# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 32 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=32 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [git-pr-reviewer](https://affpapa.org/en/nevibecode/skills/git-pr-reviewer.md) — skill · OneWave-AI · Claude Code, Codex, Cursor +3 · 320 installs — The skill reads your branch diff and walks the changed files for bugs, security holes, performance and test gaps. - [credential-scanner](https://affpapa.org/en/nevibecode/skills/credential-scanner.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 538 installs — Scans your project for exposed keys and passwords before a file-reading skill can pick them up. - [infisical-self-host](https://affpapa.org/en/nevibecode/skills/infisical-self-host.md) — skill · Infisical · Claude Code, Codex, Cursor +3 · 702 installs — Guides self-hosted deployments of the Infisical platform using Docker, Compose, or Kubernetes. - [code-review](https://affpapa.org/en/nevibecode/skills/shareai-lab-code-review.md) — skill · shareAI-lab · Claude Code, Codex, Cursor +3 · ★ 79238 — Guides your coding agent through structured code reviews covering security, logic bugs, speed, and test coverage before merging pull requests. - [secure-secret-drop](https://affpapa.org/en/nevibecode/skills/secure-secret-drop.md) — skill · moeadham · Claude Code, Codex, Cursor +3 · 3900 installs — This skill spins up a temporary Cloudflare Quick Tunnel link so you can hand an agent a password or key without pasting it into chat. - [endor-setup](https://affpapa.org/en/nevibecode/skills/endor-setup.md) — skill · cline · Claude Code, Codex, Cursor +3 · 1200 installs — This skill gets endorctl ready to work: checks the install, downloads the binary, handles authentication and runs a vulnerability scan. - [vtex-io-app-settings](https://affpapa.org/en/nevibecode/skills/vtex-io-app-settings.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1200 installs — Helps an agent define settingsSchema for a VTEX IO app and read the values safely in code. - [vtex-io-graphql-api](https://affpapa.org/en/nevibecode/skills/vtex-io-graphql-api.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1200 installs — Guides GraphQL schema and resolver work in VTEX IO apps. - [zeroboot-vm-sandbox](https://affpapa.org/en/nevibecode/skills/zeroboot-vm-sandbox.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 1300 installs — This skill runs agent code inside a real KVM virtual machine through Zeroboot, forking a template in under a millisecond. - [vulnerability-scanning](https://affpapa.org/en/nevibecode/skills/secondsky-vulnerability-scanning.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 512 installs — This skill outlines checks for dependencies, source code, and container images. - [dependency-auditor](https://affpapa.org/en/nevibecode/skills/onewave-ai-dependency-auditor.md) — skill · OneWave-AI · Claude Code, Codex, Cursor +3 · 302 installs — Checks npm packages for vulnerabilities, outdated versions and unused entries. - [docker-security-guide](https://affpapa.org/en/nevibecode/skills/docker-security-guide.md) — skill · JosiahSiegel · Claude Code, Codex, Cursor +3 · 595 installs — A skill that makes your coding agent review Docker setups for vulnerabilities and suggest concrete fixes. - [dependency-auditor](https://affpapa.org/en/nevibecode/skills/useai-pro-dependency-auditor.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 500 installs — Audits npm, pip, and Go packages before installation. - [api-rate-limiting](https://affpapa.org/en/nevibecode/skills/secondsky-api-rate-limiting.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 491 installs — A skill that walks you through rate limiting an API with token bucket, sliding window and Redis-backed counters. - [better-auth](https://affpapa.org/en/nevibecode/skills/secondsky-better-auth.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 488 installs — Guides Better Auth setup across TypeScript stacks, Cloudflare D1, and Drizzle ORM. - [api-security-hardening](https://affpapa.org/en/nevibecode/skills/secondsky-api-security-hardening.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 487 installs — Security layers for a REST API on Express: rate limits and input validation. - [threat-modeling-techniques](https://affpapa.org/en/nevibecode/skills/threat-modeling-techniques.md) — skill · NickCrew · Claude Code, Codex, Cursor +3 · 356 installs — A skill for threat modeling: walks the system through STRIDE, builds attack trees and scores risk with DREAD. - [recover-eco-funds](https://affpapa.org/en/nevibecode/skills/recover-eco-funds.md) — skill · circlefin · Claude Code, Codex, Cursor +3 · 300 installs — A skill that walks you through recovering USDC stuck in legacy Circle CLI deposits made with the eco method. - [sandbox-guard](https://affpapa.org/en/nevibecode/skills/sandbox-guard.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 483 installs — Builds Docker sandbox configs so you can run untrusted OpenClaw skills without handing them the host. - [headless-checkout-proxy](https://affpapa.org/en/nevibecode/skills/headless-checkout-proxy.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1100 installs — Guides agents when building cart and checkout flows for headless VTEX via a BFF. - [headless-bff-architecture](https://affpapa.org/en/nevibecode/skills/headless-bff-architecture.