# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 27 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=27 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [oss-sponsors-brand-strategy](https://affpapa.org/en/nevibecode/skills/oss-sponsors-brand-strategy.md) — skill · Samuel Berthe · Claude Code, Codex, Cursor +3 · 10200 installs — Builds a company's open-source sponsorship portfolio, maps budget allocations across dependencies, and defines renewal metrics. - [aws-iam](https://affpapa.org/en/nevibecode/skills/devops-skills-aws-iam.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 333 installs — A skill that helps your agent write IAM policies, create roles and set up least-privilege access in AWS. - [mdm-device-management](https://affpapa.org/en/nevibecode/skills/mdm-device-management.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 330 installs — Guides device management and security across macOS, Windows, iOS, and Android. - [draft-security-advisory](https://affpapa.org/en/nevibecode/skills/draft-security-advisory.md) — skill · frappe · Claude Code, Codex, Cursor +3 · 480 installs — Transforms vulnerability reports into publication-ready GitHub Security Advisories without leaking payloads, endpoints, or file paths. - [change-management](https://affpapa.org/en/nevibecode/skills/devops-skills-change-management.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 329 installs — Sets up production change management workflows, CAB review rules, and request templates. - [startup-it-troubleshooting](https://affpapa.org/en/nevibecode/skills/startup-it-troubleshooting.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 330 installs — Copy-paste commands for the person who ended up doing IT at a startup: password resets, Wi-Fi, VPN, disk space. - [electron-development](https://affpapa.org/en/nevibecode/skills/mindrally-electron-development.md) — skill · Mindrally · Claude Code, Codex, Cursor +3 · 1300 installs — A skill that gives the agent rules for building Electron desktop apps: process separation, IPC, window security. - [fedramp-compliance](https://affpapa.org/en/nevibecode/skills/fedramp-compliance.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 328 installs — A skill for teams taking a cloud service through FedRAMP: it maps impact levels and NIST 800-53 control families to what you have to implement. - [llm-app-security](https://affpapa.org/en/nevibecode/skills/llm-app-security.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 327 installs — Security controls and validation rules to protect chatbots, RAG pipelines, and SaaS AI features from prompt injection, leaks, and abuse. - [oauth2-provider-design](https://affpapa.org/en/nevibecode/skills/oauth2-provider-design.md) — skill · Samuel Berthe · Claude Code, Codex, Cursor +3 · 7800 installs — Guides the architectural design of an OAuth 2.1 authorization server for B2B SaaS. - [app-marketplace-review](https://affpapa.org/en/nevibecode/skills/app-marketplace-review.md) — skill · Samuel Berthe · Claude Code, Codex, Cursor +3 · 8100 installs — This skill designs the operator-side review and approval process for third-party apps on a B2B SaaS marketplace. - [api-auth-key-management](https://affpapa.org/en/nevibecode/skills/api-auth-key-management.md) — skill · Samuel Berthe · Claude Code, Codex, Cursor +3 · 7800 installs — Design provider-side API key architecture with checksum prefixes, hashed storage, and zero-downtime rotation. - [ai-security-hardening](https://affpapa.org/en/nevibecode/skills/ai-security-hardening.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 326 installs — Hardens production LLM deployments against prompt injection, data exfiltration, and supply chain attacks. - [pci-dss-compliance](https://affpapa.org/en/nevibecode/skills/pci-dss-compliance.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 327 installs — A skill that maps PCI DSS v4.0 requirements onto your project: pick the right SAQ, scope the CDE, plan the controls. - [mobile-audit](https://affpapa.org/en/nevibecode/skills/mobile-audit.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 389 installs — Audits iOS and Android mobile apps against OWASP MASVS and MASTG standards. - [cloudflare-zero-trust](https://affpapa.org/en/nevibecode/skills/cloudflare-zero-trust.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 325 installs — A skill for securing internal apps and SSH access with Cloudflare Zero Trust without running a VPN. - [api-security-hardening](https://affpapa.org/en/nevibecode/skills/api-security-hardening.md) — skill · aj-geddes · Claude Code, Codex, Cursor +3 · 862 installs — Skill adds authentication, rate limiting, CORS, input validation and security headers to REST API endpoints. - [gcp-audit-logs](https://affpapa.org/en/nevibecode/skills/gcp-audit-logs.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 324 installs — A skill that walks you through Cloud Audit Logs in GCP: turning on data access logs, exporting them to BigQuery, and querying suspicious events. - [osint-recon](https://affpapa.org/en/nevibecode/skills/osint-recon.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 386 installs — Gathers and correlates public intelligence across domains, organizations, and metadata. - [mcp-server-offering](https://affpapa.org/en/nevibecode/skills/mcp-server-offering.md) — skill · Samuel Berthe · Claude Code, Codex, Cursor +3 · 8000 installs — Walks you through designing a product's MCP server as a surface AI agents operate: which tools to expose, under what limits, and how to measure the payoff. - [stripe-best-practices](https://affpapa.org/en/nevibecode/skills/stripe-stripe-best-practices.md) — skill (official OpenAI) · Stripe · Codex, ChatGPT · 36 installs — Integration guide for Stripe in Codex: covers Checkout Sessions, Connect Accounts v2, tax setup, and restricted API keys. - [ebpf-observability](https://affpapa.org/en/nevibecode/skills/ebpf-observability.