# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 26 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=26 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [cis-benchmarks](https://affpapa.org/en/nevibecode/skills/cis-benchmarks.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 366 installs — Audits systems against CIS benchmarks and helps remediate security violations. - [waf-setup](https://affpapa.org/en/nevibecode/skills/waf-setup.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 366 installs — A skill that deploys and tunes a web application firewall: AWS WAF, Cloudflare and ModSecurity rules against OWASP Top 10 attacks. - [netlify-access-control](https://affpapa.org/en/nevibecode/skills/netlify-access-control.md) — skill · netlify · Claude Code, Codex, Cursor +3 · 2200 installs — Chooses the right Netlify protection layer: password, private project, or SAML SSO. - [gdpr-compliance](https://affpapa.org/en/nevibecode/skills/gdpr-compliance.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 365 installs — A skill that walks you through consent management, data subject rights and privacy by design when your project handles personal data of EU and EEA residents. - [dast-scanning](https://affpapa.org/en/nevibecode/skills/dast-scanning.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 363 installs — A skill that walks your agent through dynamic security testing of a running app or API using OWASP ZAP, Burp Suite and Nikto. - [stripe-webhooks](https://affpapa.org/en/nevibecode/skills/stripe-webhooks.md) — skill · hookdeck · Claude Code, Codex, Cursor +3 · 595 installs — A skill for Stripe webhook work: signature verification, event parsing and ready handler examples. - [security-auditor](https://affpapa.org/en/nevibecode/skills/ovachiever-security-auditor.md) — skill · ovachiever · Claude Code, Codex, Cursor +3 · 780 installs — Scans your code for OWASP Top 10 patterns: SQL injection, XSS, exposed secrets, broken auth. - [supabase-postgres-best-practices](https://affpapa.org/en/nevibecode/skills/supabase-postgres-best-practices.md) — skill (official OpenAI) · supabase · Codex, ChatGPT · 40 installs — Supabase guidelines for Postgres performance optimization. - [affiliate-fraud-detection](https://affpapa.org/en/nevibecode/skills/affiliate-fraud-detection.md) — skill · Maya-Beth Finotti · Claude Code, Codex, Cursor +3 · 12900 installs — Builds fraud detection rules and validation workflows for affiliate programs in B2B SaaS and ecommerce, covering cookie stuffing, fake leads, and holds. - [threat-modeling](https://affpapa.org/en/nevibecode/skills/devops-skills-threat-modeling.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 355 installs — Analyzes system architecture using the STRIDE methodology, maps trust boundaries, and defines security mitigations. - [security-automation](https://affpapa.org/en/nevibecode/skills/security-automation.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 354 installs — A skill that automates security checks and remediation: pipelines, auto-fixes, SOAR playbooks, compliance as code. - [user-management](https://affpapa.org/en/nevibecode/skills/user-management.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 352 installs — Manages Linux users, groups, ACLs, and sudo privileges. - [ai-red-teaming](https://affpapa.org/en/nevibecode/skills/ai-red-teaming.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 353 installs — A skill for attacking LLM apps on purpose: jailbreaks, data exfiltration, agent tool abuse. - [ai-agent-security](https://affpapa.org/en/nevibecode/skills/ai-agent-security.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 352 installs — A skill for defending agents against prompt injection, tool abuse and data exfiltration. - [dt-sec-ioc-hunting](https://affpapa.org/en/nevibecode/skills/dt-sec-ioc-hunting.md) — skill · Dynatrace · Claude Code, Codex, Cursor +3 · 1000 installs — Hunts indicators of compromise from reports and advisories across Dynatrace logs and spans, then scores threat exposure from 0 to 100. - [zero-trust](https://affpapa.org/en/nevibecode/skills/zero-trust.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 350 installs — Implements zero-trust network architecture with identity-based access, micro-segmentation, and continuous verification. - [agent-wallet-policy](https://affpapa.org/en/nevibecode/skills/agent-wallet-policy.md) — skill · circlefin · Claude Code, Codex, Cursor +3 · 788 installs — Inspects USDC spending limits on Circle agent wallets and drafts CLI commands to update caps safely. - [security-scan](https://affpapa.org/en/nevibecode/skills/security-scan.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 39 installs — Runs a single-pass security audit on a repository or selected path. - [referral-abuse-guardrails](https://affpapa.org/en/nevibecode/skills/referral-abuse-guardrails.md) — skill · Maya-Beth Finotti · Claude Code, Codex, Cursor +3 · 13100 installs — Writes the rules that keep customers from farming refer-a-friend rewards: caps, payout holds, verification gates and an enforcement ladder. - [gcp-networking](https://affpapa.org/en/nevibecode/skills/gcp-networking.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 347 installs — Configures GCP networking: creates VPCs, firewall rules, Cloud NAT, load balancers, and Private Service Connect using gcloud CLI and Terraform. - [iso27001-compliance](https://affpapa.org/en/nevibecode/skills/iso27001-compliance.