# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 33 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=33 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [marketplace-order-hook](https://affpapa.org/en/nevibecode/skills/marketplace-order-hook.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1000 installs — Guides VTEX order integrations built with Feed v3 or Hook. - [payment-pci-security](https://affpapa.org/en/nevibecode/skills/payment-pci-security.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 1000 installs — Enforces PCI DSS requirements and Secure Proxy routing when building payment connectors that handle card authorization, token exchange, and post-auth requests. - [dockerfile-optimise](https://affpapa.org/en/nevibecode/skills/dockerfile-optimise.md) — skill · pproenca · Claude Code, Codex, Cursor +3 · 344 installs — A skill with 48 rules from official Docker docs: layer caching, multi-stage builds, security. - [rc-security](https://affpapa.org/en/nevibecode/skills/rc-security.md) — skill · RevenueCat · Claude Code, Codex, Cursor +3 · 649 installs — Walks an agent through a RevenueCat security review on Android: signature verification mode, API key hygiene, user identity and server-side entitlement checks. - [supabase-audit-auth-config](https://affpapa.org/en/nevibecode/skills/supabase-audit-auth-config.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 549 installs — Audits Supabase GoTrue authentication settings via the public API. - [payment-provider-framework](https://affpapa.org/en/nevibecode/skills/payment-provider-framework.md) — skill · vtex · Claude Code, Codex, Cursor +3 · 979 installs — This skill guides VTEX IO payment connector work, from PPF wiring to Secure Proxy and build checks. - [api-filtering-sorting](https://affpapa.org/en/nevibecode/skills/api-filtering-sorting.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 418 installs — A skill that walks your coding agent through building API filtering and sorting: query parsing, validation, and injection safety. - [roblox-security](https://affpapa.org/en/nevibecode/skills/sentinelcore-roblox-security.md) — skill · sentinelcore · Claude Code, Codex, Cursor +3 · 703 installs — A skill that steers your coding agent toward server-authoritative Roblox code: request validation, anti-cheat checks, rate limits. - [defense-in-depth-validation](https://affpapa.org/en/nevibecode/skills/defense-in-depth-validation.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 413 installs — A skill that pushes your agent to validate data at every layer it passes through, so the bug becomes structurally impossible. - [cicd-expert](https://affpapa.org/en/nevibecode/skills/cicd-expert.md) — skill · martinholovsky · Claude Code, Codex, Cursor +3 · 645 installs — A skill for building CI/CD: GitHub Actions, GitLab CI, Jenkins, security gates and ArgoCD GitOps. - [owasp-llm-top10](https://affpapa.org/en/nevibecode/skills/owasp-llm-top10.md) — skill · mastepanoski · Claude Code, Codex, Cursor +3 · 390 installs — This skill audits LLM and GenAI applications against the OWASP Top 10 for LLM Applications 2025. - [oauth-implementation](https://affpapa.org/en/nevibecode/skills/secondsky-oauth-implementation.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 408 installs — Guides OAuth 2.0 and OpenID Connect setup across web, mobile, and backend services while enforcing token rotation and PKCE. - [vercel-firewall](https://affpapa.org/en/nevibecode/skills/vercel-firewall.md) — skill (official OpenAI) · Vercel Labs · Codex, ChatGPT · 12 installs — A skill that walks your agent through Vercel Firewall: custom WAF rules, IP blocks, rate limiting, Attack Mode and the vercel firewall CLI. - [session-management](https://affpapa.org/en/nevibecode/skills/secondsky-session-management.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 408 installs — A coding-agent skill for building sign-in: JWT access and refresh tokens, session storage in Redis, and cookie flags that keep tokens out of reach. - [authjs-skills](https://affpapa.org/en/nevibecode/skills/authjs-skills.md) — skill · gocallum · Claude Code, Codex, Cursor +3 · 791 installs — An agent skill that walks through Auth.js v5 authentication in Next.js: Google OAuth, email and password sign-in, environment variables. - [supabase-audit-rpc](https://affpapa.org/en/nevibecode/skills/supabase-audit-rpc.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 524 installs — Lists the PostgreSQL functions exposed through Supabase's RPC endpoint and tests each one for RLS bypass and SQL injection. - [dependency-upgrade](https://affpapa.org/en/nevibecode/skills/secondsky-dependency-upgrade.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 404 installs — Upgrades dependencies without the usual risk: sets a cooldown on new versions, blocks postinstall scripts, and rolls out changes in stages. - [supabase-audit-realtime](https://affpapa.org/en/nevibecode/skills/supabase-audit-realtime.