# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1340 cards · page 1 of 34 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · Matt Pocock · Claude Code · 499069 installs — This skill adds a Claude Code hook that stops risky Git commands before they run. - [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · DietrichGebert · Claude Code, Codex, Cursor +3 · 57000 installs — ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. - [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · DietrichGebert · Claude Code, Codex, Cursor +3 · 45400 installs — It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. - [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · cloudflare · Claude Code, Codex, Cursor +3 · 54800 installs — Reviews codebases and APIs for vulnerabilities using safe sandboxing. - [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · addyosmani · Claude Code, Codex, Cursor +3 · 70200 installs — Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. - [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill (official OpenAI) · supabase · Codex, ChatGPT · 8 installs — Guides the agent through database configuration and strict RLS policies in Supabase. - [doubt-driven-development](https://affpapa.org/en/nevibecode/skills/doubt-driven-development.md) — skill · addyosmani · Claude Code, Codex, Cursor +3 · 56700 installs — This skill sends non-trivial decisions to a fresh-context reviewer looking for flaws. - [gws-shared](https://affpapa.org/en/nevibecode/skills/gws-shared.md) — skill (official Google) · googleworkspace · Claude Code, Codex, Cursor +3 · 66100 installs — This skill gives agents shared rules for gws CLI authentication, flags, and output formats. - [persona-it-admin](https://affpapa.org/en/nevibecode/skills/persona-it-admin.md) — skill (official Google) · googleworkspace · Claude Code, Codex, Cursor +3 · 30100 installs — A persona skill for IT admins: watches for suspicious logins, sets Drive sharing policies, and works through requests with gws. - [gws-modelarmor](https://affpapa.org/en/nevibecode/skills/gws-modelarmor.md) — skill (official Google) · googleworkspace · Claude Code, Codex, Cursor +3 · 30000 installs — Filters user prompts and model responses for safety using Google Model Armor templates. - [gws-modelarmor-create-template](https://affpapa.org/en/nevibecode/skills/gws-modelarmor-create-template.md) — skill (official Google) · googleworkspace · Claude Code, Codex, Cursor +3 · 29900 installs — Creates Google Model Armor templates in GCP to filter user-generated content. - [gws-modelarmor-sanitize-prompt](https://affpapa.org/en/nevibecode/skills/gws-modelarmor-sanitize-prompt.md) — skill (official Google) · googleworkspace · Claude Code, Codex, Cursor +3 · 29600 installs — This skill sends a user prompt through a Google Model Armor template. - [gws-modelarmor-sanitize-response](https://affpapa.org/en/nevibecode/skills/gws-modelarmor-sanitize-response.md) — skill (official Google) · googleworkspace · Claude Code, Codex, Cursor +3 · 29600 installs — This skill sends a model response to Google Model Armor for filtering with a template. - [fix-security-vulnerabilities-with-strix](https://affpapa.org/en/nevibecode/skills/fix-security-vulnerabilities-with-strix.md) — skill · usestrix · Claude Code, Codex, Cursor +3 · 15700 installs — This skill triages validated Strix findings, fixes their root causes, and runs Strix again to verify the result. - [improve](https://affpapa.org/en/nevibecode/skills/improve.md) — skill · shadcn · Claude Code, Codex, Cursor +3 · 37700 installs — Surveys any codebase in read-only mode and writes self-contained implementation plans for other models to execute. - [web-app-penetration-testing](https://affpapa.org/en/nevibecode/skills/web-app-penetration-testing.md) — skill · usestrix · Claude Code, Codex, Cursor +3 · 12700 installs — Runs a black-box web app pentest through Strix and validates findings with working PoCs. - [owasp-top-10-testing](https://affpapa.org/en/nevibecode/skills/owasp-top-10-testing.md) — skill · usestrix · Claude Code, Codex, Cursor +3 · 12800 installs — Runs Strix AI agents to execute exploits across OWASP Top 10:2025 categories. - [api-security-testing](https://affpapa.org/en/nevibecode/skills/usestrix-api-security-testing.md) — skill · usestrix · Claude Code, Codex, Cursor +3 · 12600 installs — This skill guides Strix through REST, GraphQL, or gRPC API security tests, then provides a request to reproduce each finding. - [find-security-vulnerabilities-in-code](https://affpapa.org/en/nevibecode/skills/find-security-vulnerabilities-in-code.md) — skill · usestrix · Claude Code, Codex, Cursor +3 · 12500 installs — The skill runs a white-box security review through Strix: agents read your source, model the data flow, then prove each finding with an exploit in a sandbox. - [application-security-testing](https://affpapa.org/en/nevibecode/skills/application-security-testing.md) — skill · usestrix · Claude Code, Codex, Cursor +3 · 12600 installs — This skill selects tests for source code, a live web app, APIs, and CI, then turns confirmed findings into a ranked remediation plan. - [1password](https://affpapa.org/en/nevibecode/skills/1password.md) — skill · openclaw · Claude Code, Codex, Cursor +3 · 6300 installs — Configures 1Password CLI, handles authentication modes, and safely injects secrets into