NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
fda-consultant-specialist skill This skill guides FDA pathways for medical devices, QMSR requirements, HIPAA assessments, and device cybersecurity. Use it when planning or reviewing regulatory work.
775installs
analyzing-mft-for-deleted-file-recovery skill Forensic skill for NTFS analysis: parses $MFT, $LogFile, $UsnJrnl and slack space to recover metadata and content of deleted files.
CX Codex +1
326installs
ghost-scan-secrets skill Scans repositories for leaked API keys, tokens, and hardcoded credentials. Useful for pre-commit checks or auditing codebases for exposed secrets.
CX Codex +1
4,400installs
exploiting-sql-injection-with-sqlmap skill Walks the agent through a sqlmap run: locate an injectable parameter, confirm it, pull data during an authorized pentest.
CX Codex +1
322installs
caido-mode skill Wires your agent into Caido: search HTTP history with HTTPQL, probe with proxied curl, and hand requests off as named Replay sessions.
CX Codex +1
2,700installs
analyzing-memory-forensics-with-lime-and-volatility skill Acquires Linux memory images with the LiME kernel module and extracts artifacts via Volatility 3 during security incident investigations.
CX Codex +1
321installs
bypassing-authentication-with-forced-browsing skill A pentest skill that enumerates URLs to find unprotected pages, APIs and admin panels, then checks where authentication isn't enforced.
CX Codex +1
321installs
testing-for-open-redirect-vulnerabilities skill Checks URL redirect parameters and validation bypasses. Use it when assessing login, OAuth, or SSO flows in systems you are authorized to test.
CX Codex +1
318installs
convex-authz skill Audits and hardens Convex backend authorization against four defect patterns. Fixes impersonation through arguments, missing ownership checks, and unauthorized writes.
CX Codex +1
36,100installs
convex-auth skill This skill adds passkey, OAuth, or password sign-in to a Convex app. Use it when auth needs to reach the server config, client hooks, and route guards.
CX Codex +1
36,200installs
convex-optimize skill The skill audits an existing Convex app and turns the findings into a plan: security, scale, component upgrades, observability.
CX Codex +1
36,000installs
convex-deploy-guard skill Classifies and announces the target Convex deployment before running mutations. Requires explicit approval for production and enforces read-only session modes.
CX Codex +1
36,000installs
convex-reviewer skill Walks Convex code through auth, validator, index and reactivity checks. Useful before you ship backend functions.
CX Codex +1
36,100installs
hardening-docker-containers-for-production skill This skill hardens Dockerfiles, images, and container runtime settings against CIS Docker Benchmark v1.8.0. Use it before production deployment or during an image audit.
CX Codex +1
320installs
conducting-external-reconnaissance-with-osint skill Builds a target profile from open sources: DNS, certificate logs, search, social media, repos and breach data. For the passive phase of a pentest.
CX Codex +1
319installs
analyzing-persistence-mechanisms-in-linux skill Scans Linux hosts for persistence in cron, systemd, LD_PRELOAD, and shell profiles, correlating findings with auditd logs.
CX Codex +1
319installs
convex-env skill This skill sets and wires Convex deployment environment variables and secrets. Use it when actions need deployment-specific values without putting secrets in code.
CX Codex +1
36,000installs
ghost-scan-deps skill An SCA orchestration skill that scans lockfiles for CVEs, evaluates vulnerability exploitability, and produces actionable remediation reports.
CX Codex +1
4,300installs
analyzing-pdf-malware-with-pdfid skill Walks an agent through a suspicious PDF's structure to find embedded JavaScript, shellcode and exploits before anyone opens the file.
CX Codex +1
317installs
convex-verify skill convex-verify tests a Convex feature with seeded data, multiple mocked identities, and negative authorization checks. Use it for a specific feature you have built or changed.
CX Codex +1
35,800installs
analyzing-threat-intelligence-feeds skill Turns commercial and open-source threat intel feeds into actionable indicators, adversary tactics and campaign context, normalized to STIX 2.1.
CX Codex +1
316installs
analyzing-threat-actor-ttps-with-mitre-attack skill Maps threat actor behavior and observed IOCs to MITRE ATT&CK, creates ATT&CK Navigator layers, and helps assess detection gaps.
CX Codex +1
312installs
testing-for-xxe-injection-vulnerabilities skill A skill that walks the agent through XXE checks: reading server files, SSRF and data exfiltration during authorized penetration tests.
CX Codex +1
311installs
analyzing-ransomware-network-indicators skill Parses Zeek conn.log and NetFlow to spot periodic C2 callbacks, TOR exit node connections and large outbound transfers.
CX Codex +1
311installs
exploiting-api-injection-vulnerabilities skill Audits API parameters, headers, and request bodies for injection flaws like SQLi and SSRF. Helps assess backend input validation against OWASP API standards.
CX Codex +1
311installs
mdr-745-specialist skill This skill supports EU MDR 2017/745 device classification, technical documentation, clinical evaluation, and post-market surveillance planning.
737installs
gmgn-narrative skill This skill builds a crypto token narrative card, covering its stated story and independently checkable social spread. Use it when hype needs verification.
CX Codex +1
4,500installs
diagnose
official skill This skill audits an AI workflow across five dimensions and returns scores with prioritized fixes. Use it before launch or after major workflow changes.
209installs
browser-fingerprint-audit skill Audits browser fingerprints for internal contradictions using the liarjs CLI. It spots mismatches between browser JavaScript APIs and edge network data.
CX Codex +1
102,600installs
analyzing-outlook-pst-for-email-forensics skill This skill parses Outlook PST and OST files to extract messages, headers, attachments, and deleted items. Use it for email forensics or incident response.
CX Codex +1
308installs
abusing-shadow-credentials-for-privesc skill Guides Active Directory account takeover by writing keys to msDS-KeyCredentialLink without password resets. Built for authorized red-team engagements when rights like GenericWrite appear in BloodHound.
CX Codex +1
307installs
testing-for-host-header-injection skill Tests web applications for HTTP Host header injection and related password reset, cache poisoning, SSRF, and virtual host routing risks.
CX Codex +1
306installs
testing-for-xss-vulnerabilities-with-burpsuite skill Walks your agent through finding and confirming XSS in a web app, from site map to CSP bypass. Meant for authorized penetration tests.
CX Codex +1
307installs
analyzing-powershell-script-block-logging skill This skill parses PowerShell Script Block Logging events from EVTX files and flags obfuscated commands, Base64 payloads and AMSI bypass attempts.
CX Codex +1
305installs
analyzing-packed-malware-with-upx-unpacker skill This skill walks you through unpacking a disguised UPX sample and recovering the original executable for static analysis.
CX Codex +1
303installs
analyzing-ransomware-leak-site-intelligence skill Collects structured victim data from ransomware data leak sites and tracks group trends. Helps threat intelligence teams build risk assessments.
CX Codex +1
303installs
gcp-cloud-architect skill Plans Google Cloud architectures, estimates costs, and generates infrastructure code. Use it when moving an app to GCP or choosing a deployment pattern.
717installs
analyzing-ransomware-encryption-mechanisms skill Analyzes ransomware encryption schemes, key management routines, and file structures. Helps evaluate whether encrypted files can be recovered without paying a ransom.
CX Codex +1
302installs
audit-integrity
official skill Enforces evidence verification, prevents finding suppression, and gates security reports with a score of at least 8 out of 10 during audits.
202installs
ai-security skill Scans prompts for injection signatures and assesses risks such as model inversion and agent tool abuse. Use it before exposing an AI system to untrusted input.
703installs
641–680 of 1,434
