# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 13 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=13 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [analyzing-linux-kernel-rootkits](https://affpapa.org/en/nevibecode/skills/analyzing-linux-kernel-rootkits.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 442 installs — This skill looks for kernel-level rootkits in Linux memory dumps and live systems. - [analyzing-golang-malware-with-ghidra](https://affpapa.org/en/nevibecode/skills/analyzing-golang-malware-with-ghidra.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 441 installs — Walks an agent through Go binary analysis in Ghidra: buildinfo, pclntab, function names, dependencies. - [analyzing-network-packets-with-scapy](https://affpapa.org/en/nevibecode/skills/analyzing-network-packets-with-scapy.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 441 installs — This skill guides packet analysis with Scapy, from pcap parsing to anomalous traffic checks. - [analyzing-ios-app-security-with-objection](https://affpapa.org/en/nevibecode/skills/analyzing-ios-app-security-with-objection.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 436 installs — A skill for runtime iOS app testing with Objection and Frida: dump the keychain, bypass SSL pinning, check jailbreak detection. - [implementing-secret-scanning-with-gitleaks](https://affpapa.org/en/nevibecode/skills/implementing-secret-scanning-with-gitleaks.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 439 installs — This skill helps configure Gitleaks to find secrets in Git repositories and stop them from entering history. - [claude-settings-audit](https://affpapa.org/en/nevibecode/skills/claude-settings-audit.md) — skill · getsentry · Claude Code, Codex, Cursor +3 · 4500 installs — Audits a repository and suggests read-only permissions for settings.json. - [business-logic-vulnerabilities](https://affpapa.org/en/nevibecode/skills/business-logic-vulnerabilities.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3900 installs — A playbook for business logic bugs: race conditions, price tampering, workflow bypass, coupon abuse. - [api-sec](https://affpapa.org/en/nevibecode/skills/api-sec.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3900 installs — Routes API security testing across REST, GraphQL, and mobile backends. - [xss-cross-site-scripting](https://affpapa.org/en/nevibecode/skills/xss-cross-site-scripting.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3900 installs — A skill that feeds your coding agent non-obvious XSS vectors: context-specific payloads, WAF and CSP bypass. - [directconnect](https://affpapa.org/en/nevibecode/skills/directconnect.md) — skill · aws · Claude Code, Codex, Cursor +3 · 4000 installs — Configures AWS Direct Connect connections, virtual interfaces, BGP, encryption, and resiliency. - [testing-for-json-web-token-vulnerabilities](https://affpapa.org/en/nevibecode/skills/testing-for-json-web-token-vulnerabilities.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 431 installs — Guides coding agents through auditing JWT implementations for none-algorithm bypass, RS256-to-HS256 confusion, kid injection, and weak secrets. - [analyzing-network-traffic-for-incidents](https://affpapa.org/en/nevibecode/skills/analyzing-network-traffic-for-incidents.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 430 installs — A skill that works through packet captures and flow data during an incident: C2 channels, lateral movement, data exfiltration. - [performing-web-application-vulnerability-triage](https://affpapa.org/en/nevibecode/skills/performing-web-application-vulnerability-triage.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 433 installs — Triages SAST and DAST scanner findings, filters false positives, and calculates OWASP risk scores. - [analyzing-cobaltstrike-malleable-c2-profiles](https://affpapa.org/en/nevibecode/skills/analyzing-cobaltstrike-malleable-c2-profiles.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 426 installs — Parses Cobalt Strike Malleable C2 profiles and extracts network indicators for detection rules. - [gmgn-dev-score](https://affpapa.org/en/nevibecode/skills/gmgn-dev-score.md) — skill · GMGNAI · Claude Code, Codex, Cursor +3 · 6100 installs — This skill scores a token creator from launch and trading history, then gives a buy or don’t-buy call for the next launch. - [vulnerability-triage-brocards](https://affpapa.org/en/nevibecode/skills/vulnerability-triage-brocards.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 1400 installs — This skill assesses vulnerability reports against seven criteria, helping an agent reject weak findings, ask for evidence, or escalate a report. - [waf-bypass-techniques](https://affpapa.org/en/nevibecode/skills/waf-bypass-techniques.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — A skill offering WAF evasion methods for injection testing. - [api-auth-and-jwt-abuse](https://affpapa.org/en/nevibecode/skills/api-auth-and-jwt-abuse.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — A playbook for probing bearer tokens, API keys and claim trust. - [401-403-bypass-techniques](https://affpapa.org/en/nevibecode/skills/401-403-bypass-techniques.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — A playbook for access-denied responses: what to try when an admin panel or API endpoint answers 401 or 403. - [api-recon-and-docs](https://affpapa.org/en/nevibecode/skills/api-recon-and-docs.