# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 36 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=36 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [flowdriver-covert-transport](https://affpapa.org/en/nevibecode/skills/flowdriver-covert-transport.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 310 installs — Routes SOCKS5 traffic through Google Drive API calls so it survives DPI and SNI filtering. - [sparkfinderoven-security-compliance-skills](https://affpapa.org/en/nevibecode/skills/sparkfinderoven-security-compliance-skills.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 759 installs — A suite of commands and workflows for security and compliance work: OWASP scanning, CVE detection, GDPR audits, SOC 2 readiness, threat modeling. - [pentestify-security-report-generator](https://affpapa.org/en/nevibecode/skills/pentestify-security-report-generator.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 747 installs — A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export. - [encore-go-secret](https://affpapa.org/en/nevibecode/skills/encore-go-secret.md) — skill · encoredev · Claude Code, Codex, Cursor +3 · 307 installs — A skill that shows the agent how to declare API keys and passwords in Encore Go with a package-level secrets struct. - [sparkfinderoven-r01-security-compliance-skills](https://affpapa.org/en/nevibecode/skills/sparkfinderoven-r01-security-compliance-skills.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 729 installs — A skill suite that scans code for OWASP vulnerabilities, checks dependencies for CVEs, audits GDPR and SOC 2 readiness, and builds STRIDE threat models. - [esaa-security-audit](https://affpapa.org/en/nevibecode/skills/esaa-security-audit.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 717 installs — This skill runs 95 checks across 16 security domains and records every finding as an immutable event, so the same repo state yields the same report. - [security](https://affpapa.org/en/nevibecode/skills/tartinerlabs-security.md) — skill · tartinerlabs · Claude Code, Codex, Cursor +3 · 531 installs — Checks dependencies for CVEs, scans the working tree and git history for secrets, wires a scanner into pre-commit, and runs an OWASP pass over the repo. - [foundry-security-spec](https://affpapa.org/en/nevibecode/skills/foundry-security-spec.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 683 installs — A skill that walks your agent through implementing Cisco's Foundry spec: a multi-role system for finding and validating vulnerabilities. - [web-security-scanner-pro](https://affpapa.org/en/nevibecode/skills/web-security-scanner-pro.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 607 installs — A skill that teaches your agent to drive Web Security Scanner Pro: 49 modules, WAF evasion, CMS checks and HTML or PDF reports. - [find-bugs](https://affpapa.org/en/nevibecode/skills/find-bugs.md) — skill · davila7 · Claude Code · 944 installs — Walks the diff on your current branch and reports bugs, security holes and code quality problems. - [sumsub-create-aml-resolution-rules](https://affpapa.org/en/nevibecode/skills/sumsub-create-aml-resolution-rules.md) — skill · sumsub · Claude Code, Codex, Cursor +3 · 447 installs — Builds and publishes Sumsub rules that auto-review AML screening hits: clearing false positives, confirming true ones. - [linux-pentester-command-reference](https://affpapa.org/en/nevibecode/skills/linux-pentester-command-reference.md) — skill · reason-machines · Claude Code, Codex, Cursor +3 · 308 installs — A skill that hands your agent a Linux command reference split by pentest phase: recon, enumeration, exploitation, privesc. - [safe-action-better-auth](https://affpapa.org/en/nevibecode/skills/safe-action-better-auth.md) — skill · next-safe-action · Claude Code, Codex, Cursor +3 · 477 installs — This skill wires Better Auth into next-safe-action: the middleware fetches the session, rejects unauthenticated calls and hands you a typed context. - [azure-keyvault-secrets-rust](https://affpapa.org/en/nevibecode/skills/azure-keyvault-secrets-rust.md) — skill · Microsoft · Claude Code, GitHub Copilot · 6 installs — Tells the agent how to read and write Azure Key Vault secrets from Rust using the official azure_security_keyvault_secrets crate. - [tool-abuse-detection](https://affpapa.org/en/nevibecode/skills/tool-abuse-detection.md) — skill · Tencent · Claude Code, Codex, Cursor +3 · ★ 7083 — Runs dialogue probes against an agent to catch command execution, out-of-scope file reads and SSRF. - [memory-poisoning-detection](https://affpapa.org/en/nevibecode/skills/memory-poisoning-detection.md) — skill · Tencent · Claude Code, Codex, Cursor +3 · ★ 7083 — This skill checks whether an agent stores a hostile instruction in long-term memory and follows it in later tasks. - [hardcoded-secret-detection](https://affpapa.org/en/nevibecode/skills/hardcoded-secret-detection.md) — skill · Tencent · Claude Code, Codex, Cursor +3 · ★ 7083 — This skill has the agent scan