NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
c-review skill Reviews native C/C++ code for memory bugs, integer overflows and races. Use it when auditing userspace applications, daemons or services.
CX Codex +1
3,700installs
browser-auth-flow skill Drives your login flow once, then probes it for redirect leaks, missing CSRF tokens, weak session cookies and OAuth mistakes. Writes a findings.md with a verdict.
CX Codex +1
689installs
aws-iam skill Verified corrections for the IAM mistakes agents keep making, plus step-by-step workflows for roles and baseline policies.
CX Codex +1
10,200installs
reverse-engineer skill Structured reverse engineering workflow for binaries: static decompilation, dynamic tracing, pattern detection, and automation scripts.
CX Codex +1
892installs
okx-agentic-wallet skill This skill gives a coding agent the OKX Onchain OS wallet: balances, transfers, swaps, bridges, limit orders and contract calls, all through the onchainos CLI.
CX Codex +1
17,400installs
witness skill Signs fix manifests with Ed25519 and tracks regressions using code markers. It detects reverted bug fixes before code ships to production.
CX Codex +1
655installs
generate-sandbox-policy skill Generates YAML sandbox policies for API access and network middleware settings. Use it when network access must be limited by host, HTTP method, or URL path.
CX Codex +1
470installs
android-intent-security skill Audits AndroidManifest.xml component settings and intent-handling code to stop Intent Redirection and unauthorized component execution.
CX Codex +1
1,700installs
seo-agentic skill Audits whether a site is ready for AI agents to browse and act. Use it for Lighthouse Agentic Browsing, llms.txt, WebMCP, robots.txt, and access checks.
CX Codex +1
982installs
varlock skill Instructs coding agents to manage secrets via Varlock, redact sensitive values in LLM context, and define configurations inside .env.schema.
CX Codex +1
753installs
assuredworkloads-environment-assessor
official skill Evaluates Google Cloud resources and Org Policies against data sovereignty standards. Recommends the right Assured Workloads framework before rollout.
CX Codex
475installs
verified-email skill Walks your agent through adding verified email retrieval on Android Credential Manager, with no OTP step. Useful when sign-up or account recovery needs less friction.
CX Codex +1
1,500installs
code-review skill Runs CodeRabbit CLI reviews and feeds structured findings back to the agent. Helpful for catching bugs, security risks, and code quality issues before merging.
CX Codex +1
14,800installs
clerk-setup skill Configures Clerk authentication via the Clerk CLI or scaffolds a fresh app with auth preconfigured. Useful for setting up dev keys and middleware without manual steps.
CX Codex +1
56,600installs
play-policy-insights skill Audits Android applications against Google Play Policy rules before submission. It flags undeclared data collection, permission hygiene risks, and account handling issues.
CX Codex +1
1,300installs
testing-api-security-with-owasp-top-10 skill Walks an agent through OWASP API Security Top 10 (2023) checks on REST, GraphQL and gRPC endpoints. Useful for authorized pentests and pre-release endpoint reviews.
CX Codex +1
769installs
query-token-audit skill Scans token smart contracts for scams, honeypots, and hidden transaction taxes via Binance Web3 API before you swap.
CX Codex +1
7,800installs
analyzing-api-gateway-access-logs skill This skill parses API Gateway access logs and flags BOLA/IDOR, rate-limit bypass, credential scanning, and injection attempts.
CX Codex +1
761installs
insforge-integrations skill A skill that walks your agent through hooking a third-party auth provider into InsForge and through taking x402 payments on an HTTP endpoint.
CX Codex +1
55,900installs
mantis-advise
official skill The skill makes your coding agent check a project's security knowledge base before it edits code: threat models, past bugs in that file, verified patches.
CX Codex +1
1,000installs
leanrea skill Reverse engineers software builds using local CLI tools without MCP. It helps inspect feature logic, extract dependencies, and compare builds.
CX Codex +1
1,300installs
securing-s3-buckets skill A skill that walks the agent through five S3 workflows: creating a secured bucket, auditing an existing one, fixing findings, configuring encryption and enabling monitoring.
CX Codex +1
6,900installs
dpa-review
official skill Reviews a Data Processing Agreement against your playbook, detects whether you are processor or controller, and returns a memo with redlines.
CX Codex +1
677installs
clerk-nextjs-patterns skill Provides authentication and authorization patterns for Next.js with Clerk. Helps protect routes, handle Server Actions, and configure caching correctly.
CX Codex +1
53,400installs
clerk-webhooks skill Hands the agent a working pattern for Clerk webhook handlers: signature verification, event routing, and database sync for users, sessions, orgs and billing.
CX Codex +1
52,800installs
creating-secrets-using-best-practices skill Walks the agent through creating an AWS Secrets Manager secret with a dedicated KMS key, a tight IAM policy and rotation. Useful when the secret is headed for production.
CX Codex +1
6,700installs
senior-backend skill Scaffolds backend APIs, detects database bottlenecks, and runs load tests. Useful when designing Express routes, optimizing PostgreSQL, or preparing for production.
1,674installs
ra-qm-skills skill Router across 15 compliance skills: ISO 13485, MDR, FDA, ISO 27001, GDPR, EU AI Act. Useful when a request does not clearly match one of them.
1,653installs
nuget-trusted-publishing skill Configures OIDC-based trusted publishing for NuGet packages via GitHub Actions. It replaces long-lived API secrets with temporary tokens for secure nuget.org releases.
CX Codex +1
3,300installs
cold-start-interview
official skill Runs an interview about your AI governance practice and writes the profile to CLAUDE.md so the plugin's other skills read the same setup.
CX Codex +1
630installs
launching-ec2-instance-with-best-practices skill This skill launches EC2 instances with security and cost controls in place. Use it when deploying a new AWS instance and checking its setup after launch.
CX Codex +1
6,300installs
configuring-vpc-endpoints-for-private-aws-service-access skill A skill that walks the agent through VPC endpoint setup with AWS PrivateLink, so AWS services stay reachable without an internet gateway or public IPs.
CX Codex +1
6,400installs
acquiring-disk-image-with-dd-and-dcfldd skill A skill that walks the agent through bit-for-bit disk imaging with dd or dcfldd, hashing the source and the copy for forensic work.
CX Codex +1
675installs
auto-updater
official skill Checks installed community skills for updates, displays diffs, and requires explicit approval before applying changes.
CX Codex +1
621installs
analyzing-android-malware-with-apktool skill Performs static analysis of suspicious Android APKs without executing them. It inspects permissions, manifest components, and API calls to assist SOC triage and rule creation.
CX Codex +1
675installs
geo-technical skill Audits technical SEO for indexing and AI crawler access. Use it before publishing or when investigating search visibility issues.
CX Codex +1
841installs
setting-up-ec2-instance-profiles skill Configures EC2 instance profiles and IAM roles so applications call AWS services without hardcoded credentials. Useful when an instance needs temporary access to S3, DynamoDB, or SQS.
CX Codex +1
6,200installs
rev-frida skill A skill that writes Frida instrumentation scripts for runtime analysis: hooking functions, tracing calls, dumping memory. Useful when reversing Android apps and native libraries.
CX Codex +1
2,200installs
dsar-response
official skill Guides you through Data Subject Access Requests and drafts response letters. It verifies identity, checks internal systems, analyzes exemptions, and prepares the draft.
CX Codex +1
614installs
pia-generation
official skill Writes a Privacy Impact Assessment using the structure learned from your seed PIA. Useful when a product team brings a new feature that touches personal data.
CX Codex +1
613installs
361–400 of 1,434