commands without leaking credentials into chat. - [security-best-practices](https://affpapa.org/en/nevibecode/skills/githubcomopenaiskills-security-best-practices.md) — skill · github.com/openai/skills · Claude Code, Codex, Cursor +3 · 358 installs — A skill that reviews code against security best practices for Python, JavaScript/TypeScript and Go, then suggests fixes. - [healthcheck](https://affpapa.org/en/nevibecode/skills/healthcheck.md) — skill · openclaw · Claude Code, Codex, Cursor +3 · 5500 installs — Audits OpenClaw host security, listening ports, SSH, and firewalls. - [docker-expert](https://affpapa.org/en/nevibecode/skills/sickn33-docker-expert.md) — skill · sickn33 · Claude Code, Codex, Cursor +3 · 27300 installs — A skill that turns your AI agent into a Docker reviewer for Dockerfiles, multi-stage builds and container security. - [java-springboot](https://affpapa.org/en/nevibecode/skills/java-springboot.md) — skill (official GitHub) · github · GitHub Copilot · 21272 installs — Gives GitHub Copilot Spring Boot development practices, from project layout to tests and security. - [docker-patterns](https://affpapa.org/en/nevibecode/skills/docker-patterns.md) — skill · affaan-m · Claude Code, Codex, Cursor +3 · 6400 installs — A skill with Dockerfile and Docker Compose patterns: local dev stacks, networking, volumes, container hardening. - [google-cloud-recipe-auth](https://affpapa.org/en/nevibecode/skills/google-cloud-recipe-auth.md) — skill (official Google) · Google LLC · Claude Code, Gemini CLI, Codex · 15450 installs — This skill explains Google Cloud authentication and permissions. - [cloud-sql-basics](https://affpapa.org/en/nevibecode/skills/cloud-sql-basics.md) — skill (official Google) · google · Claude Code, Gemini CLI, Codex · 14679 installs — This skill helps create and explain Cloud SQL resources for MySQL, PostgreSQL, and SQL Server. - [google-cloud-waf-security](https://affpapa.org/en/nevibecode/skills/google-cloud-waf-security.md) — skill (official Google) · google · Claude Code, Gemini CLI, Codex · 14620 installs — This skill reviews Google Cloud workloads against the security pillar of the Well-Architected Framework and suggests actions for IAM, networks, data, and operations. - [code-review](https://affpapa.org/en/nevibecode/skills/anthropics-code-review.md) — skill (official Anthropic) · anthropics · Claude Code, Codex, Cursor +3 · 9900 installs — The skill reviews diffs and pull requests for security, performance and correctness. - [laravel-security](https://affpapa.org/en/nevibecode/skills/laravel-security.md) — skill · affaan-m · Claude Code, Codex, Cursor +3 · 5400 installs — This skill reviews Laravel authentication, Eloquent safety, CSRF, XSS, APIs, and production settings. - [hook-development](https://affpapa.org/en/nevibecode/skills/hook-development.md) — skill (official Anthropic) · Anthropic · Claude Code · 7028 installs — Guides the development of Claude Code plugin hooks to intercept tool calls, validate output, and enforce task completion checks. - [forget](https://affpapa.org/en/nevibecode/skills/forget.md) — skill · rohitg00 · Claude Code, Codex, Cursor +3 · 13900 installs — Deletes selected durable memories from agentmemory after explicit confirmation. - [mcp-integration](https://affpapa.org/en/nevibecode/skills/mcp-integration.md) — skill (official Anthropic) · Anthropic · Claude Code · 6994 installs — This skill shows how to connect MCP servers to Claude Code plugins and expose their tools. - [writing-hookify-rules](https://affpapa.org/en/nevibecode/skills/writing-hookify-rules.md) — skill (official Anthropic) · Anthropic · Claude Code · 6941 installs — This skill guides you through writing hookify rules for Claude Code, from choosing an event to defining match conditions and the message shown when a rule triggers. - [cloudflare-one](https://affpapa.org/en/nevibecode/skills/cloudflare-one.md) — skill · cloudflare · Claude Code, Codex, Cursor +3 · 93100 installs — Walks your agent through designing, configuring and troubleshooting Cloudflare One Zero Trust and SASE deployments. - [turnstile-spin](https://affpapa.org/en/nevibecode/skills/turnstile-spin.md) — skill · cloudflare · Claude Code, Codex, Cursor +3 · 93100 installs — Sets up Cloudflare Turnstile bot verification across existing frontend and backend code, including widget embedding and server-side siteverify. - [springboot-security](https://affpapa.org/en/nevibecode/skills/springboot-security.md) — skill · affaan-m · Claude Code, Codex, Cursor +3 · 4900 installs — Reviews security in Java Spring Boot services, covering authentication, authorization, input validation, CSRF, secrets, headers, and dependencies. - [django-security](https://affpapa.org/en/nevibecode/skills/django-security.md) — skill · affaan-m · Claude Code, Codex, Cursor +3 · 5000 installs — A skill that feeds your agent Django security rules: production settings, auth, permissions, SQL injection and XSS prevention. - [verification-loop](https://affpapa.org/en/nevibecode/skills/verification-loop.md) — skill · affaan-m · Claude Code, Codex, Cursor +3 · 5000 installs — Runs a session's work through six phases — build, types, lint, tests with coverage, secret grep, diff review — and prints a PASS/FAIL report. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=2 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md