# Skills for Security

Skills for Security: what each one does, an install command and example prompts.

1434 cards · page 21 of 36

- HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=21
- Instructions for agents: https://affpapa.org/en/nevibecode/agents.md

- [azure-smart-city-iot-solution-builder](https://affpapa.org/en/nevibecode/skills/azure-smart-city-iot-solution-builder.md) — skill (official GitHub) · github · GitHub Copilot · 74 installs — This skill turns an Azure IoT or Smart City idea into an architecture, security plan, cost strategy, and phased delivery roadmap.
- [jadx](https://affpapa.org/en/nevibecode/skills/jadx.md) — skill · BrownFineSecurity · Claude Code, Codex, Cursor +3 · 487 installs — A skill that walks your agent through jadx: turning Android APKs into readable Java source and grepping it for keys and flaws.
- [crisis-holding](https://affpapa.org/en/nevibecode/skills/crisis-holding.md) — skill · elvisun · Claude Code, Codex, Cursor +3 · 758 installs — Drafts disciplined holding statements and media guidance during live incidents.
- [experience-ui-bundle-mfa-configure](https://affpapa.org/en/nevibecode/skills/experience-ui-bundle-mfa-configure.md) — skill · forcedotcom · Claude Code, Codex, Cursor +3 · 2600 installs — Sets up multi-factor authentication for Salesforce Experience Site users by deploying the right permission sets and checking the login flow.
- [resemble-detect](https://affpapa.org/en/nevibecode/skills/resemble-detect.md) — skill (official GitHub) · github · GitHub Copilot · 68 installs — Detects synthetic audio, images, video, and text using Resemble AI.
- [x-ray](https://affpapa.org/en/nevibecode/skills/x-ray.md) — skill · pashov · Claude Code, Codex, Cursor +3 · 324 installs — Builds an x-ray/ folder with a protocol readiness report: overview, threat model, invariants, test analysis and git history.
- [deep-analysis](https://affpapa.org/en/nevibecode/skills/deep-analysis.md) — skill · cyberkaida · Claude Code, Codex, Cursor +3 · 516 installs — A skill for depth-first binary investigation: answers questions like what a function does or whether crypto is involved.
- [ghidra-headless](https://affpapa.org/en/nevibecode/skills/ghidra-headless.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 507 installs — This skill drives Ghidra's headless analyzer to pull functions, strings, symbols and call graphs out of a binary.
- [docker-build-strategies](https://affpapa.org/en/nevibecode/skills/docker-build-strategies.md) — skill · docker · Claude Code, Codex, Cursor +3 · 1200 installs — A skill that guides your coding agent in writing, reviewing, and optimizing Dockerfiles using BuildKit best practices.
- [cyrus-setup-claude-auth](https://affpapa.org/en/nevibecode/skills/cyrus-setup-claude-auth.md) — skill · cyrusagents · Claude Code, Codex, Cursor +3 · 1100 installs — This skill writes Claude credentials into ~/.cyrus/.env so Cyrus can start AI sessions.
- [private-connectivity](https://affpapa.org/en/nevibecode/skills/private-connectivity.md) — skill · grafana · Claude Code, Codex, Cursor +3 · 4100 installs — Sets up private network connectivity to Grafana Cloud over AWS PrivateLink, Azure Private Link, GCP Private Service Connect and PDC.
- [security](https://affpapa.org/en/nevibecode/skills/parcadei-security.md) — skill · parcadei · Claude Code, Codex, Cursor +3 · 530 installs — A security audit skill: scans code for vulnerabilities, checks dependencies and secrets, then re-verifies after fixes.
- [experience-lwc-security-validate](https://affpapa.org/en/nevibecode/skills/experience-lwc-security-validate.md) — skill · forcedotcom · Claude Code, Codex, Cursor +3 · 2200 installs — Checks Lightning Web Component bundles for Lightning Web Security issues and returns ranked findings or a SARIF report.
- [spring-boot-security-jwt](https://affpapa.org/en/nevibecode/skills/spring-boot-security-jwt.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 4100 installs — A skill with ready JWT auth patterns for Spring Boot 3.5.x: token generation with JJWT, filters, RBAC and OAuth2 wiring.
- [shannon](https://affpapa.org/en/nevibecode/skills/shannon.md) — skill · KeygraphHQ · Claude Code, Codex, Cursor +3 · 2900 installs — The skill wires up Shannon: it reads your source code, maps attack vectors and runs real exploits to prove a vulnerability exists.
- [typescript-security-review](https://affpapa.org/en/nevibecode/skills/typescript-security-review.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 3900 installs — Reviews TypeScript and Node.js codebases for OWASP Top 10 vulnerabilities, leaked secrets, and authentication bugs.
- [thinking-red-team](https://affpapa.org/en/nevibecode/skills/thinking-red-team.md) — skill · tjboudreaux · Claude Code, Codex, Cursor +3 · 669 installs — A skill for authorized security review: it models the attacker, maps the attack surface, and keeps only findings with a reproducible exploit path and a verified fix.
- [provider-configuration](https://affpapa.org/en/nevibecode/skills/provider-configuration.md) — skill · hashicorp · Claude Code, Codex, Cursor +3 · 951 installs — Guides Terraform provider authentication and credential resolution.
- [msgraph-sdk](https://affpapa.org/en/nevibecode/skills/msgraph-sdk.md) — skill (official GitHub) · github · GitHub Copilot · 57 installs — This skill connects Microsoft Graph SDK to .NET, TypeScript/JavaScript, or Python projects.
- [github-release](https://affpapa.org/en/nevibecode/skills/jezweb-github-release.md) — skill · jezweb · Claude Code, Codex, Cursor +3 · 1300 installs — Prepares a GitHub release by checking code for public publishing, creating a tag, and publishing through gh.