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 320 installs — Guides the agent in configuring kernel-level tracing and network flows. - [azure-keyvault](https://affpapa.org/en/nevibecode/skills/azure-keyvault.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 321 installs — A skill for Azure Key Vault: stores secrets, keys and certificates, sets up access and wires them into Azure services. - [find-exposed-servers](https://affpapa.org/en/nevibecode/skills/find-exposed-servers.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 2000 installs — Discovers exposed hosts, open ports and services using Shodan and Censys scan data without touching the target. - [identity-access-management](https://affpapa.org/en/nevibecode/skills/identity-access-management.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 317 installs — A skill for setting up SSO, SCIM provisioning and MFA through Google Workspace, Okta or Azure AD. - [secrets-scan](https://affpapa.org/en/nevibecode/skills/owasp-secrets-scan.md) — skill · OWASP · Claude Code, Codex, Cursor +3 · 337 installs — Scans source and config files for hardcoded credentials, API keys and tokens, whether you are reviewing before a merge or auditing a repo. - [azure-monitor-audit](https://affpapa.org/en/nevibecode/skills/azure-monitor-audit.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 313 installs — Configures Azure Monitor, Log Analytics, and Activity Logs for centralized auditing. - [saas-security-posture](https://affpapa.org/en/nevibecode/skills/saas-security-posture.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 314 installs — A skill that audits and hardens your company SaaS stack: SSO, OAuth grants, shadow IT and admin accounts across Slack, GitHub, Google Workspace and AWS. - [dt-obs-compliance-assistant](https://affpapa.org/en/nevibecode/skills/dt-obs-compliance-assistant.md) — skill · Dynatrace · Claude Code, Codex, Cursor +3 · 889 installs — Monitors EU DORA compliance posture using Dynatrace Compliance Assistant. - [prompt-injection](https://affpapa.org/en/nevibecode/skills/prompt-injection.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 372 installs — This skill audits apps with AI features for prompt injection, permission bypass and system prompt leaks. - [ai-inference-service-mesh](https://affpapa.org/en/nevibecode/skills/ai-inference-service-mesh.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 310 installs — A skill that wires Istio and Linkerd into your inference stack: mTLS, canary releases, access policies and GPU backend protection. - [mac-mini-llm-lab](https://affpapa.org/en/nevibecode/skills/mac-mini-llm-lab.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 309 installs — Sets up an Apple Silicon Mac mini as an always-on local LLM inference server with Ollama, MLX, launchd auto-start, and remote networking. - [multi-tenant-llm-hosting](https://affpapa.org/en/nevibecode/skills/multi-tenant-llm-hosting.md) — skill · devops-skills · Claude Code, Codex, Cursor +3 · 309 installs — A skill that walks your agent through building shared LLM inference for several teams or customers: tenant isolation, quotas, billing attribution and noisy-neighbor protection. - [Skills-Security-Check](https://affpapa.org/en/nevibecode/skills/skills-security-check.md) — skill · Toolsai · Claude Code, Codex, Cursor +3 · 593 installs — Scans a folder of skills, flags suspicious patterns with static analysis, then has the agent sort out false positives. - [ci-cd-best-practices](https://affpapa.org/en/nevibecode/skills/ci-cd-best-practices.md) — skill · Mindrally · Claude Code, Codex, Cursor +3 · 1200 installs — Provides guidelines for automated pipelines, testing workflows, and zero-downtime deployment patterns. - [sap-api-policy](https://affpapa.org/en/nevibecode/skills/sap-api-policy.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 387 installs — Evaluates SAP interface integrations against the SAP API Policy v.4.2026a baseline and delivers an evidence-based technical assessment. - [dig-through-data-brokers](https://affpapa.org/en/nevibecode/skills/dig-through-data-brokers.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 1900 installs — Guides people-search investigations across data brokers and public records. - [secrets-in-git-history](https://affpapa.org/en/nevibecode/skills/secrets-in-git-history.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 1900 installs — A skill that teaches the agent to hunt API keys, tokens and identities in git history and on GitHub, not just in the checked-out tree. - [who-owns-this-domain](https://affpapa.org/en/nevibecode/skills/who-owns-this-domain.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 1900 installs — A skill that separates who registered a domain from who actually runs it, using WHOIS, RDAP, DNS records, ASN and historical archives. - [incident-triage](https://affpapa.org/en/nevibecode/skills/incident-triage.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 361 installs — Guides rapid security incident triage and containment using the NIST SP 800-61 methodology. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=28 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md