NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
analyzing-network-traffic-with-wireshark skill A skill that walks your agent through packet capture and analysis with Wireshark and tshark: C2 traffic, leaks, protocol faults.
CX Codex +1
533installs
code-review skill A skill that reviews pull requests and code changes against Sentry engineering practices: security, performance, tests, design.
CX Codex +1
5,500installs
analyzing-dns-logs-for-exfiltration skill Reads DNS query logs and hunts for tunneling, DGA domains and covert C2 channels. Useful when traffic slips past firewalls and proxies.
CX Codex +1
527installs
analyzing-command-and-control-communication skill This skill examines malware C2 traffic to map protocols, beacon patterns, encoding, commands, and infrastructure. Use it when a PCAP needs protocol analysis or detection signatures.
CX Codex +1
528installs
testing-for-broken-access-control skill Guides testing of web apps and APIs for broken access control flaws under OWASP A01:2021. Useful during RBAC audits and multi-tenant data boundary checks.
CX Codex +1
522installs
analyzing-linux-audit-logs-for-intrusion skill Guides Linux intrusion investigations with auditd, ausearch, and aureport, configuring kernel audit rules and rebuilding attacker timelines.
CX Codex +1
522installs
wp-abilities-verify skill Verifies WordPress plugin Abilities API registrations, flags hidden database writes in readonly callbacks, and validates schemas.
CX Codex +1
2,600installs
prompt-guard skill Integrates Meta's 86M parameter Prompt Guard model to detect jailbreaks and prompt injections in user prompts and RAG contexts before reaching the LLM.
CX Codex +1
974installs
exploiting-sql-injection-vulnerabilities skill Guides SQL injection testing across web applications during authorized security assessments. It helps audit database input handling and verify protection mechanisms.
CX Codex +1
504installs
llamaguard skill A skill that wires Meta's 7-8B LlamaGuard model into your agent to filter user prompts and model responses across 6 safety categories.
CX Codex +1
945installs
nemo-guardrails skill This skill helps configure runtime safety for LLM apps, from jailbreak checks to PII filtering. Use it when you need programmable Colang 2.0 rails.
CX Codex +1
944installs
analyzing-bootkit-and-rootkit-samples skill Analyzes bootkits and rootkits in MBR, VBR, and UEFI firmware. Use it when compromise signs remain after an OS reinstall.
CX Codex +1
486installs
rds-oracle skill Troubleshoots Amazon RDS for Oracle connectivity, authentication, networking and driver failures. Use it for EC2, EKS, Lambda or Oracle client connection issues.
CX Codex +1
4,600installs
reverse-engineering-android-malware-with-jadx skill A skill that walks the agent through a malicious Android APK: JADX decompilation, manifest review, and hunting for data theft and C2.
CX Codex +1
486installs
testing-api-authentication-weaknesses skill Tests REST API authentication for bypasses, broken JWT implementations, and unprotected endpoints. Useful for security auditing before production.
CX Codex +1
484installs
VibeSec-Skill skill A coding-agent skill that pushes the model toward secure web development and runs a security audit when you ask for one.
CX Codex +1
1,100installs
gmgn-contract-dd skill Scores one token address from 0 to 100 using contract safety, holder data and price action. Use it when you need one due-diligence verdict.
CX Codex +1
7,000installs
hack skill Acts as the primary router and safety gate for authorized penetration testing, code auditing, and incident triage. Enforces scope boundaries and stops without verified permission.
CX Codex +1
4,300installs
aws-auth skill Adds Amazon Cognito authentication to web and mobile apps. Use it for sign-in flows, MFA, OAuth federation, token handling, and protected API routes.
CX Codex +1
4,500installs
analyzing-azure-activity-logs-for-threats skill Runs KQL queries against Azure Monitor activity and sign-in logs to surface suspicious admin operations and sign-in anomalies.
CX Codex +1
471installs
is-this-photo-real skill A skill that checks whether an image or video is authentic: finds the earliest copy, reads metadata, tests lighting and shadows. Useful for fact-checking and manipulation review.
