NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
creating-production-vpc-multi-az skill Plan a VPC across multiple Availability Zones, with public and private subnets, NAT gateways, routing, and security groups. Use it when setting up AWS network infrastructure.
CX Codex +1
6,100installs
launch-review
official skill Reviews a product launch against the team's legal framework and risk calibration, then produces a review memo. Use it with a PRD or launch tracker ticket before shipping.
CX Codex +1
606installs
oss-review
official skill Audits project dependencies and SBOMs for copyleft obligations and license conflicts. Prepares a legal memo before shipping binaries, deploying SaaS, or open-sourcing code.
CX Codex +1
606installs
skills-qa
official skill Runs a skill through thirteen design parameters and three legal failure modes, then hands you a verdict before you commit to it.
CX Codex +1
605installs
performing-web-application-penetration-test skill Guides step-by-step penetration testing of web applications following the OWASP WSTG methodology with Burp Suite. Used for pre-production security assessments and verifying fixes.
CX Codex +1
660installs
ai-inventory
official skill Keeps a register of AI systems with your role and risk tier for each one under the EU AI Act. Useful once you run more than a single system.
CX Codex +1
601installs
aia-generation
official skill Runs an AI impact assessment: structured intake, risk analysis, regulatory classification per regime, and a recommendation with conditions.
CX Codex +1
597installs
setting-up-cloudtrail-multi-region skill Configures a multi-region AWS CloudTrail trail with S3 storage and CloudWatch Logs streaming. Useful for centralizing API audit logs and running security queries.
CX Codex +1
6,100installs
policy-diff
official skill This skill compares a new regulatory requirement against your policy library and highlights which policies need updating and where. Use it when a regulator changes a rule and you need to know what it affects.
CX Codex +1
596installs
testing-for-xss-vulnerabilities skill Tests web applications for reflected, stored, and DOM XSS. Use it when reviewing input handling, output encoding, and CSP coverage.
CX Codex +1
647installs
skill-installer
official skill Inspects and installs community skills from watched registries. It displays raw SKILL.md files, verifies permissions, and waits for explicit approval before writing.
CX Codex +1
594installs
configure-auth skill Adds authentication and authorization to a Blazor Web App based on its render mode. It prevents runtime crashes with Identity and interactive routing.
CX Codex +1
3,100installs
api-gateway-backend-security-and-rate-limiting
official skill Configure client authentication, backend access, and per-project quotas for Google Cloud API Gateway. Use it when securing Cloud Run services or investigating quota errors.
CX Codex
360installs
vendor-ai-review
official skill Checks a vendor's AI agreement, addendum or ToS against your governance positions: training on data, liability, model changes.
CX Codex +1
592installs
conducting-api-security-testing skill This skill tests REST, GraphQL, and gRPC APIs for access-control, authentication, validation, and business-logic flaws. Use it for authorized API assessments.
CX Codex +1
643installs
asc-notarization skill Prepares a macOS app for distribution outside the App Store by archiving, Developer ID export, and Apple notarization.
CX Codex +1
6,600installs
aws-networking skill Routes AWS networking requests across seven services to their specialized implementation skills. It helps choose between connectivity and traffic filtering options.
CX Codex +1
5,900installs
create-auth skill A skill that walks the agent through planning and wiring authentication in a TypeScript/JavaScript app with Better Auth, from codebase scan to sign-in pages.
CX Codex +1
13,400installs
analyzing-email-headers-for-phishing-investigation skill Parses email headers, traces Received hops, and validates SPF, DKIM, and DMARC to expose phishing sources and sender spoofing.
CX Codex +1
612installs
analyzing-cyber-kill-chain skill Maps intrusion activity to the Lockheed Martin Cyber Kill Chain and exposes defensive gaps. Use it for incident review and prevention-focused control planning.
CX Codex +1
606installs
aws-lambda-microvms skill Builds, runs, and debugs Firecracker-isolated AWS Lambda MicroVMs with fast snapshot resume and session lifetimes up to 8 hours.
