NeVibeCode · 2,279 items
Skills for Backend and APIs
Skills for Backend and APIs: what each one does, an install command and example prompts.
api-authorization-and-bola skill A playbook for testing API authorization: reaching other users' objects, calling functions your role should not have, and writing hidden fields.
CX Codex +1
3,700installs
websocket-security skill Helps analyze WebSocket security, detect CSWSH vulnerabilities, and review handshake headers. Useful when auditing real-time messaging, notifications, or WS-backed APIs.
CX Codex +1
3,800installs
payload skill Guides Payload CMS development across collections, hooks, and access control. Useful when debugging queries, validation, and database transactions.
CX Codex +1
6,900installs
neon-auth skill Provisions Managed Better Auth in Neon Postgres branches. The skill sets up email OTP, magic links, OAuth, and migration flows from Supabase Auth.
CX Codex +1
20,300installs
agnes-ai-generation skill Calls Agnes and Sapiens AI generation APIs for text, images, and video directly from your agent. Useful for scripting media generation and testing Agnes 2.0 Flash models.
CX Codex +1
2,400installs
prototype-pollution skill Tests JavaScript stacks for prototype pollution, from unsafe object merges to polluted-property reads. Use it for authorized Node or browser security reviews.
CX Codex +1
3,600installs
expression-language-injection skill An Expression Language injection attack playbook for Java frameworks. Helps security testers detect and exploit vulnerabilities across SpEL, OGNL, and Java EL.
CX Codex +1
3,600installs
http-parameter-pollution skill Guides agents through HTTP Parameter Pollution tests when WAFs, proxies, and backends parse duplicate parameters differently. Built for API security assessments.
CX Codex +1
3,600installs
graphql-and-hidden-parameters skill A playbook for GraphQL and hidden parameter testing: introspection, batching, undocumented fields and authorization gaps.
CX Codex +1
3,600installs
m07-concurrency skill Guides Rust concurrency and async decisions, from Send/Sync errors to locks and channels. Use it when spawned tasks, shared state, or deadlocks need design review.
CX Codex +1
3,500installs
nosql-injection skill A skill for testing NoSQL injection in MongoDB, CouchDB, and Redis. Use it to inspect APIs, flexible filters, and authentication logic.
CX Codex +1
3,500installs
type-juggling skill Helps identify and bypass weak equality checks and magic hashes in PHP code paths. Useful for legacy authentication audits and CTF challenges.
CX Codex +1
3,600installs
testing-api-for-mass-assignment-vulnerability skill Tests APIs for mass assignment by adding undocumented request fields and checking whether they persist. Use it for profile, registration, and object-creation endpoints.
CX Codex +1
385installs
tech-stack-evaluator skill Evaluates frameworks, libraries, and cloud providers with weighted scoring. Calculates five-year TCO and assesses migration risks before project kickoff.
904installs
restore-credentials skill This skill guides Android Restore Credentials integration with androidx.credentials for silent sign-in after an app is restored on a new device.
CX Codex +1
638installs
X MCP guide skill This skill guides agents through X connections and MCP tools. Use it when an agent needs to read X data or work with chats, lists, and calls.
CX Codex +1
614installs
pinme skill Deploys static builds to IPFS and provisions full-stack apps on Cloudflare Workers and D1 databases. Useful when you need instant hosting for static sites or lightweight APIs.
CX Codex +1
710installs
m11-ecosystem skill Guides the AI through Rust crate selection, Cargo.toml configuration, and FFI bindings. Helps resolve compiler dependency errors.
CX Codex +1
3,300installs
m13-domain-error skill This skill helps design domain error types, recovery rules, and debugging context. Use it when Rust code needs retry, fallback, or clear error boundaries.
CX Codex +1
3,300installs
m09-domain skill Domain-driven design guide for structuring Rust code. Helps your coding agent organize entities, aggregates, and value objects under Rust ownership.
CX Codex +1
3,300installs
ghost-bits-cast-attack skill A Ghost Bits playbook: how a 16-bit Java char narrows to an 8-bit byte and slips past WAFs in front of SQLi, deserialization and webshell uploads.
CX Codex +1
3,300installs
perf-profiler skill Runs profilers against CPU and memory hot paths, captures flame graphs, and records file and line evidence.
CX Codex +1
1,600installs
perf-benchmarker skill Runs benchmarks sequentially under strict duration rules to catch performance regressions and set baseline metrics.
CX Codex +1
1,600installs
performing-security-headers-audit skill Audits HTTP security headers including CSP, HSTS, and cookie flags. It detects missing browser protections and configuration flaws on web endpoints.
CX Codex +1
359installs
effect skill A guide for building TypeScript applications with Effect v4, covering services, schemas, configuration, HTTP clients, streams, and tests.
CX Codex +1
2,500installs
provider-actions skill Guides implementation of Terraform Actions with the Plugin Framework for operations run around resource create, update, and destroy events.
CX Codex +1
3,900installs
implementing-api-rate-limiting-and-throttling skill This skill configures Redis-backed sliding window and token bucket rate limiters to protect API endpoints against brute force attacks.
CX Codex +1
348installs
domain-web skill A Rust web-service skill covering async handlers, shared state, errors, extractors, and middleware. Use it when a project contains Cargo.toml.
CX Codex +1
3,100installs
testing-for-business-logic-vulnerabilities skill This skill manually checks web app business logic with Burp Suite. Use it to examine price changes, skipped workflow steps, privilege escalation, and race conditions.
CX Codex +1
333installs
stripe-apps skill Guides coding agents in building, modifying, and reviewing Stripe Apps, Dashboard extensions, and billing scripts.
CX Codex +1
1,500installs
testing-websocket-api-security skill Audits WebSocket API security, checking upgrade handshake authentication, token validation, and CSWSH vulnerabilities. Useful during API security reviews.
CX Codex +1
328installs
api-design-reviewer skill Audits REST API designs, spots breaking changes between spec versions, and calculates quality scorecards. Useful when reviewing PRs with endpoint changes or planning a v2 migration.
768installs
aws-social-messaging skill This skill manages WhatsApp messaging through AWS End User Messaging Social, including templates, media, delivery events, and troubleshooting. Use it when building messaging flows.
CX Codex +1
3,000installs
code-to-prd skill This skill turns a codebase into a PRD covering pages, routes, APIs, and user actions. Use it when existing behavior needs product-readable documentation.
763installs
postgres skill A skill for PostgreSQL work: table design, indexing, pgvector, PostGIS, TimescaleDB and migrations. Useful when your agent writes SQL blind.
CX Codex +1
1,400installs
convex-expert skill A skill for any code under convex/: functions, schemas, indexes, validators. Useful when your agent writes Convex backend code.
CX Codex +1
36,200installs
convex-migrate skill A skill that walks the agent through schema changes and data backfills on a deployed Convex app using @convex-dev/migrations. Useful when the app is already live.
CX Codex +1
36,100installs
convex-authz skill Audits and hardens Convex backend authorization against four defect patterns. Fixes impersonation through arguments, missing ownership checks, and unauthorized writes.
CX Codex +1
36,100installs
convex-auth skill This skill adds passkey, OAuth, or password sign-in to a Convex app. Use it when auth needs to reach the server config, client hooks, and route guards.
CX Codex +1
36,200installs
convex-optimize skill The skill audits an existing Convex app and turns the findings into a plan: security, scale, component upgrades, observability.
CX Codex +1
36,000installs
601–640 of 2,279
