernames/SKILL.md

1Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a gemini-cli

2Platform CLI

gemini skills install https://github.com/Eyadkelleh/awesome-skills-security --path skills/security-usernames

Manually: put the files in place

.devin/skills/security-usernames/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about security-usernames

How do I install security-usernames in Claude Code?

Run npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a claude-code in your terminal.

What files are provided by security-usernames?

It provides top-usernames-shortlist.txt with frequent usernames, cirt-default-usernames.txt with default system accounts, and Names/names.txt with common names.

When is it permissible to use this skill?

Usage is strictly limited to authorized assessments with written permission, verified bug bounty targets, CTFs, and controlled educational environments.

Similar skills

Everything for Security →

testing-jwt-token-security mahipal A skill that walks an agent through JWT weaknesses: algorithm confusion, weak HMAC secrets, authorization bypass. Built for API and SSO pentests. CX Codex +1 536installs analyzing-ios-app-security-with-objection mahipal A skill for runtime iOS app testing with Objection and Frida: dump the keychain, bypass SSL pinning, check jailbreak detection. CX Codex +1 436installs security-auditor sickn33 Turns your AI coder into a security expert: conducts audits, analyzes vulnerabilities, reviews SDLC and compliance with OWASP, GDPR, PCI-DSS standards. CX Codex +1 1,400installs cargo-fuzz trailofbits Sets up cargo-fuzz inside a Cargo-based Rust crate and walks through the harness, sanitizers and crash triage. CX Codex +1 5,400installs burpsuite-project-parser trailofbits Explores and queries Burp Suite project files from the command line. It extracts proxy history, scanner findings, and HTTP traffic without opening the desktop app. CX Codex +1 5,100installs api-auth-and-jwt-abuse yaklang A playbook for probing bearer tokens, API keys and claim trust. Useful when an API leans on JWT or request headers for identity. CX Codex +1 3,800installs

From the same set6

security-fuzzing Provides curated SecLists fuzzing payloads for injection testing and input validation. Essential for authorized code audits, bug bounties, and CTFs. CX Codex +1 583installs security-payloads Delivers curated SecLists attack payloads for testing anti-virus filters and file upload handlers. Built for authorized penetration testers and auditors. CX Codex +1 564installs security-passwords This skill adds curated password wordlists from SecLists to your agent for authorized login audits and credential testing. CX Codex +1 547installs llm-testing A security testing prompt suite to evaluate language models for bias, data leakage, and adversarial bypasses. CX Codex +1 544installs security-webshells A set of PHP, ASP, ASPX, JSP, Python and Perl web shell samples for testing detection systems and analysing malware. CX Codex +1 539installs