# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 6 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=6 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [semgrep](https://affpapa.org/en/nevibecode/skills/semgrep.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 9500 installs — Runs a Semgrep static security audit on your codebase. - [audit-website](https://affpapa.org/en/nevibecode/skills/audit-website.md) — skill · squirrelscan · Claude Code, Codex, Cursor +3 · 73900 installs — Runs squirrel CLI audits against a website, pinpoints SEO, performance, and security issues, and applies fixes directly to source code. - [google-cloud-filestore-log-troubleshooting](https://affpapa.org/en/nevibecode/skills/google-cloud-filestore-log-troubleshooting.md) — skill (official Google) · google · Claude Code, Gemini CLI, Codex · 1600 installs — Diagnoses Google Cloud Filestore mount failures, access errors, and network timeouts. - [fastapi-expert](https://affpapa.org/en/nevibecode/skills/fastapi-expert.md) — skill · https://github.com/Jeffallan · Claude Code, Codex, Cursor +3 · 6100 installs — Guides async FastAPI development with Pydantic V2, from REST routes and authentication to database operations and tests. - [security-reviewer](https://affpapa.org/en/nevibecode/skills/security-reviewer.md) — skill · https://github.com/Jeffallan · Claude Code, Codex, Cursor +3 · 6000 installs — Finds code and infrastructure vulnerabilities, assigns severity ratings, and suggests fixes. - [ctf-writeup](https://affpapa.org/en/nevibecode/skills/ctf-writeup.md) — skill · ljagiello · Claude Code, Codex, Cursor +3 · 7900 installs — Generates a standardized markdown report for a solved CTF challenge, ready for organizer review and team handoff. - [setup-api-key](https://affpapa.org/en/nevibecode/skills/setup-api-key.md) — skill · calesthio · Claude Code, Codex, Cursor +3 · 1000 installs — A skill that checks whether an ElevenLabs API key is configured and working, then walks the user through obtaining and saving a new key if needed. - [cso](https://affpapa.org/en/nevibecode/skills/cso.md) — skill · garrytan · Claude Code, Codex, Cursor +3 · 405 installs — Audits code and infrastructure for security findings, with reproduction and repair candidates in comprehensive mode. - [ctf-ai-ml](https://affpapa.org/en/nevibecode/skills/ctf-ai-ml.md) — skill · ljagiello · Claude Code, Codex, Cursor +3 · 7700 installs — Provides AI and machine learning attack techniques for CTF competitions, from adversarial examples to LoRA weight inspection and prompt injection. - [nestjs-expert](https://affpapa.org/en/nevibecode/skills/httpsgithubcomjeffallan-nestjs-expert.md) — skill · https://github.com/Jeffallan · Claude Code, Codex, Cursor +3 · 5900 installs — A skill for designing and building NestJS backends in TypeScript: modules, services, controllers, validation, authentication and testing. - [cli-keys](https://affpapa.org/en/nevibecode/skills/cli-keys.md) — skill · cheaper-inference · Claude Code, Codex, Cursor +3 · 1000 installs — Manages OmniRoute API keys and provider OAuth flows from your terminal. - [differential-review](https://affpapa.org/en/nevibecode/skills/differential-review.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 8800 installs — Reviews code changes for security issues using Git history and test coverage. - [kr-whois-lookup](https://affpapa.org/en/nevibecode/skills/kr-whois-lookup.md) — skill · NomaDamas · Claude Code, Codex, Cursor +3 · 4400 installs — Queries public registration data for .kr domains, IP addresses, and AS numbers via k-skill-proxy. - [fullstack-guardian](https://affpapa.org/en/nevibecode/skills/fullstack-guardian.md) — skill · https://github.com/Jeffallan · Claude Code, Codex, Cursor +3 · 5600 installs — Builds security-focused full-stack web features across frontend and backend layers. - [careful](https://affpapa.org/en/nevibecode/skills/careful.md) — skill · garrytan · Claude Code, Codex, Cursor +3 · 375 installs — Intercepts Bash and PowerShell commands before execution to catch destructive actions like forced git pushes or database drops. - [cc-skill-security-review](https://affpapa.org/en/nevibecode/skills/sickn33-cc-skill-security-review.md) — skill · sickn33 · Claude Code, Codex, Cursor +3 · 2100 installs — Reviews code for SQL injection, XSS, leaked secrets, and authorization flaws. - [omni-github-skills](https://affpapa.org/en/nevibecode/skills/omni-github-skills.md) — skill · cheaper-inference · Claude Code, Codex, Cursor +3 · 968 installs — Searches GitHub for agent skill files like SKILL.md or CLAUDE.md, scans them for malware and hardcoded secrets, and installs them into your agent setup. - [cli-policy-audit](https://affpapa.org/en/nevibecode/skills/cli-policy-audit.md) — skill · cheaper-inference · Claude Code, Codex, Cursor +3 · 952 installs — Reads audit logs, access policies and telemetry from the Anthropic CLI. - [sandbox-npm-install](https://affpapa.org/en/nevibecode/skills/sandbox-npm-install.md) — skill (official GitHub) · github · GitHub Copilot · 1700 installs — This skill installs npm dependencies on Docker's local ext4 filesystem and symlinks node_modules back into the workspace. - [gdpr-compliant](https://affpapa.org/en/nevibecode/skills/gdpr-compliant.md) — skill (official GitHub) · github · GitHub Copilot · 1700 installs — This skill guides GDPR-aware work with APIs, user data, logs, retention, and deletion. - [codeql](https://affpapa.org/en/nevibecode/skills/trailofbits-codeql.