NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
analyzing-linux-kernel-rootkits skill This skill looks for kernel-level rootkits in Linux memory dumps and live systems. Use it during incident investigations and digital forensics.
CX Codex +1
442installs
analyzing-golang-malware-with-ghidra skill Walks an agent through Go binary analysis in Ghidra: buildinfo, pclntab, function names, dependencies. Useful when the sample is Go-compiled.
CX Codex +1
441installs
analyzing-network-packets-with-scapy skill This skill guides packet analysis with Scapy, from pcap parsing to anomalous traffic checks. Use it for authorised testing and protocol-level network forensics.
CX Codex +1
441installs
analyzing-ios-app-security-with-objection skill A skill for runtime iOS app testing with Objection and Frida: dump the keychain, bypass SSL pinning, check jailbreak detection.
CX Codex +1
436installs
implementing-secret-scanning-with-gitleaks skill This skill helps configure Gitleaks to find secrets in Git repositories and stop them from entering history. Use it for local hooks and CI/CD checks.
CX Codex +1
439installs
claude-settings-audit skill Audits a repository and suggests read-only permissions for settings.json. Use it when setting up a project or reviewing existing Claude Code access.
CX Codex +1
4,500installs
business-logic-vulnerabilities skill A playbook for business logic bugs: race conditions, price tampering, workflow bypass, coupon abuse. Useful when the scanner finds nothing.
CX Codex +1
3,900installs
api-sec skill Routes API security testing across REST, GraphQL, and mobile backends. Helps an agent choose the right testing track before running deep checks.
CX Codex +1
3,900installs
xss-cross-site-scripting skill A skill that feeds your coding agent non-obvious XSS vectors: context-specific payloads, WAF and CSP bypass.
CX Codex +1
3,900installs
directconnect skill Configures AWS Direct Connect connections, virtual interfaces, BGP, encryption, and resiliency. Use it when linking a data center or colocation environment to AWS over a private connection.
CX Codex +1
4,000installs
testing-for-json-web-token-vulnerabilities skill Guides coding agents through auditing JWT implementations for none-algorithm bypass, RS256-to-HS256 confusion, kid injection, and weak secrets.
CX Codex +1
431installs
analyzing-network-traffic-for-incidents skill A skill that works through packet captures and flow data during an incident: C2 channels, lateral movement, data exfiltration.
CX Codex +1
430installs
performing-web-application-vulnerability-triage skill Triages SAST and DAST scanner findings, filters false positives, and calculates OWASP risk scores. It helps teams prioritize fixes and cut alert fatigue.
CX Codex +1
433installs
analyzing-cobaltstrike-malleable-c2-profiles skill Parses Cobalt Strike Malleable C2 profiles and extracts network indicators for detection rules. Use it when examining a profile or validating Beacon traffic.
CX Codex +1
426installs
gmgn-dev-score skill This skill scores a token creator from launch and trading history, then gives a buy or don’t-buy call for the next launch. Use it for dev checks.
CX Codex +1
6,100installs
vulnerability-triage-brocards skill This skill assesses vulnerability reports against seven criteria, helping an agent reject weak findings, ask for evidence, or escalate a report.
CX Codex +1
1,400installs
waf-bypass-techniques skill A skill offering WAF evasion methods for injection testing. It guides payload mutation through encoding, chunked requests, and parser discrepancies.
CX Codex +1
3,800installs
api-auth-and-jwt-abuse skill A playbook for probing bearer tokens, API keys and claim trust. Useful when an API leans on JWT or request headers for identity.
CX Codex +1
3,800installs
401-403-bypass-techniques skill A playbook for access-denied responses: what to try when an admin panel or API endpoint answers 401 or 403.
CX Codex +1
3,800installs
api-recon-and-docs skill A playbook skill for mapping REST, mobile, and GraphQL API surfaces. It finds hidden routes, OpenAPI schemas, and legacy version drift before testing.