CX Codex +1
58,300installs
investigate-without-getting-made skill A skill that keeps your research from tipping off the subject: it maps your attribution surface, separates research identity from real identity, and says when a plain browser is enough.
CX Codex +1
58,200installs
analyzing-indicators-of-compromise skill Scores IPs, domains, hashes, URLs and email artifacts for maliciousness, then sorts them into block, monitor or whitelist.
CX Codex +1
466installs
analyzing-campaign-attribution-evidence skill A skill that scores cyber-campaign evidence against competing hypotheses and returns a confidence level for attribution. Useful when an incident report has to defend its conclusion.
CX Codex +1
464installs
testing-cors-misconfiguration skill Audits API endpoints for Cross-Origin Resource Sharing vulnerabilities during authorized penetration tests. It identifies weak Origin reflection and misconfigured credentials.
CX Codex +1
463installs
what-leaked-about-you skill This skill checks an email, username, phone or name against breach data and explains what each record means. Useful for a self-audit or account-takeover triage.
CX Codex +1
57,800installs
waf skill A skill for configuring AWS WAF: web ACLs, managed rules, Bot Control, login and signup protection. Useful when you need to defend an app or API at layer 7.
CX Codex +1
4,300installs
fallow skill Analyzes TypeScript and JavaScript codebases for dead code, duplicates, and architectural risks. Useful during PR reviews and refactoring.
CX Codex +1
9,600installs
analyzing-linux-system-artifacts skill Walks an agent through Linux system artifacts after a breach: auth logs, cron and systemd persistence, shell history, SSH keys. Built for incident response.
CX Codex +1
461installs
supabase-server skill Tells the agent how to write Edge Functions, Hono apps and webhook handlers on @supabase/server: auth modes, clients, inbound request checks.
CX Codex +1
9,700installs
analyzing-linux-elf-malware skill A skill that walks an agent through dissecting suspicious Linux ELF binaries: headers, strings, syscalls, Ghidra. Useful when a server or container looks compromised.
CX Codex +1
457installs
analyzing-disk-image-with-autopsy skill Guides forensic investigation of raw, E01, and AFF disk images using Autopsy and The Sleuth Kit. Helps extract metadata, recover deleted files, and build activity timelines.
CX Codex +1
454installs
find-the-original-image skill Searches multiple image engines for a picture’s source and earliest publication. Use it for photos, avatars, logos, products, buildings, and video keyframes.
CX Codex +1
56,500installs
aws-security skill Assesses AWS security architectures, network firewall policies, and findings from services like GuardDuty. Operates strictly read-only via AWS CLI or AWS MCP.
CX Codex +1
4,300installs
analyzing-kubernetes-audit-logs skill Parses kube-apiserver audit logs in JSON lines and flags exec into pods, secret reads, RBAC edits and anonymous access.
CX Codex +1
450installs
analyzing-sbom-for-supply-chain-vulnerabilities skill Parses CycloneDX and SPDX SBOM files, matches components against the NVD CVE database through the NVD 2.0 API and builds a dependency graph. Useful when you need to size up third-party library risk.
CX Codex +1
444installs
code-obfuscation-deobfuscation skill Binary deobfuscation playbook covering junk code, opaque predicates, control flow flattening, self-modifying code, and virtual machine protectors.
CX Codex +1
4,000installs
sqli-sql-injection skill A playbook for SQL injection work: which payloads to try first, how to fingerprint the DBMS, and how to pull data blind.
CX Codex +1
4,000installs
android-pentesting-tricks skill An Android pentesting playbook: SSL pinning bypass, exported component abuse, WebView attacks and intent redirection. Built for authorized mobile assessments.
CX Codex +1
4,100installs
abusing-dpapi-for-credential-access skill Guides extraction and decryption of Windows DPAPI secrets, including Credential Manager entries and browser data. Useful during authorized penetration tests after gaining host access.
CX Codex +1
442installs
441–480 of 1,434