- [nextjs-authentication](https://affpapa.org/en/nevibecode/skills/nextjs-authentication.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 3800 installs — A skill with ready authentication patterns for Next.js 15+ App Router on Auth.js 5: providers, route protection, sessions and roles.
- [nextjs-code-review](https://affpapa.org/en/nevibecode/skills/nextjs-code-review.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 3800 installs — Reviews Next.js App Router code before merges, covering component boundaries, Server Actions, caching and routes.
- [spring-boot-actuator](https://affpapa.org/en/nevibecode/skills/spring-boot-actuator.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 3800 installs — Guides setup of Spring Boot Actuator endpoints, Kubernetes health probes, isolated management ports, and Micrometer metric exports.
- [release](https://affpapa.org/en/nevibecode/skills/parcadei-release.md) — skill · parcadei · Claude Code, Codex, Cursor +3 · 481 installs — Runs a release through five subagents: security audit, E2E tests, final review, version bump, release notes.
- [code-review](https://affpapa.org/en/nevibecode/skills/alinaqi-code-review.md) — skill · alinaqi · Claude Code, Codex, Cursor +3 · 1400 installs — Runs automated code reviews before commits or deployments.
- [aws-sdk-java-v2-kms](https://affpapa.org/en/nevibecode/skills/aws-sdk-java-v2-kms.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 3700 installs — This skill provides AWS KMS patterns for AWS SDK for Java 2.x, covering keys, encryption, data keys, signatures, and Spring Boot integration.
- [aws-sdk-java-v2-secrets-manager](https://affpapa.org/en/nevibecode/skills/aws-sdk-java-v2-secrets-manager.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 3700 installs — A skill for pulling AWS Secrets Manager values into Java services: retrieval, caching, rotation-aware access and Spring Boot wiring.
- [unit-test-security-authorization](https://affpapa.org/en/nevibecode/skills/unit-test-security-authorization.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 3700 installs — A skill with patterns for unit testing Spring Security authorization: @PreAuthorize, @Secured, @RolesAllowed and custom permission evaluators.
- [convex-security-audit](https://affpapa.org/en/nevibecode/skills/convex-security-audit.md) — skill · waynesutton · Claude Code, Codex, Cursor +3 · 1500 installs — A skill that walks through a Convex app's security and writes up what it finds.
- [better-auth](https://affpapa.org/en/nevibecode/skills/better-auth.md) — skill · giuseppe-trisciuoglio · Claude Code, Codex, Cursor +3 · 3600 installs — A skill with ready-made Better Auth patterns: NestJS backend, Drizzle ORM and PostgreSQL, social login, plus plugins like 2FA and passkey.
- [web-testing](https://affpapa.org/en/nevibecode/skills/web-testing.md) — skill · mrgoonie · Claude Code, Codex, Cursor +3 · 442 installs — A web testing skill covering unit, integration, E2E, load, security, visual and accessibility checks.
- [blockchain-security](https://affpapa.org/en/nevibecode/skills/blockchain-security.md) — skill · transilienceai · Claude Code, Codex, Cursor +3 · 548 installs — Tests Solidity contracts and blockchain CTF challenges for common EVM flaws.
- [redis-security](https://affpapa.org/en/nevibecode/skills/redis-security.md) — skill · Redis, Inc. · Claude Code, Codex, Cursor +3 · 2400 installs — Guides Redis hardening with authentication, TLS, ACLs and network restrictions.
- [mcp-implementation-security-review](https://affpapa.org/en/nevibecode/skills/mcp-implementation-security-review.md) — skill (official GitHub) · github · GitHub Copilot · 49 installs — Audits MCP server and client code against baseline controls, RCE vectors, and the OWASP MCP Top 10, producing file and line evidence.
- [repomix](https://affpapa.org/en/nevibecode/skills/repomix.md) — skill · mrgoonie · Claude Code, Codex, Cursor +3 · 402 installs — This skill packs a whole repository into a single file you can hand to an LLM.
- [service-itsm-agentic-setup-cmdb-access-assign](https://affpapa.org/en/nevibecode/skills/service-itsm-agentic-setup-cmdb-access-assign.md) — skill · forcedotcom · Claude Code, Codex, Cursor +3 · 1700 installs — Gives one named user access to CMDB data in Service Cloud ITSM by assigning the license-backed permission sets.
- [repomix-safe-mixer](https://affpapa.org/en/nevibecode/skills/repomix-safe-mixer.md) — skill · daymade · Claude Code, Codex, Cursor +3 · 912 installs — This skill scans a project for hardcoded keys and tokens and blocks repomix from packing until the secrets are gone.
- [aws-resource-query](https://affpapa.org/en/nevibecode/skills/aws-resource-query.md) — skill (official GitHub) · github · GitHub Copilot · 47 installs — Turn natural-language questions about AWS resources into read-only AWS CLI queries.
- [better-auth](https://affpapa.org/en/nevibecode/skills/mrgoonie-better-auth.md) — skill · mrgoonie · Claude Code, Codex, Cursor +3 · 390 installs — A skill that walks your agent through Better Auth: email/password, OAuth, 2FA, passkeys and roles.
- [check-npm](https://affpapa.org/en/nevibecode/skills/check-npm.md) — skill · grafana · Claude Code, Codex, Cursor +3 · 2800 installs — Reads a JS/TS repo's package manager config and flags supply-chain gaps: tool version, lifecycle scripts, unsafe dependency protocols and release age.

Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=22

## Refine
[audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md)

## Narrow this list
Parameters: `?platform=<claude-code|codex|cursor|copilot|gemini-cli|windsurf|…>`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md
