# Skills for Security Skills for Security: what each one does, an install command and example prompts. 1434 cards · page 7 of 36 - HTML: https://affpapa.org/en/nevibecode/skills/topic/security?page=7 - Instructions for agents: https://affpapa.org/en/nevibecode/agents.md - [property-based-testing](https://affpapa.org/en/nevibecode/skills/property-based-testing.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 7000 installs — This skill helps create and inspect tests that check rules across generated inputs. - [fp-check](https://affpapa.org/en/nevibecode/skills/fp-check.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 7000 installs — Walks a suspected vulnerability through verification and returns a TRUE POSITIVE or FALSE POSITIVE verdict backed by evidence. - [github-code-review](https://affpapa.org/en/nevibecode/skills/github-code-review.md) — skill · ruvnet · Claude Code, Codex, Cursor +3 · 1300 installs — Runs a swarm of specialized AI agents to inspect GitHub pull requests for security, performance, and architecture issues. - [sharp-edges](https://affpapa.org/en/nevibecode/skills/sharp-edges.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 6900 installs — Audits API designs and configuration schemas for developer footguns. - [audit-context-building](https://affpapa.org/en/nevibecode/skills/audit-context-building.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 6800 installs — Maps assumptions, guarantees, and call chains in unfamiliar source code before vulnerability hunting starts. - [the-fool](https://affpapa.org/en/nevibecode/skills/the-fool.md) — skill · https://github.com/Jeffallan · Claude Code, Codex, Cursor +3 · 4400 installs — Challenges plans, architectures, and decisions using five structured reasoning modes. - [security-review](https://affpapa.org/en/nevibecode/skills/getsentry-security-review.md) — skill · getsentry · Claude Code, Codex, Cursor +3 · 21300 installs — Finds injections, XSS, authorization flaws, and other vulnerabilities in code. - [agentic-actions-auditor](https://affpapa.org/en/nevibecode/skills/agentic-actions-auditor.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 6700 installs — Inspects GitHub Actions workflows for prompt injection risks and insecure AI agent setups. - [gh-cli](https://affpapa.org/en/nevibecode/skills/gh-cli.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 6600 installs — A skill that redirects GitHub requests from curl and fetch to authenticated gh CLI for repositories, pull requests, and issues. - [gateway-workers](https://affpapa.org/en/nevibecode/skills/gateway-workers.md) — skill · cloudflare · Claude Code, Codex, Cursor +3 · 8600 installs — Skill for building, debugging, and reviewing Cloudflare Workers triggered by Forward actions in Gateway HTTP policies. - [agentic-jujutsu](https://affpapa.org/en/nevibecode/skills/agentic-jujutsu.md) — skill · ruvnet · Claude Code, Codex, Cursor +3 · 1200 installs — Coordinates multiple AI agents working on code simultaneously without version control locks, learning from execution trajectories. - [variant-analysis](https://affpapa.org/en/nevibecode/skills/variant-analysis.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 6400 installs — Finds related occurrences of an already identified defect across a repository. - [graphql-architect](https://affpapa.org/en/nevibecode/skills/graphql-architect.md) — skill · https://github.com/Jeffallan · Claude Code, Codex, Cursor +3 · 4000 installs — Designs schema-first GraphQL APIs, Apollo Federation 2.5+ subgraphs, and DataLoader resolvers to eliminate N+1 queries. - [ads-server-side-tracking](https://affpapa.org/en/nevibecode/skills/ads-server-side-tracking.md) — skill · AgriciDaniel · Claude Code, Codex, Cursor +3 · 3300 installs — Audits server-side paid-media measurement: verifies event parameters between browser and server, checks deduplication, data hashing, and privacy compliance. - [V3 Security Overhaul](https://affpapa.org/en/nevibecode/skills/v3-security-overhaul.md) — skill · ruvnet · Claude Code, Codex, Cursor +3 · 1100 installs — A skill that runs a security pass over claude-flow v3: three critical CVEs closed, and secure-by-default patterns wired into the code. - [V3 Swarm Coordination](https://affpapa.org/en/nevibecode/skills/v3-swarm-coordination.md) — skill · ruvnet · Claude Code, Codex, Cursor +3 · 1100 installs — Orchestrates a 15-agent hierarchical mesh swarm to implement claude-flow v3. - [sarif-parsing](https://affpapa.org/en/nevibecode/skills/sarif-parsing.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5900 installs — Processes existing SARIF reports from CodeQL, Semgrep, and other scanners. - [use-link-identity](https://affpapa.org/en/nevibecode/skills/use-link-identity.md) — skill · stripe · Claude Code, Codex, Cursor +3 · 9400 installs — Tells the agent how to fetch a Link Agent Attestation Token or signed claims and send them to a service that asked for them. - [spec-to-code-compliance](https://affpapa.org/en/nevibecode/skills/spec-to-code-compliance.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5800 installs — Compares an implementation against technical whitepapers or protocol specifications to flag missing logic, deviations, and unrecorded behavior. - [audit-prep-assistant](https://affpapa.org/en/nevibecode/skills/audit-prep-assistant.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5700 installs — Prepares codebases for external security reviews using Trail of Bits' checklist. - [entry-point-analyzer](https://affpapa.org/en/nevibecode/skills/entry-point-analyzer.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5700 installs — Finds externally callable smart contract functions that change state and classifies their access level. - [semgrep-rule-creator](https://affpapa.org/en/nevibecode/skills/semgrep-rule-creator.