CX Codex +1
5,600installs
rust-review skill Audits Rust crates and libraries for memory safety in unsafe blocks, FFI boundaries, concurrency bugs, and panic DoS. Useful for in-depth security reviews.
CX Codex +1
2,000installs
analyzing-browser-forensics-with-hindsight skill Parses Chromium browser databases with Hindsight to reconstruct user web activity. Gathers history, cookies, and downloads into a unified timeline for forensic investigation.
CX Codex +1
592installs
roblox-networking skill A skill for designing and hardening Roblox client/server networking: RemoteEvent, RemoteFunction, UnreliableRemoteEvent, validation and rate limits.
CX Codex +1
3,500installs
rev-idapython skill A snippet reference for IDAPython and IDALib: scripts inside IDA and headless analysis for reverse engineering.
CX Codex +1
1,900installs
rev-symbol skill Recovers function names in decompiled code by analyzing constants, strings, and call relationships. Useful when reverse engineering stripped binaries.
CX Codex +1
1,900installs
rev-struct skill Reads memory accesses in decompiled functions and turns them into a struct definition with fields, offsets and a size estimate.
CX Codex +1
1,900installs
agent-email-inbox skill Sets up an inbound email inbox using Resend webhooks for AI agents and workflows. It adds sender filtering and security validation before email content triggers actions.
CX Codex +1
13,400installs
analyzing-cloud-storage-access-patterns skill A Claude Code skill that reads CloudTrail Data Events, GCS audit logs and Azure Storage Analytics to flag after-hours bulk downloads, fresh source IPs and GetObject spikes.
CX Codex +1
562installs
analyzing-certificate-transparency-for-phishing skill Monitors Certificate Transparency logs to spot phishing lookalikes and certificate issuance affecting an organisation’s domains.
CX Codex +1
547installs
analyzing-active-directory-acl-abuse skill Reads Domain Controller DACLs over LDAP with ldap3, parses them into SDDL and reports ACEs where non-admin accounts hold GenericAll, WriteDACL or WriteOwner.
CX Codex +1
548installs
rev-u3d-dump skill Recovers C# method names and addresses from Unity IL2CPP builds on iOS and Android, then produces import scripts for IDA and Ghidra.
CX Codex +1
1,800installs
rev-unicorn-debug skill A reversing skill that runs one function from a binary inside Unicorn, stubbing JNI, syscalls and libc so emulation reaches the return.
CX Codex +1
1,800installs
rev-dex-dumper skill Dumps DEX files directly from an Android application's process memory via ADB. It helps unpack APK files and defeat dynamic class loaders.
CX Codex +1
1,800installs
safe-browser skill The skill builds a local browser agent whose only tool is safe_browser. Requests to hosts outside the allowlist fail at the CDP layer.
CX Codex +1
1,700installs
testing-api-for-broken-object-level-authorization skill Tests REST and GraphQL APIs for BOLA and IDOR flaws by swapping object identifiers across requests. Helps detect broken access controls between different user accounts.
CX Codex +1
541installs
senior-security skill Builds STRIDE and DREAD threat models, scans code for secrets, and routes other security work to specialist skills.
1,277installs
testing-jwt-token-security skill A skill that walks an agent through JWT weaknesses: algorithm confusion, weak HMAC secrets, authorization bypass. Built for API and SSO pentests.
CX Codex +1
536installs
wp-guard skill Reviews WordPress plugins, themes, and blocks before they ship. The skill flags vulnerabilities across hooks, database queries, and form handlers in AI-written code.
CX Codex +1
2,600installs
analyzing-apt-group-with-mitre-navigator skill Queries ATT&CK data for APT groups and builds MITRE ATT&CK Navigator layers to compare TTP coverage and spot detection gaps.
CX Codex +1
531installs
401–440 of 1,434
