NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
ghost-scan-code skill Finds security flaws in source code: SQL injection, XSS, SSRF and other OWASP categories. Plans the scans first, then runs them per project.
CX Codex +1
5,200installs
senior-secops skill Checks source code, dependencies and security controls. Use it before an audit, after a CVE, or when adding checks to CI/CD.
903installs
owasp-security skill A skill that reviews code and diffs for vulnerabilities against OWASP Top 10:2025, ASVS 5.0, and the LLM and agentic risk lists. Useful before a release.
CX Codex +1
2,400installs
reverse-shell-techniques skill A playbook for reverse shells: language one-liners, encrypted channels, web shells, PTY upgrades and msfvenom payload generation.
CX Codex +1
3,400installs
unauthorized-access-common-services skill A pentest skill covering Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN and H2 Console when they sit exposed without authentication.
CX Codex +1
3,400installs
upload-insecure-files skill Security testing playbook for file upload endpoints. It helps audit validation filters, storage path traversal, and background processing pipeline vulnerabilities.
CX Codex +1
3,500installs
restore-credentials skill This skill guides Android Restore Credentials integration with androidx.credentials for silent sign-in after an app is restored on a new device.
CX Codex +1
638installs
analyzing-network-covert-channels-in-malware skill Reads a PCAP for DNS tunneling, ICMP exfiltration and C2 hidden in HTTP. Useful during incident response or a hunt for exfiltration channels.
CX Codex +1
372installs
analyzing-network-flow-data-with-netflow skill This skill parses NetFlow v9 and IPFIX records to spot volumetric anomalies, port scanning, data exfiltration and C2 beaconing.
CX Codex +1
372installs
analyzing-heap-spray-exploitation skill A skill that reads memory dumps and finds heap spray artifacts: NOP sleds, executable injected regions and embedded shellcode.
CX Codex +1
372installs
security-audit skill This skill scans a game codebase for save tampering, cheat vectors, network exploits and input validation gaps. Run it before a public or multiplayer release.
CX Codex +1
416installs
skill-scanner skill Scans agent skills for prompt injection, malicious code, excessive permissions, secret exposure, and supply-chain risks before installation.
CX Codex +1
3,800installs
ghost-bits-cast-attack skill A Ghost Bits playbook: how a 16-bit Java char narrows to an 8-bit byte and slips past WAFs in front of SQLi, deserialization and webshell uploads.
CX Codex +1
3,300installs
analyzing-malware-sandbox-evasion-techniques skill Reads Cuckoo and AnyRun behavioral reports and flags the signs that a sample spotted the sandbox and played dead.
CX Codex +1
363installs
exploiting-idor-vulnerabilities skill Guides authorized testing of IDOR vulnerabilities across API endpoints using Burp Suite, the Authorize extension, and curl scripts.
CX Codex +1
365installs
analyzing-malware-behavior-with-cuckoo-sandbox skill A skill that detonates samples in Cuckoo Sandbox and walks through what they do at runtime: processes, files, registry, network.
CX Codex +1
361installs
modern-cpp skill Directs C++ development toward C++20/23/26 idioms, replacing dangerous raw pointers, legacy macros, and SFINAE boilerplate with memory-safe patterns.
CX Codex +1
1,200installs
information-security-manager-iso27001 skill Automates ISO 27001:2022 ISMS implementation, security risk assessment, and compliance checking for HealthTech and MedTech companies.
855installs
testing-for-sensitive-data-exposure skill A skill that walks an agent through checks for leaked secrets, PII in API responses, and unencrypted data transmission. Useful during authorized pentests and data protection audits.
CX Codex +1
356installs
performing-security-headers-audit skill Audits HTTP security headers including CSP, HSTS, and cookie flags. It detects missing browser protections and configuration flaws on web endpoints.
CX Codex +1
359installs
analyzing-malware-persistence-with-autoruns skill A skill that walks the agent through Windows persistence hunting with Sysinternals Autoruns: registry keys, services, tasks, drivers. Built for incident response.
CX Codex +1
356installs
unsafe-checker skill Reviews unsafe Rust blocks and FFI boundaries, tracking required SAFETY comments and catching common causes of undefined behavior.
CX Codex +1
3,200installs
analyzing-memory-dumps-with-volatility skill Investigates RAM memory dumps using Volatility 3 to uncover hidden malware, code injections, network activity, and cached credentials.
CX Codex +1
354installs
security-pen-testing skill This skill guides vulnerability checks across web apps, APIs, and dependencies, from OWASP reviews to pen test reports. Use it for assessments you are authorized to perform.
834installs
code-review skill Walks the changed lines of a diff looking for leaked secrets, injection, empty catch blocks and placeholder code. Picks the domain from file paths.
CX Codex +1
1,200installs
testing-oauth2-implementation-flaws skill A skill that probes OAuth 2.0 and OpenID Connect flows for code interception, redirect URI tricks, CSRF, token leakage and PKCE bypass.
CX Codex +1
350installs
implementing-api-rate-limiting-and-throttling skill This skill configures Redis-backed sliding window and token bucket rate limiters to protect API endpoints against brute force attacks.
CX Codex +1
348installs
analyzing-malware-family-relationships-with-malpedia skill This skill connects malware aliases, YARA rules, and threat actors through Malpedia. Use it to study family lineage, loader-payload chains, or attribution.
CX Codex +1
349installs
red-team skill Skill for structured authorized red team operations: MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, and OPSEC risk assessment.
826installs
analyzing-lnk-file-and-jump-list-artifacts skill Parses Windows shortcut files and Jump Lists with LECmd, JLECmd and manual Shell Link parsing. Useful when you need proof a file was opened after it was deleted.
CX Codex +1
348installs
domain-web skill A Rust web-service skill covering async handlers, shared state, errors, extractors, and middleware. Use it when a project contains Cargo.toml.
CX Codex +1
3,100installs
adversarial-reviewer skill This skill reviews changes through Saboteur, New Hire, and Security Auditor personas. Use it before merging a PR or when Claude is too agreeable.
813installs
assuredworkloads-frameworks-navigator
official skill Maps compliance requirements to Google Cloud Data Boundary Frameworks and cloud controls. It helps teams select built-in frameworks and spot compliance gaps.
CX Codex
191installs
analyzing-macro-malware-in-office-documents skill Examines malicious VBA macros in Word, Excel, and PowerPoint files. Use it to inspect suspicious attachments and reconstruct an attack chain.
CX Codex +1
336installs
testing-for-business-logic-vulnerabilities skill This skill manually checks web app business logic with Burp Suite. Use it to examine price changes, skipped workflow steps, privilege escalation, and race conditions.
CX Codex +1
333installs
isms-audit-expert skill Skill for ISO 27001 compliance verification, security control assessment, and certification support. Documents audit findings, classifies nonconformities, and manages corrective actions.
791installs
assuredworkloads-frameworks-author
official skill This skill authors custom cloud controls and customized frameworks for Assured Workloads when built-in resources do not cover the requirement.
CX Codex
185installs
skill-security-auditor skill Scans AI agent skills for malicious code before install: detects eval(), os.system(), data exfiltration, prompt injection, and vulnerable dependencies.
785installs
ms365-tenant-manager skill This skill assists Global Administrators with Microsoft 365 tenant setup, user lifecycle tasks, licensing, Exchange Online, Teams, and security policies.
783installs
testing-websocket-api-security skill Audits WebSocket API security, checking upgrade handshake authentication, token validation, and CSWSH vulnerabilities. Useful during API security reviews.
CX Codex +1
328installs
601–640 of 1,434
