# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 29 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=29 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [who-really-owns-it](https://affpapa.org/en/nevibecode/skills/who-really-owns-it.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 1700 installs — Corporate intelligence playbook for investigating company ownership, directors, and filings across registries and leak databases. - [google-like-a-spy](https://affpapa.org/en/nevibecode/skills/google-like-a-spy.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 1700 installs — This skill builds search-operator queries for finding documents, mentions, and exposed files. - [find-hidden-subdomains](https://affpapa.org/en/nevibecode/skills/find-hidden-subdomains.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 1700 installs — A skill that enumerates an organisation's subdomains and sibling domains from Certificate Transparency logs and passive DNS, without sending traffic to the target. - [where-was-this-taken](https://affpapa.org/en/nevibecode/skills/where-was-this-taken.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 1700 installs — Structured verification workflow to find where and when a photo or video was taken. - [pattern-of-life-from-socials](https://affpapa.org/en/nevibecode/skills/pattern-of-life-from-socials.md) — skill · UseOSINT · Claude Code, Codex, Cursor +3 · 1700 installs — Turns public posts into a model of where someone is, when, and with whom. - [triage-finding](https://affpapa.org/en/nevibecode/skills/triage-finding.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 30 installs — Triages external security reports against repository code and SECURITY.md policies, assigning static-evidence verdicts without modifying files. - [security-diff-scan](https://affpapa.org/en/nevibecode/skills/security-diff-scan.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 30 installs — Reviews pull requests, commits, and local diffs for security vulnerabilities. - [soc-operations](https://affpapa.org/en/nevibecode/skills/soc-operations.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 320 installs — Guides the design, execution, and tuning of Security Operations Center workflows. - [aims-audit](https://affpapa.org/en/nevibecode/skills/aims-audit.md) — skill · Alireza Rezvani · Claude Code · 31 installs — Tests an AIMS against six ISO 42001 audit questions. - [ai-act-readiness](https://affpapa.org/en/nevibecode/skills/ai-act-readiness.md) — skill · Alireza Rezvani · Claude Code · 31 installs — This skill runs an AI system through six EU AI Act questions and helps classify risk, company role, transparency duties, and the conformity route before EU deployment. - [webhook-handler-patterns](https://affpapa.org/en/nevibecode/skills/webhook-handler-patterns.md) — skill · hookdeck · Claude Code, Codex, Cursor +3 · 442 installs — Teaches your coding agent to handle webhooks safely: verify raw payload signatures, enforce idempotency, and return proper status codes in Express, Next.js, or FastAPI. - [pci-audit](https://affpapa.org/en/nevibecode/skills/pci-audit.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 318 installs — Audits applications and infrastructure that handle payment card data against PCI DSS v4.0. - [solana-tx-building](https://affpapa.org/en/nevibecode/skills/solana-tx-building.md) — skill · agiprolabs · Claude Code, Codex, Cursor +3 · 439 installs — Build, simulate, and inspect Solana transactions with guidance on instructions, v0 messages, lookup tables, compute budgets, and priority fees. - [Next.js Security Scan](https://affpapa.org/en/nevibecode/skills/nextjs-security-scan.md) — skill · sugarforever · Claude Code, Codex, Cursor +3 · 553 installs — A skill that scans Next.js and TypeScript/JavaScript projects for XSS, injection flaws, auth holes and hardcoded secrets. - [sybil-detection](https://affpapa.org/en/nevibecode/skills/sybil-detection.md) — skill · agiprolabs · Claude Code, Codex, Cursor +3 · 437 installs — This skill examines linked Solana wallets, wash trading signals, and bundled buys. - [ai-risk-management](https://affpapa.org/en/nevibecode/skills/ai-risk-management.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 313 installs — Applies the NIST AI RMF 1.0 framework to assess machine learning models and LLMs. - [token-holder-analysis](https://affpapa.org/en/nevibecode/skills/token-holder-analysis.md) — skill · agiprolabs · Claude Code, Codex, Cursor +3 · 432 installs — Analyzes Solana token distribution, calculates concentration metrics, and flags insider risks before entering a trade. - [Python Security Scan](https://affpapa.org/en/nevibecode/skills/python-security-scan.md) — skill · sugarforever · Claude Code, Codex, Cursor +3 · 540 installs — Scans Python, Flask, Django, and FastAPI projects for OWASP Top 10 flaws, hardcoded credentials, and vulnerable packages. - [validation](https://affpapa.org/en/nevibecode/skills/validation.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 29 installs — This skill checks whether candidate security findings hold up. - [deep-security-scan](https://affpapa.org/en/nevibecode/skills/deep-security-scan.