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 346 installs — Guides the setup of an Information Security Management System aligned with ISO/IEC 27001:2022. - [python-backend](https://affpapa.org/en/nevibecode/skills/python-backend.md) — skill · jiatastic · Claude Code, Codex, Cursor +3 · 2200 installs — A skill that hands your agent working patterns for Python backends: FastAPI, async SQLAlchemy, JWT/OAuth2, Upstash caching and rate limits. - [aws-s3](https://affpapa.org/en/nevibecode/skills/aws-s3.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 345 installs — Hardens Amazon S3 buckets with SSE-KMS encryption, lifecycle transitions, bucket policies, and cross-region replication via AWS CLI. - [threat-modeling](https://affpapa.org/en/nevibecode/skills/briiirussell-threat-modeling.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 412 installs — Runs a structured threat-modeling session over a new feature or architecture using STRIDE, attack trees and abuse cases — before any code exists. - [policy-as-code](https://affpapa.org/en/nevibecode/skills/policy-as-code.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 345 installs — A skill that has your coding agent write OPA/Rego and Kyverno policies and wire their checks into CI/CD before changes hit production. - [soc2-compliance](https://affpapa.org/en/nevibecode/skills/devops-skills-soc2-compliance.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 344 installs — This skill maps SOC 2 Trust Services Criteria to concrete controls and tells you which evidence to collect for Type I and Type II audits. - [spatie-security](https://affpapa.org/en/nevibecode/skills/spatie-security.md) — skill · Spatie · Claude Code, Codex, Cursor +3 · 629 installs — Applies Spatie's security guidelines across applications, databases, servers, and Git workflows. - [gcp-secret-manager](https://affpapa.org/en/nevibecode/skills/gcp-secret-manager.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 342 installs — This skill manages secrets in Google Cloud Secret Manager, including IAM access and GKE integration. - [aws-cloudtrail](https://affpapa.org/en/nevibecode/skills/aws-cloudtrail.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 340 installs — Configures organization-wide AWS CloudTrail audit logging and CloudWatch security alerts. - [ai-coding-agent-guardrails](https://affpapa.org/en/nevibecode/skills/ai-coding-agent-guardrails.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 340 installs — A skill that sets permission boundaries, secret protection and review gates for AI coding agents on a team. - [incident-management](https://affpapa.org/en/nevibecode/skills/incident-management.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 339 installs — This skill lays out severity levels, an escalation matrix, war room roles and blameless reviews. - [recon](https://affpapa.org/en/nevibecode/skills/briiirussell-recon.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 405 installs — A skill for structured reconnaissance of an authorized target: passive gathering, port scanning, and a prioritized attack surface map. - [qwencloud-ops-auth](https://affpapa.org/en/nevibecode/skills/qwencloud-ops-auth.md) — skill · QwenCloud · Claude Code, Codex, Cursor +3 · 1600 installs — Configures authentication for QwenCloud APIs, checks credentials, and resolves 401 errors. - [access-review](https://affpapa.org/en/nevibecode/skills/access-review.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 337 installs — Runs periodic access reviews across AWS IAM and GitHub: flags dormant accounts, unused keys and missing MFA. - [asset-inventory](https://affpapa.org/en/nevibecode/skills/asset-inventory.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 335 installs — Maintains an IT asset inventory and CMDB across AWS, on-premise hardware, and SaaS. - [x-ray-a-company](https://affpapa.org/en/nevibecode/skills/x-ray-a-company.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 2100 installs — Works a company in four layers: legal entity, ownership, people, infrastructure and risk. - [vendor-management](https://affpapa.org/en/nevibecode/skills/devops-skills-vendor-management.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 334 installs — Establishes third-party risk management and categorizes suppliers across four security tiers. - [business-continuity](https://affpapa.org/en/nevibecode/skills/business-continuity.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 335 installs — A skill that walks you through writing a business continuity plan, running a business impact analysis and setting up crisis communications. - [aws-secrets-manager](https://affpapa.org/en/nevibecode/skills/devops-skills-aws-secrets-manager.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 335 installs — A skill for AWS Secrets Manager: create secrets, set up automatic rotation and wire them into applications. - [mcp-server-security](https://affpapa.org/en/nevibecode/skills/mcp-server-security.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 334 installs — A hardening guide for MCP servers: TLS, OAuth 2.1, mTLS, input validation and audit logging for tool calls. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=27 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md