the source, configs and IaC it can reach for keys, tokens and passwords sitting in plain text. - [data-leakage-detection](https://affpapa.org/en/nevibecode/skills/data-leakage-detection.md) — skill · Tencent · Claude Code, Codex, Cursor +3 · ★ 7083 — A skill that runs escalating dialogue probes against an agent to surface leaked system prompts, credentials, PII and internal config. - [agentic-supply-chain-detection](https://affpapa.org/en/nevibecode/skills/agentic-supply-chain-detection.md) — skill · Tencent · Claude Code, Codex, Cursor +3 · ★ 7083 — This skill probes whether your agent pulls plugins, models or updates from untrusted sources. - [managing-network-policies](https://affpapa.org/en/nevibecode/skills/managing-network-policies.md) — skill · celigo · Claude Code, Codex, Cursor +3 · 303 installs — A skill for managing Celigo network policies: named IP allow and deny lists that restrict where MCP servers, API tokens and user sign-in can connect from. - [pci-dss-scoping](https://affpapa.org/en/nevibecode/skills/pci-dss-scoping.md) — skill · securityskills · Claude Code, Codex, Cursor +3 · 414 installs — Walks an agent through PCI DSS scoping: cardholder data flows, segmentation checks and a v4.0 requirements matrix. - [zoom-oauth](https://affpapa.org/en/nevibecode/skills/zoom-oauth.md) — skill (official OpenAI) · Zoom · Codex, ChatGPT · ★ 7596 — A Claude and Claude skill for Zoom authentication work: picking the grant flow, scope behaviour, refresh token rotation and error diagnosis. - [twilio-verify-send-otp](https://affpapa.org/en/nevibecode/skills/twilio-verify-send-otp.md) — skill (official OpenAI) · Twilio · Codex, ChatGPT · ★ 7596 — A skill that walks your agent through the full OTP lifecycle in Twilio Verify: create a service, send a code, check the submitted one. - [twilio-security-api-auth](https://affpapa.org/en/nevibecode/skills/twilio-security-api-auth.md) — skill (official OpenAI) · Twilio · Codex, ChatGPT · ★ 7596 — Walks you through Twilio's four auth methods and helps you wire up the right one before shipping API calls to production. - [twilio-lookup-phone-intelligence](https://affpapa.org/en/nevibecode/skills/twilio-lookup-phone-intelligence.md) — skill (official OpenAI) · Twilio · Codex, ChatGPT · ★ 7596 — A Claude and Claude skill that validates phone numbers through Twilio Lookup v2 and scores fraud risk before you send an SMS or place a call. - [nextjs-supabase-auth](https://affpapa.org/en/nevibecode/skills/nextjs-supabase-auth.md) — skill · davila7 · Claude Code · 367 installs — Guides the agent through Supabase Auth in Next.js App Router: middleware, OAuth callback, protected routes and cookie-based sessions. - [code-review-checklist](https://affpapa.org/en/nevibecode/skills/code-review-checklist.md) — skill · davila7 · Claude Code · 365 installs — A skill that walks a reviewer through context, functionality, quality, security, performance and tests. - [pentest-checklist](https://affpapa.org/en/nevibecode/skills/pentest-checklist.md) — skill · zebbern · Claude Code · 336 installs — A skill that walks you through pentest planning: objectives, scope, environment prep, tester selection and monitoring. - [secure-code-review](https://affpapa.org/en/nevibecode/skills/zebbern-secure-code-review.md) — skill · zebbern · Claude Code, Codex, Cursor +3 · ★ 4676 — This skill walks your code through all ten OWASP Top 10 categories and returns a report with vulnerable examples and working fixes. - [network-101](https://affpapa.org/en/nevibecode/skills/network-101.md) — skill · zebbern · Claude Code, Codex, Cursor +3 · ★ 4676 — A skill that walks the agent through standing up and testing HTTP, HTTPS, SNMP and SMB in a pentest lab, from service config to log analysis. - [aws-penetration-testing](https://affpapa.org/en/nevibecode/skills/aws-penetration-testing.md) — skill · zebbern · Claude Code, Codex, Cursor +3 · ★ 4676 — A skill that walks the agent through AWS pentesting: IAM enumeration, privilege escalation, metadata SSRF, S3 and Lambda exploitation. - [microsoft-azure-webjobs-extensions-authentication-events-dotnet](https://affpapa.org/en/nevibecode/skills/microsoft-azure-webjobs-extensions-authentication-events-dotnet.md) — skill · Microsoft · Claude Code, GitHub Copilot · 1 install — A skill for handling Microsoft Entra ID custom authentication events in .NET: token claims, attribute collection, OTP delivery. - [azure-security-keyvault-keys-dotnet](https://affpapa.org/en/nevibecode/skills/azure-security-keyvault-keys-dotnet.md) — skill · Microsoft · Claude Code, GitHub Copilot · 1 install — A skill for managing Azure Key Vault and Managed HSM keys from .NET: creation, rotation, encryption, signing. - [wireshark-analysis](https://affpapa.org/en/nevibecode/skills/wireshark-analysis.md) — skill · zebbern · Claude Code · 113 installs — A Claude skill for Wireshark work: capture and display filters, TCP/UDP stream reconstruction, protocol stats and anomaly hunting. ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md