# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 10 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=10 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [c-review](https://affpapa.org/en/nevibecode/skills/c-review.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 3700 installs — Reviews native C/C++ code for memory bugs, integer overflows and races. - [browser-auth-flow](https://affpapa.org/en/nevibecode/skills/browser-auth-flow.md) — skill · ruvnet · Claude Code, Codex, Cursor +3 · 689 installs — Drives your login flow once, then probes it for redirect leaks, missing CSRF tokens, weak session cookies and OAuth mistakes. - [aws-iam](https://affpapa.org/en/nevibecode/skills/aws-iam.md) — skill · aws · Claude Code, Codex, Cursor +3 · 10200 installs — Verified corrections for the IAM mistakes agents keep making, plus step-by-step workflows for roles and baseline policies. - [reverse-engineer](https://affpapa.org/en/nevibecode/skills/reverse-engineer.md) — skill · sickn33 · Claude Code, Codex, Cursor +3 · 892 installs — Structured reverse engineering workflow for binaries: static decompilation, dynamic tracing, pattern detection, and automation scripts. - [okx-agentic-wallet](https://affpapa.org/en/nevibecode/skills/okx-agentic-wallet.md) — skill · okx · Claude Code, Codex, Cursor +3 · 17400 installs — This skill gives a coding agent the OKX Onchain OS wallet: balances, transfers, swaps, bridges, limit orders and contract calls, all through the onchainos CLI. - [witness](https://affpapa.org/en/nevibecode/skills/witness.md) — skill · ruvnet · Claude Code, Codex, Cursor +3 · 655 installs — Signs fix manifests with Ed25519 and tracks regressions using code markers. - [generate-sandbox-policy](https://affpapa.org/en/nevibecode/skills/generate-sandbox-policy.md) — skill · NVIDIA · Claude Code, Codex, Cursor +3 · 470 installs — Generates YAML sandbox policies for API access and network middleware settings. - [android-intent-security](https://affpapa.org/en/nevibecode/skills/android-intent-security.md) — skill · Google LLC · Claude Code, Codex, Cursor +3 · 1700 installs — Audits AndroidManifest.xml component settings and intent-handling code to stop Intent Redirection and unauthorized component execution. - [seo-agentic](https://affpapa.org/en/nevibecode/skills/seo-agentic.md) — skill · AgriciDaniel · Claude Code, Codex, Cursor +3 · 982 installs — Audits whether a site is ready for AI agents to browse and act. - [varlock](https://affpapa.org/en/nevibecode/skills/varlock.md) — skill · dmno-dev · Claude Code, Codex, Cursor +3 · 753 installs — Instructs coding agents to manage secrets via Varlock, redact sensitive values in LLM context, and define configurations inside .env.schema. - [assuredworkloads-environment-assessor](https://affpapa.org/en/nevibecode/skills/assuredworkloads-environment-assessor.md) — skill (official Google) · google · Claude Code, Gemini CLI, Codex · 475 installs — Evaluates Google Cloud resources and Org Policies against data sovereignty standards. - [verified-email](https://affpapa.org/en/nevibecode/skills/verified-email.md) — skill · Google LLC · Claude Code, Codex, Cursor +3 · 1500 installs — Walks your agent through adding verified email retrieval on Android Credential Manager, with no OTP step. - [code-review](https://affpapa.org/en/nevibecode/skills/coderabbitai-code-review.md) — skill · coderabbitai · Claude Code, Codex, Cursor +3 · 14800 installs — Runs CodeRabbit CLI reviews and feeds structured findings back to the agent. - [clerk-setup](https://affpapa.org/en/nevibecode/skills/clerk-setup.md) — skill · clerk · Claude Code, Codex, Cursor +3 · 56600 installs — Configures Clerk authentication via the Clerk CLI or scaffolds a fresh app with auth preconfigured. - [play-policy-insights](https://affpapa.org/en/nevibecode/skills/play-policy-insights.md) — skill · Google LLC · Claude Code, Codex, Cursor +3 · 1300 installs — Audits Android applications against Google Play Policy rules before submission. - [testing-api-security-with-owasp-top-10](https://affpapa.org/en/nevibecode/skills/testing-api-security-with-owasp-top-10.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 769 installs — Walks an agent through OWASP API Security Top 10 (2023) checks on REST, GraphQL and gRPC endpoints. - [query-token-audit](https://affpapa.org/en/nevibecode/skills/query-token-audit.md) — skill · binance-web3-team · Claude Code, Codex, Cursor +3 · 7800 installs — Scans token smart contracts for scams, honeypots, and hidden transaction taxes via Binance Web3 API before you swap. - [analyzing-api-gateway-access-logs](https://affpapa.org/en/nevibecode/skills/analyzing-api-gateway-access-logs.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 761 installs — This skill parses API Gateway access logs and flags BOLA/IDOR, rate-limit bypass, credential scanning, and injection attempts. - [insforge-integrations](https://affpapa.org/en/nevibecode/skills/insforge-integrations.md) — skill · InsForge · Claude Code, Codex, Cursor +3 · 55900 installs — A skill that walks your agent through hooking a third-party auth provider into InsForge and through taking x402 payments on an HTTP endpoint. - [mantis-advise](https://affpapa.org/en/nevibecode/skills/mantis-advise.md) — skill (official Google) · google · Claude Code, Codex, Cursor +3 · 1000 installs — The skill makes your coding agent check a project's security knowledge base before it edits code: threat models, past bugs in that file, verified patches. - [leanrea](https://affpapa.org/en/nevibecode/skills/leanrea.md) — skill · aicodeking · Claude Code, Codex, Cursor +3 · 1300 installs — Reverse engineers software builds using local CLI tools without MCP. - [securing-s3-buckets](https://affpapa.org/en/nevibecode/skills/securing-s3-buckets.md) — skill · aws · Claude Code, Codex, Cursor +3 · 6900 installs — A skill that walks the agent through five S3 workflows: creating a secured bucket, auditing an existing one, fixing findings, configuring encryption and enabling monitoring. - [dpa-review](https://affpapa.org/en/nevibecode/skills/dpa-review.md) — skill (official Anthropic) · anthropics · Claude Code, Codex, Cursor +3 · 677 installs — Reviews a Data Processing Agreement against your playbook, detects whether you are processor or controller, and returns a memo with redlines. - [clerk-nextjs-patterns](https://affpapa.org/en/nevibecode/skills/clerk-nextjs-patterns.md) — skill · clerk · Claude Code, Codex, Cursor +3 · 53400 installs — Provides authentication and authorization patterns for Next.js with Clerk. - [clerk-webhooks](https://affpapa.org/en/nevibecode/skills/clerk-webhooks.md) — skill · clerk · Claude Code, Codex, Cursor +3 · 52800 installs — Hands the agent a working pattern for Clerk webhook handlers: signature verification, event routing, and database sync for users, sessions, orgs and billing. - [creating-secrets-using-best-practices](https://affpapa.org/en/nevibecode/skills/creating-secrets-using-best-practices.md) — skill · aws · Claude Code, Codex, Cursor +3 · 6700 installs — Walks the agent through creating an AWS Secrets Manager secret with a dedicated KMS key, a tight IAM policy and rotation. - [senior-backend](https://affpapa.org/en/nevibecode/skills/senior-backend.md) — skill · Alireza Rezvani · Claude Code · 1674 installs — Scaffolds backend APIs, detects database bottlenecks, and runs load tests. - [ra-qm-skills](https://affpapa.org/en/nevibecode/skills/ra-qm-skills.md) — skill · Alireza Rezvani · Claude Code · 1653 installs — Router across 15 compliance skills: ISO 13485, MDR, FDA, ISO 27001, GDPR, EU AI Act. - [nuget-trusted-publishing](https://affpapa.org/en/nevibecode/skills/nuget-trusted-publishing.md) — skill · dotnet · Claude Code, Codex, Cursor +3 · 3300 installs — Configures OIDC-based trusted publishing for NuGet packages via GitHub Actions. - [cold-start-interview](https://affpapa.org/en/nevibecode/skills/cold-start-interview.md) — skill (official Anthropic) · anthropics · Claude Code, Codex, Cursor +3 · 630 installs — Runs an interview about your AI governance practice and writes the profile to CLAUDE.md so the plugin's other skills read the same setup. - [launching-ec2-instance-with-best-practices](https://affpapa.org/en/nevibecode/skills/launching-ec2-instance-with-best-practices.md) — skill · aws · Claude Code, Codex, Cursor +3 · 6300 installs — This skill launches EC2 instances with security and cost controls in place. - [configuring-vpc-endpoints-for-private-aws-service-access](https://affpapa.org/en/nevibecode/skills/configuring-vpc-endpoints-for-private-aws-service-access.md) — skill · aws · Claude Code, Codex, Cursor +3 · 6400 installs — A skill that walks the agent through VPC endpoint setup with AWS PrivateLink, so AWS services stay reachable without an internet gateway or public IPs. - [acquiring-disk-image-with-dd-and-dcfldd](https://affpapa.org/en/nevibecode/skills/acquiring-disk-image-with-dd-and-dcfldd.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 675 installs — A skill that walks the agent through bit-for-bit disk imaging with dd or dcfldd, hashing the source and the copy for forensic work. - [auto-updater](https://affpapa.org/en/nevibecode/skills/anthropics-auto-updater.md) — skill (official Anthropic) · anthropics · Claude Code, Codex, Cursor +3 · 621 installs — Checks installed community skills for updates, displays diffs, and requires explicit approval before applying changes. - [analyzing-android-malware-with-apktool](https://affpapa.org/en/nevibecode/skills/analyzing-android-malware-with-apktool.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 675 installs — Performs static analysis of suspicious Android APKs without executing them. - [geo-technical](https://affpapa.org/en/nevibecode/skills/geo-technical.md) — skill · geo-seo-claude · Claude Code, Codex, Cursor +3 · 841 installs — Audits technical SEO for indexing and AI crawler access. - [setting-up-ec2-instance-profiles](https://affpapa.org/en/nevibecode/skills/setting-up-ec2-instance-profiles.md) — skill · aws · Claude Code, Codex, Cursor +3 · 6200 installs — Configures EC2 instance profiles and IAM roles so applications call AWS services without hardcoded credentials. - [rev-frida](https://affpapa.org/en/nevibecode/skills/rev-frida.md) — skill · P4nda0s · Claude Code, Codex, Cursor +3 · 2200 installs — A skill that writes Frida instrumentation scripts for runtime analysis: hooking functions, tracing calls, dumping memory. - [dsar-response](https://affpapa.org/en/nevibecode/skills/dsar-response.md) — skill (official Anthropic) · anthropics · Claude Code, Codex, Cursor +3 · 614 installs — Guides you through Data Subject Access Requests and drafts response letters. - [pia-generation](https://affpapa.org/en/nevibecode/skills/pia-generation.md) — skill (official Anthropic) · anthropics · Claude Code, Codex, Cursor +3 · 613 installs — Writes a Privacy Impact Assessment using the structure learned from your seed PIA. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=11 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md