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 522 installs — Tests Supabase Realtime WebSocket channels for subscriptions that work without authorization and for data leaking through them. - [claude-hook-writer](https://affpapa.org/en/nevibecode/skills/claude-hook-writer.md) — skill · Claude Skills Maintainers · Claude Code, Codex, Cursor +3 · 397 installs — A skill that walks you through Claude hook design, flags unsafe input handling and catches the mistakes that break hooks. - [logging-best-practices](https://affpapa.org/en/nevibecode/skills/secondsky-logging-best-practices.md) — skill · secondsky · Claude Code, Codex, Cursor +3 · 396 installs — A skill that tells your agent how to log: levels, request context, PII masking. - [banking-expert](https://affpapa.org/en/nevibecode/skills/banking-expert.md) — skill · personamanagmentlayer · Claude Code, Codex, Cursor +3 · 800 installs — Gives the agent a reference on core banking, KYC/AML, payments and banking regulation. - [security-scan](https://affpapa.org/en/nevibecode/skills/jwynia-security-scan.md) — skill · jwynia · Claude Code, Codex, Cursor +3 · 471 installs — Scans a codebase for OWASP Top 10 flaws, hardcoded credentials and unsafe configs. - [dotnet-security](https://affpapa.org/en/nevibecode/skills/dotnet-security.md) — skill · claude-dev-suite · Claude Code, Codex, Cursor +3 · 322 installs — Hardens ASP.NET Core apps with security middleware, safe database queries, and automated NuGet dependency auditing. - [supabase-help](https://affpapa.org/en/nevibecode/skills/supabase-help.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 503 installs — Lists all 24 Supabase security audit skills with their commands and usage examples. - [security-advisory](https://affpapa.org/en/nevibecode/skills/security-advisory.md) — skill · modelcontextprotocol · Claude Code, Codex, Cursor +3 · ★ 91547 — Guides private vulnerability triage for GitHub Security Advisories: drafts board cards, audits code ownership against SDKs, and tracks private fork fixes. - [supabase-report](https://affpapa.org/en/nevibecode/skills/supabase-report.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 493 installs — Generates a structured Markdown security report from Supabase audit findings with risk scoring and remediation guidance. - [jwt-validate](https://affpapa.org/en/nevibecode/skills/jwt-validate.md) — skill · jsonwebtoken · Claude Code, Codex, Cursor +3 · 620 installs — This skill checks a JWT's structure, claims and signature step by step. - [supabase-audit-tables-read](https://affpapa.org/en/nevibecode/skills/supabase-audit-tables-read.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 487 installs — Reads data from exposed Supabase tables to show what actually leaks. - [supabase-audit-auth-users](https://affpapa.org/en/nevibecode/skills/supabase-audit-auth-users.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 484 installs — Checks whether Supabase Auth responses reveal if an email is registered. - [supabase-audit-tables-list](https://affpapa.org/en/nevibecode/skills/supabase-audit-tables-list.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 480 installs — Enumerates tables exposed through the Supabase PostgREST API so you can see the attack surface before testing deeper. - [jwt-encode](https://affpapa.org/en/nevibecode/skills/jwt-encode.md) — skill · jsonwebtoken · Claude Code, Codex, Cursor +3 · 606 installs — Builds and signs JSON Web Tokens for testing and development, with HMAC, RSA and ECDSA. - [supabase-detect](https://affpapa.org/en/nevibecode/skills/supabase-detect.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 478 installs — This skill checks a web app for signs of Supabase and records what it finds. - [supabase-extract-db-string](https://affpapa.org/en/nevibecode/skills/supabase-extract-db-string.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 477 installs — Scans client-side code for PostgreSQL connection strings and exposed Supabase credentials. - [tigris-security-access-control](https://affpapa.org/en/nevibecode/skills/tigris-security-access-control.md) — skill · tigrisdata · Claude Code, Codex, Cursor +3 · 3100 installs — This skill guides Tigris object-storage access control: keys, roles, CORS, and presigned URLs. - [supabase-audit-buckets-list](https://affpapa.org/en/nevibecode/skills/supabase-audit-buckets-list.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 474 installs — Lists every storage bucket in a Supabase project with its configuration and flags public ones as risk. - [supabase-audit-buckets-read](https://affpapa.org/en/nevibecode/skills/supabase-audit-buckets-read.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 471 installs — This skill walks your Supabase Storage buckets and reports what an anon key can actually reach. - [supabase-audit-auth-signup](https://affpapa.org/en/nevibecode/skills/supabase-audit-auth-signup.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 473 installs — Checks whether signup is open on your Supabase project and hunts for abuse vectors: spam accounts, weak passwords, disposable emails. - [supabase-report-compare](https://affpapa.org/en/nevibecode/skills/supabase-report-compare.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 468 installs — Diffs two Supabase security audit reports and sorts every finding into fixed, still open, or new. - [supabase-extract-jwt](https://affpapa.org/en/nevibecode/skills/supabase-extract-jwt.md) — skill · yoanbernabeu · Claude Code, Codex, Cursor +3 · 465 installs — This skill finds Supabase JWTs in client code, cookies, and storage patterns, then inspects their claims. - [infisical-terraform](https://affpapa.org/en/nevibecode/skills/infisical-terraform.md) — skill · Infisical · Claude Code, Codex, Cursor +3 · 478 installs — Walks your agent through the Infisical Terraform provider: provider auth, ephemeral secrets that stay out of state, and OIDC for Terraform Cloud. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=34 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md