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — A playbook skill for mapping REST, mobile, and GraphQL API surfaces. - [idor-broken-object-authorization](https://affpapa.org/en/nevibecode/skills/idor-broken-object-authorization.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — A testing playbook for IDOR, BOLA and BFLA: where object identifiers hide, how to run A-B tests, and how to chain a finding into privilege escalation. - [jwt-oauth-token-attacks](https://affpapa.org/en/nevibecode/skills/jwt-oauth-token-attacks.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — A skill for Claude and other AI editors that walks through attacks on JWT tokens and OAuth 2.0 flows. - [authbypass-authentication-flaws](https://affpapa.org/en/nevibecode/skills/authbypass-authentication-flaws.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3800 installs — Testing playbook for authentication flaws. - [ssrf-server-side-request-forgery](https://affpapa.org/en/nevibecode/skills/ssrf-server-side-request-forgery.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3900 installs — A skill for reviewing SSRF in features that fetch URLs, resolve hostnames, import remote content, or reach internal services. - [resilience-program-design](https://affpapa.org/en/nevibecode/skills/resilience-program-design.md) — skill · aws · Claude Code, Codex, Cursor +3 · 3900 installs — This skill designs a resilience program with policy tiers, availability, RTO/RPO targets, DR choices, and a cadence for resilience activities. - [shieldadvanced](https://affpapa.org/en/nevibecode/skills/shieldadvanced.md) — skill · aws · Claude Code, Codex, Cursor +3 · 4000 installs — Configures AWS Shield Advanced to defend workloads against DDoS attacks and recover scaling costs. - [analyzing-network-traffic-of-malware](https://affpapa.org/en/nevibecode/skills/analyzing-network-traffic-of-malware.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 413 installs — Walks through a malware PCAP to find C2 protocols, exfiltration channels and payload downloads. - [web-scraping](https://affpapa.org/en/nevibecode/skills/web-scraping.md) — skill · jamditis · Claude Code, Codex, Cursor +3 · 6100 installs — Defines patterns for ethical scraping, access-failure handling, and cascading fallbacks across multiple extraction libraries. - [gdpr-dsgvo-expert](https://affpapa.org/en/nevibecode/skills/gdpr-dsgvo-expert.md) — skill · Alireza Rezvani · Claude Code · 980 installs — Scans code for GDPR and German BDSG privacy risks, builds DPIA reports, and tracks data subject rights deadlines. - [clerk](https://affpapa.org/en/nevibecode/skills/clerk.md) — skill · clerk · Claude Code, Codex, Cursor +3 · 30000 installs — Reads your Clerk question and routes it to the right sub-skill: setup, CLI, framework patterns, billing, webhooks. - [backend-development](https://affpapa.org/en/nevibecode/skills/backend-development.md) — skill · mrgoonie · Claude Code, Codex, Cursor +3 · 2300 installs — A skill that walks your agent through API design, database schemas, auth and CI/CD. - [analyzing-malicious-url-with-urlscan](https://affpapa.org/en/nevibecode/skills/analyzing-malicious-url-with-urlscan.md) — skill · mahipal · Claude Code, Codex, Cursor +3 · 411 installs — This skill walks through scanning suspicious and phishing URLs with URLScan.io and pulling the screenshot, DOM, redirect chain and IOCs out of the report. - [resilience-hub-multi-account](https://affpapa.org/en/nevibecode/skills/resilience-hub-multi-account.md) — skill · aws · Claude Code, Codex, Cursor +3 · 3800 installs — Configures AWS Resilience Hub v2 to assess workloads spanning multiple AWS accounts using a per-service IAM permission model. - [resilience-hub-failure-mode-assessment](https://affpapa.org/en/nevibecode/skills/resilience-hub-failure-mode-assessment.md) — skill · aws · Claude Code, Codex, Cursor +3 · 3900 installs — Runs and interprets AWS Resilience Hub v2 failure mode assessments. - [resilience-hub-getting-started](https://affpapa.org/en/nevibecode/skills/resilience-hub-getting-started.md) — skill · aws · Claude Code, Codex, Cursor +3 · 3900 installs — Sets up AWS Resilience Hub v2 from scratch, creates resilience policies with RTO and RPO targets, and runs an initial failure mode assessment. - [traffic-analysis-pcap](https://affpapa.org/en/nevibecode/skills/traffic-analysis-pcap.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A playbook for network capture analysis: Wireshark filters, protocol breakdowns, covert channel detection and TLS decryption. - [oauth-oidc-misconfiguration](https://affpapa.org/en/nevibecode/skills/oauth-oidc-misconfiguration.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — Testing playbook for OAuth 2.0 and OpenID Connect configurations. - [csrf-cross-site-request-forgery](https://affpapa.org/en/nevibecode/skills/csrf-cross-site-request-forgery.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A CSRF testing playbook for state-changing web flows, token checks, SameSite behavior, JSON requests, login CSRF, and OAuth state. - [heap-exploitation](https://affpapa.org/en/nevibecode/skills/heap-exploitation.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — A playbook for ptmalloc2 heap exploitation: UAF, double free, overflow, plus tcache, fastbin and unsortedbin attacks. - [business-logic-vuln](https://affpapa.org/en/nevibecode/skills/business-logic-vuln.md) — skill · yaklang · Claude Code, Codex, Cursor +3 · 3700 installs — Routes security testing toward business logic and state machine flaws. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=14 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md