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 29 installs — This skill runs multiple independent security scans across your entire repository or a scoped path, aggregates findings, and generates a complete report. - [rivet-secure-exec](https://affpapa.org/en/nevibecode/skills/rivet-secure-exec.md) — skill · rivet-dev · Claude Code, Codex, Cursor +3 · 918 installs — A skill that documents Secure Exec, a library for running Node.js code without a sandbox while keeping file, network and resource access under control. - [laravel-owasp-security](https://affpapa.org/en/nevibecode/skills/laravel-owasp-security.md) — skill · AsyrafHussin · Claude Code, Codex, Cursor +3 · 990 installs — Audits Laravel 13 and React/Inertia.js codebases against the OWASP Top 10 checklist and assists with secure implementation of auth, payments, or APIs. - [hipaa-audit](https://affpapa.org/en/nevibecode/skills/hipaa-audit.md) — skill · briiirussell · Claude Code, Codex, Cursor +3 · 309 installs — Walks an app or infrastructure through HIPAA: where PHI lives, which safeguards apply, what to fix. - [byok-custom-model](https://affpapa.org/en/nevibecode/skills/byok-custom-model.md) — skill · starchild · Claude Code, Codex, Cursor +3 · 2700 installs — Register a chat model in Starchild using your own API key. - [security-compliance-audit](https://affpapa.org/en/nevibecode/skills/security-compliance-audit.md) — skill · aj-geddes · Claude Code, Codex, Cursor +3 · 665 installs — A skill that walks through security compliance checks for SOC 2, GDPR, HIPAA, PCI-DSS and ISO 27001. - [Python Backend Architecture Review](https://affpapa.org/en/nevibecode/skills/python-backend-architecture-review.md) — skill · rknall · Claude Code, Codex, Cursor +3 · 503 installs — A skill that reviews Python backend architecture: patterns, database, API, security, scalability. - [frida-17](https://affpapa.org/en/nevibecode/skills/frida-17.md) — skill · yfe404 · Claude Code, Codex, Cursor +3 · 2600 installs — Checks and fixes Frida scripts for Frida 17.0.0, flagging removed APIs and naming the replacement. - [python-cybersecurity-tool-development](https://affpapa.org/en/nevibecode/skills/python-cybersecurity-tool-development.md) — skill · Mindrally · Claude Code, Codex, Cursor +3 · 969 installs — Skill teaches the agent to write Python pentesting tools: port scanners, enumerators, brute-forcers with async network, input validation, and structured logging. - [vercel-sandbox](https://affpapa.org/en/nevibecode/skills/vercel-sandbox.md) — skill (official OpenAI) · Vercel Labs · Codex, ChatGPT · 27 installs — This skill runs user-generated and AI-generated code inside an ephemeral Vercel Sandbox. - [fix-finding](https://affpapa.org/en/nevibecode/skills/fix-finding.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 27 installs — Resolves confirmed security vulnerabilities through targeted, validated patches. - [attack-path-analysis](https://affpapa.org/en/nevibecode/skills/attack-path-analysis.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 27 installs — Maps security findings from source to sink and calibrates severity against threat models. - [gdpr-audit-prep](https://affpapa.org/en/nevibecode/skills/gdpr-audit-prep.md) — skill · Alireza Rezvani · Claude Code · 28 installs — A slash command that runs your data processing through six DPO questions, each cited to a GDPR article. - [api-rate-limiting](https://affpapa.org/en/nevibecode/skills/api-rate-limiting.md) — skill · aj-geddes · Claude Code, Codex, Cursor +3 · 640 installs — Guides the implementation of token bucket and sliding window rate limiting. - [security-auditor](https://affpapa.org/en/nevibecode/skills/security-auditor.md) — skill · zhaono1 · Claude Code, Codex, Cursor +3 · 1000 installs — A skill that hunts vulnerabilities in your code: walks the OWASP Top 10, checks configs, dependencies and leaked secrets. - [neo4j-security-skill](https://affpapa.org/en/nevibecode/skills/neo4j-security-skill.md) — skill · neo4j-contrib · Claude Code, Codex, Cursor +3 · 824 installs — This skill walks an agent through Neo4j user, role and privilege management in Cypher against the system database. - [java-spring-development](https://affpapa.org/en/nevibecode/skills/java-spring-development.md) — skill · Mindrally · Claude Code, Codex, Cursor +3 · 931 installs — Teaches the agent to build enterprise apps with Spring Boot 3.x and Java 17+: layered architecture, REST APIs, Spring Data JPA, Spring Security, and tests. - [security-best-practices](https://affpapa.org/en/nevibecode/skills/mindrally-security-best-practices.md) — skill · Mindrally · Claude Code, Codex, Cursor +3 · 930 installs — A skill providing security principles for backend and microservice development. - [track-findings](https://affpapa.org/en/nevibecode/skills/track-findings.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 26 installs — Routes verified Codex Security findings into Linear, Jira, GitHub issues, and draft advisories. - [compliance-readiness](https://affpapa.org/en/nevibecode/skills/compliance-readiness.md) — skill · Alireza Rezvani · Claude Code · 27 installs — Runs a 6-question compliance officer interrogation to pressure-test compliance programs before audits or new framework adoption. - [supabase-audit-rls](https://affpapa.org/en/nevibecode/skills/supabase-audit-rls.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 1100 installs — Tests Row Level Security policies in Supabase for bypasses and misconfigurations. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=30 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md