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5800 installs — A skill that walks you through creating custom Semgrep rules to detect security vulnerabilities and code patterns in your projects. - [security-auditor](https://affpapa.org/en/nevibecode/skills/sickn33-security-auditor.md) — skill · sickn33 · Claude Code, Codex, Cursor +3 · 1400 installs — Turns your AI coder into a security expert: conducts audits, analyzes vulnerabilities, reviews SDLC and compliance with OWASP, GDPR, PCI-DSS standards. - [organization-best-practices](https://affpapa.org/en/nevibecode/skills/organization-best-practices.md) — skill · better-auth · Claude Code, Codex, Cursor +3 · 36500 installs — Sets up multi-tenant organizations, invitations, and permissions in Better Auth. - [solana-vulnerability-scanner](https://affpapa.org/en/nevibecode/skills/solana-vulnerability-scanner.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5600 installs — Detects 6 critical vulnerabilities across native Rust and Anchor programs on Solana. - [token-integration-analyzer](https://affpapa.org/en/nevibecode/skills/token-integration-analyzer.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5500 installs — Checks ERC20 and ERC721 implementations plus code that integrates external tokens. - [intended-vs-implemented](https://affpapa.org/en/nevibecode/skills/intended-vs-implemented.md) — skill · phuryn · Claude Code, Codex, Cursor +3 · 1800 installs — Audits the gap between documented architecture and actual code boundaries. - [firestore-rules-creation](https://affpapa.org/en/nevibecode/skills/firestore-rules-creation.md) — skill · Google LLC · Claude Code, Codex, Cursor +3 · 25300 installs — Creates and refactors Cloud Firestore Security Rules in firestore.rules. - [thermo-nuclear-review](https://affpapa.org/en/nevibecode/skills/thermo-nuclear-review.md) — skill · cursor · Claude Code, Codex, Cursor +3 · 2700 installs — A skill for comprehensive analysis of branch changes: checks code for bugs, broken functionality, security vulnerabilities, and feature-gate leaks. - [learn-reverse-engineering](https://affpapa.org/en/nevibecode/skills/learn-reverse-engineering.md) — skill · rohitg00 · Claude Code, Codex, Cursor +3 · 488 installs — Interactive tutor for reading compiled programs. - [cargo-fuzz](https://affpapa.org/en/nevibecode/skills/cargo-fuzz.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5400 installs — Sets up cargo-fuzz inside a Cargo-based Rust crate and walks through the harness, sanitizers and crash triage. - [constant-time-analysis](https://affpapa.org/en/nevibecode/skills/constant-time-analysis.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5400 installs — Inspects compiled assembly and bytecode for timing side-channels. - [harness-writing](https://affpapa.org/en/nevibecode/skills/harness-writing.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5400 installs — Helps you write and fix a fuzzing harness: map raw bytes onto API arguments, kill non-determinism, stop chasing crashes that never reproduce. - [firebase-apk-scanner](https://affpapa.org/en/nevibecode/skills/firebase-apk-scanner.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5400 installs — Unpacks an Android APK, pulls out its Firebase config and probes databases, buckets and functions for open access. - [guidelines-advisor](https://affpapa.org/en/nevibecode/skills/guidelines-advisor.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5500 installs — Audits smart contract codebases against Trail of Bits guidelines. - [mcp-security-audit](https://affpapa.org/en/nevibecode/skills/mcp-security-audit.md) — skill (official GitHub) · github · GitHub Copilot · 1100 installs — Audits MCP server configurations for exposed secrets, shell injection, mutable package references, and unapproved servers. - [arize-ai-provider-integration](https://affpapa.org/en/nevibecode/skills/arize-ai-provider-integration.md) — skill (official GitHub) · arize · GitHub Copilot · 1100 installs — Manage Arize AI integrations for language model providers: create connections, inspect their settings, and update or remove them. - [agent-supply-chain](https://affpapa.org/en/nevibecode/skills/agent-supply-chain.md) — skill (official GitHub) · github · GitHub Copilot · 1100 installs — Checks AI agent plugins, tools, and dependencies with SHA-256 manifests. - [two-factor-authentication-best-practices](https://affpapa.org/en/nevibecode/skills/two-factor-authentication-best-practices.md) — skill · better-auth · Claude Code, Codex, Cursor +3 · 34300 installs — Walks an agent through adding two-factor auth to a Better Auth app: TOTP, codes by email or SMS, backup codes, trusted devices. - [fuzzing-dictionary](https://affpapa.org/en/nevibecode/skills/fuzzing-dictionary.md) — skill · trailofbits · Claude Code, Codex, Cursor +3 · 5300 installs — Generates and connects token dictionaries for parsers and protocols in libFuzzer or AFL++ when coverage stalls on initial checks. Next: https://affpapa.org/en/nevibecode/skills/topic/security.md?page=8 ## Refine [audit](https://affpapa.org/en/nevibecode/tag/audit.md) · [owasp](https://affpapa.org/en/nevibecode/tag/owasp.md) · [python](https://affpapa.org/en/nevibecode/tag/python.md) · [compliance](https://affpapa.org/en/nevibecode/tag/compliance.md) · [google-cloud](https://affpapa.org/en/nevibecode/tag/google-cloud.md) · [api](https://affpapa.org/en/nevibecode/tag/api.md) · [oauth](https://affpapa.org/en/nevibecode/tag/oauth.md) · [auth](https://affpapa.org/en/nevibecode/tag/auth.md) · [typescript](https://affpapa.org/en/nevibecode/tag/typescript.md) · [jwt](https://affpapa.org/en/nevibecode/tag/jwt.md) · [secrets](https://affpapa.org/en/nevibecode/tag/secrets.md) · [reverse-engineering](https://affpapa.org/en/nevibecode/tag/reverse-engineering.md) ## Narrow this list Parameters: `?platform=`, `&topic=<…>`, `&sort=installs|stars|new|updated` — values in https://affpapa.org/en/nevibecode/agents.md --- NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md