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1100 installs — Design a VTEX BFF for headless storefronts and keep private APIs, credentials, and shopper tokens out of browser code. - [vtex-io-security-boundaries](https://affpapa.org/en/nevibecode/skills/vtex-io-security-boundaries.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1100 installs — Guides coding assistants when auditing route exposure and data boundaries in VTEX IO apps. - [vtex-io-auth-tokens-and-context](https://affpapa.org/en/nevibecode/skills/vtex-io-auth-tokens-and-context.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1100 installs — Decides which VTEX IO token should back a backend request: the app itself, a shopper, or an Admin user. - [vtex-io-auth-and-policies](https://affpapa.org/en/nevibecode/skills/vtex-io-auth-and-policies.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1100 installs — This skill guides VTEX IO permission design for integrations, protected routes, and manifest policies. - [permission-auditor](https://affpapa.org/en/nevibecode/skills/permission-auditor.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 476 installs — Walks through the permissions an OpenClaw skill asks for, explains each one in plain language, and suggests a smaller set. - [output-sanitizer](https://affpapa.org/en/nevibecode/skills/output-sanitizer.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 475 installs — A skill that scans the agent's reply before it is shown or logged and strips leaked keys, PII and internal paths. - [setup-auditor](https://affpapa.org/en/nevibecode/skills/setup-auditor.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 469 installs — Checks an OpenClaw environment for leaked credentials, unsafe defaults and missing sandbox controls. - [config-hardener](https://affpapa.org/en/nevibecode/skills/config-hardener.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 468 installs — Checks AGENTS.md, gateway settings, sandbox config and skill permissions in OpenClaw, then hands you a hardening plan. - [payment-gateway-integration](https://affpapa.org/en/nevibecode/skills/secondsky-payment-gateway-integration.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 454 installs — A skill for wiring Stripe, PayPal or Square into your app: payment intents, subscriptions, webhooks and refunds. - [csrf-protection](https://affpapa.org/en/nevibecode/skills/csrf-protection.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 453 installs — A skill that walks your agent through CSRF protection: synchronizer tokens, double-submit cookies and SameSite attributes. - [network-watcher](https://affpapa.org/en/nevibecode/skills/network-watcher.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 454 installs — Checks where OpenClaw skills send data over the network and flags exfiltration before you install them. - [entra-agent-id](https://affpapa.org/en/nevibecode/skills/microsoft-entra-agent-id.md) — skill · microsoft · Claude Code, GitHub Copilot · 69 installs — Provisions OAuth2-capable identities for AI agents using Microsoft Graph beta API. - [entra-agent-id](https://affpapa.org/en/nevibecode/skills/entra-agent-id.md) — skill · Microsoft · Claude Code, GitHub Copilot · 69 installs — Creates Microsoft Entra identities for AI agents and configures OAuth 2.0 token exchange through Microsoft Graph. - [agent-email-patterns](https://affpapa.org/en/nevibecode/skills/agent-email-patterns.md) — skill · agentmail-to · Claude Code, Codex, Cursor +3 · 853 installs — A skill of architecture patterns for agents that talk over email: dedicated inboxes, reply loops, drafts a human approves before sending. - [propose-security-hardening](https://affpapa.org/en/nevibecode/skills/propose-security-hardening.md) — skill (official OpenAI) · OpenAI · Codex, ChatGPT · 13 installs — This skill turns vulnerability evidence and Codex Security results into structural hardening options, tradeoff analysis, and an implementation plan. - [docyrus-api-dev](https://affpapa.org/en/nevibecode/skills/docyrus-api-dev.md) — skill · Docyrus · Claude Code, Codex, Cursor +3 · 824 installs — This skill guides Docyrus API integration with OAuth2, data-source requests, query payloads, and external connectors. - [incident-responder](https://affpapa.org/en/nevibecode/skills/incident-responder.md) — skill · UseAI-pro · Claude Code, Codex, Cursor +3 · 444 installs — Step-by-step incident response playbook for OpenClaw security breaches. - [security-headers-configuration](https://affpapa.org/en/nevibecode/skills/secondsky-security-headers-configuration.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 438 installs — Sets up HTTP security headers against XSS, clickjacking and MIME sniffing. - [reverse-engineering](https://affpapa.org/en/nevibecode/skills/mohitmishra786-reverse-engineering.md) — skill · mohitmishra786 · Claude Code, Codex, Cursor +3 · 350 installs — A skill that walks the agent through binary analysis: Ghidra decompilation, radare2 workflows, Binary Ninja scripting. - [jwt-decode](https://affpapa.org/en/nevibecode/skills/jwt-decode.md) — skill · jsonwebtoken · Claude Code, Codex, Cursor +3 · 708 installs — Splits a JWT into header, payload and signature, prints every claim and flags the expiry. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=33 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md