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 8300 installs — Runs interprocedural taint tracking and data flow analysis using CodeQL. - [browser-extension-builder](https://affpapa.org/en/nevibecode/skills/sickn33-browser-extension-builder.md) — skill · sickn33 · Claude Code, Codex, Cursor +3 · 2000 installs — Guides the architecture and implementation of Manifest V3 browser extensions for Chrome and Firefox. - [supply-chain-risk-auditor](https://affpapa.org/en/nevibecode/skills/supply-chain-risk-auditor.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 8100 installs — Audits project dependencies for supply-chain risks, including advisories and signs of abandoned packages. - [freeze](https://affpapa.org/en/nevibecode/skills/garrytan-freeze.md) — skill · garrytan · Claude Code, Codex, Cursor +3 · 352 installs — The skill blocks Edit, Write and NotebookEdit outside one directory. - [guard](https://affpapa.org/en/nevibecode/skills/guard.md) — skill · garrytan · Claude Code, Codex, Cursor +3 · 349 installs — Activates full safety mode by catching destructive shell commands and locking file edits to a chosen directory. - [draft-nda](https://affpapa.org/en/nevibecode/skills/draft-nda.md) — skill · phuryn · Claude Code, Codex, Cursor +3 · 2600 installs — This skill drafts a detailed non-disclosure agreement between two parties, covering information types, jurisdiction, and marking sections that require legal review. - [secure-code-guardian](https://affpapa.org/en/nevibecode/skills/secure-code-guardian.md) — skill · https://github.com/Jeffallan · Claude Code, Codex, Cursor +3 · 5100 installs — A skill for implementing custom authentication, input validation, and OWASP Top 10 defences. - [binary-ninja-reverse](https://affpapa.org/en/nevibecode/skills/binary-ninja-reverse.md) — skill · zhaoxuya520 · Claude Code, Codex, Cursor +3 · 596 installs — Guides binary analysis in Binary Ninja using HLIL, MLIL, and LLIL representations. - [code-review](https://affpapa.org/en/nevibecode/skills/agno-team-code-review.md) — skill · agno-team · Claude Code, Codex, Cursor +3 · 472 installs — Automated code inspection for style violations, bugs, and best-practice gaps. - [pr-workflow](https://affpapa.org/en/nevibecode/skills/pr-workflow.md) — skill · tursodatabase · Claude Code, Codex, Cursor +3 · 1200 installs — Enforces rules for atomic commits, clean PRs, dependency licensing, and secret hygiene. - [better-auth-security-best-practices](https://affpapa.org/en/nevibecode/skills/better-auth-security-best-practices.md) — skill · better-auth · Claude Code, Codex, Cursor +3 · 48000 installs — Hardens Better Auth deployments by configuring rate limits, CSRF rules, session caching, and OAuth token encryption. - [secure-workflow-guide](https://affpapa.org/en/nevibecode/skills/secure-workflow-guide.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 7400 installs — Guides smart contracts through Trail of Bits' 5-step security audit on check-in or before deployment. - [threat-model-analyst](https://affpapa.org/en/nevibecode/skills/threat-model-analyst.md) — skill (official GitHub) · github · GitHub Copilot · 1500 installs — Runs STRIDE-A threat modeling for a repository or system. - [agent-owasp-compliance](https://affpapa.org/en/nevibecode/skills/agent-owasp-compliance.md) — skill (official GitHub) · github · GitHub Copilot · 1500 installs — Checks an AI agent codebase against the 10 OWASP ASI risks. - [verified-agent-identity](https://affpapa.org/en/nevibecode/skills/verified-agent-identity.md) — skill · BillionsNetwork · Claude Code, Codex, Cursor +3 · 8200 installs — This skill gives an agent an Ethereum DID on the Billions Network and a way through 402 Payment Required responses. - [ads-landing](https://affpapa.org/en/nevibecode/skills/ads-landing.md) — skill · AgriciDaniel · Claude Code, Codex, Cursor +3 · 3900 installs — Checks the page a paid ad points to: offer match, mobile layout, forms, consent, tracking and redirect safety. - [email-and-password-best-practices](https://affpapa.org/en/nevibecode/skills/email-and-password-best-practices.md) — skill · better-auth · Claude Code, Codex, Cursor +3 · 46900 installs — Configures email verification, password reset flows, and password policies in Better Auth. - [labarchive-integration](https://affpapa.org/en/nevibecode/skills/labarchive-integration.md) — skill · K-Dense-AI · Claude Code, Codex, Cursor +3 · 1900 installs — This skill guides work with LabArchives ELN API and Inventory API v1, including regional endpoints, request signing, and local request planning. - [pymatgen](https://affpapa.org/en/nevibecode/skills/pymatgen.md) — skill · K-Dense-AI · Claude Code, Codex, Cursor +3 · 1900 installs — Analyzes, validates, converts, and transforms materials structures and computed data with pymatgen. - [code-maturity-assessor](https://affpapa.org/en/nevibecode/skills/code-maturity-assessor.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 7100 installs — This skill evaluates smart contracts and blockchain code across nine maturity categories. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=7 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md