CX Codex +1
3,800installs
idor-broken-object-authorization skill A testing playbook for IDOR, BOLA and BFLA: where object identifiers hide, how to run A-B tests, and how to chain a finding into privilege escalation.
CX Codex +1
3,800installs
jwt-oauth-token-attacks skill A skill for Claude and other AI editors that walks through attacks on JWT tokens and OAuth 2.0 flows. Useful when you need to check how an app trusts tokens and keys.
CX Codex +1
3,800installs
authbypass-authentication-flaws skill Testing playbook for authentication flaws. It guides assessments of login flows, password reset logic, account enumeration, brute-force protections, and MFA bypasses.
CX Codex +1
3,800installs
ssrf-server-side-request-forgery skill A skill for reviewing SSRF in features that fetch URLs, resolve hostnames, import remote content, or reach internal services.
CX Codex +1
3,900installs
resilience-program-design skill This skill designs a resilience program with policy tiers, availability, RTO/RPO targets, DR choices, and a cadence for resilience activities.
CX Codex +1
3,900installs
shieldadvanced skill Configures AWS Shield Advanced to defend workloads against DDoS attacks and recover scaling costs. Useful for CloudFront, ALBs, or Route 53 resources.
CX Codex +1
4,000installs
analyzing-network-traffic-of-malware skill Walks through a malware PCAP to find C2 protocols, exfiltration channels and payload downloads. Useful for sandbox runs and live incident response.
CX Codex +1
413installs
web-scraping skill Defines patterns for ethical scraping, access-failure handling, and cascading fallbacks across multiple extraction libraries.
CX Codex +1
6,100installs
gdpr-dsgvo-expert skill Scans code for GDPR and German BDSG privacy risks, builds DPIA reports, and tracks data subject rights deadlines.
980installs
clerk skill Reads your Clerk question and routes it to the right sub-skill: setup, CLI, framework patterns, billing, webhooks.
CX Codex +1
30,000installs
backend-development skill A skill that walks your agent through API design, database schemas, auth and CI/CD. Useful when a backend starts from scratch or heads to production.
CX Codex +1
2,300installs
analyzing-malicious-url-with-urlscan skill This skill walks through scanning suspicious and phishing URLs with URLScan.io and pulling the screenshot, DOM, redirect chain and IOCs out of the report.
CX Codex +1
411installs
resilience-hub-multi-account skill Configures AWS Resilience Hub v2 to assess workloads spanning multiple AWS accounts using a per-service IAM permission model.
CX Codex +1
3,800installs
resilience-hub-failure-mode-assessment skill Runs and interprets AWS Resilience Hub v2 failure mode assessments. Use it to triage findings and work through remediation.
CX Codex +1
3,900installs
resilience-hub-getting-started skill Sets up AWS Resilience Hub v2 from scratch, creates resilience policies with RTO and RPO targets, and runs an initial failure mode assessment.
CX Codex +1
3,900installs
traffic-analysis-pcap skill A playbook for network capture analysis: Wireshark filters, protocol breakdowns, covert channel detection and TLS decryption.
CX Codex +1
3,700installs
oauth-oidc-misconfiguration skill Testing playbook for OAuth 2.0 and OpenID Connect configurations. It guides security reviews of redirect URIs, state parameters, PKCE enforcement, and account binding flows.
CX Codex +1
3,700installs
csrf-cross-site-request-forgery skill A CSRF testing playbook for state-changing web flows, token checks, SameSite behavior, JSON requests, login CSRF, and OAuth state.
CX Codex +1
3,700installs
heap-exploitation skill A playbook for ptmalloc2 heap exploitation: UAF, double free, overflow, plus tcache, fastbin and unsortedbin attacks. Useful for CTF work and glibc bug triage.
CX Codex +1
3,700installs
business-logic-vuln skill Routes security testing toward business logic and state machine flaws. Focuses on race conditions, stacked discounts, quota bypasses, and workflow abuse.
CX Codex +1
3,700installs
481–520 of 1,434
