NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
docker-development skill This skill reviews Dockerfiles, Compose files, and containers for build, image-size, and security issues. Use it when setting up or cleaning up containerized projects.
702installs
ghidra skill Runs headless Ghidra analysis to decompile executables into C and export strings, symbols, or call graphs. Helpful when reverse engineering firmware or binaries directly from the terminal.
CX Codex +1
652installs
secrets-vault-manager skill This skill helps manage infrastructure-level secrets across Vault and cloud stores, with access policies, rotation, and auditing for services and operators.
697installs
database-schema-designer skill This skill turns database requirements into relational schemas, ERDs, and migrations. Use it when planning tables for a feature or reviewing an existing design.
692installs
dependency-auditor skill An offline Claude Code skill that checks dependencies for vulnerability patterns and license conflicts, then drafts a risk-ranked upgrade plan. Use it before a release or license review.
688installs
android-permissions-security skill Audits an Android project for permission and IPC holes: weak custom permissions, spoofable caller checks, over-broad URI grants. Useful when reviewing AndroidManifest.xml.
CX Codex +1
508installs
replica-backend skill Builds the backend of an app clone: auth, database migrations and access rules, Stripe payments, email and background jobs. Reads replica/architecture.md and keeps a checklist in replica/backend.md.
CX Codex +1
613installs
skill-vetter skill Reviews OpenClaw SKILL.md files before installation. Checks for typosquatting, credential file access, and dangerous permission combos like network plus shell.
CX Codex +1
21,100installs
atlassian-admin skill Manage Atlassian users, groups, access, and organization settings. Useful when handling account changes, SSO, or integrations across Jira and Confluence.
682installs
octocat skill This skill handles Git and GitHub work through the gh CLI. Use it for pull requests, issues, CI checks, branch cleanup, and repository history.
CX Codex +1
1,300installs
oauth skill Implements OAuth 2.0 and 2.1 authorization flows in Fastify applications using PKCE and token rotation. Helps configure JWT validation hooks, session handling, and secure API routes.
CX Codex +1
1,300installs
pr-review-expert skill Reviews GitHub PRs and GitLab MRs for security risks, breaking changes, and test gaps. Use it before merging changes that affect shared code or APIs.
675installs
credentials skill Checks whether a key exists in .env and asks the user to add it without pasting the value into chat.
CX Codex +1
1,400installs
env-secrets-manager skill This skill audits environment variables and scans repositories for likely secret leaks. Use it before config changes, during rotation planning, or in incident triage.
667installs
ghost-repo-context skill Scans a codebase, finds projects, and writes an architecture map to repo.md. Use it before security analysis or when you need to orient yourself in a repository.
CX Codex +1
3,800installs
ghost-report skill Merges findings from every Ghost Security scan skill into a single report ranked by risk and confidence. Handy before a release or an audit.
CX Codex +1
3,800installs
ghost-validate skill Validates security vulnerability findings by tracing code paths and checking live endpoints. Separates true positive security bugs from scanner false positives.
CX Codex +1
3,800installs
code-review skill Reviews code for actionable defects, with correctness as the default focus. Use it for change reviews, bug hunts, and safety checks on fixes.
CX Codex +1
310installs
soc2-compliance skill Guides SaaS teams through SOC 2 Type I and Type II preparation. Helps map Trust Service Criteria, build control matrices, and organize audit evidence.
658installs
platform-permission-set-generate skill Creates Salesforce PermissionSet XML for object, field, user, and app permissions. Use it when editing FLS, tab visibility, or permission sets for deployment.
CX Codex +1
6,500installs
cloud-security skill Flags exploitable misconfigurations across AWS, Azure and GCP: IAM privilege escalation paths, public buckets, open security group ports. Useful before an audit or when reviewing IaC.
643installs
clerk-react-patterns skill Provides authentication patterns for React single-page apps using @clerk/react in Vite and CRA. It helps implement route guards, session hooks, and custom forms.
CX Codex +1
19,700installs
dx-code-analyzer-run skill Runs Salesforce Code Analyzer over your project and works through the results: engines, categories, severities, auto-fixes. Useful ahead of an AppExchange review.
CX Codex +1
6,400installs
threat-detection skill Supports proactive threat hunting with hypotheses, IOC sweeps and telemetry anomaly checks. Use it to investigate activity that automated alerts may miss.
637installs
google-workspace-cli skill Use this skill to manage Google Workspace through the gws CLI, from sending Gmail messages to listing Drive files. It fits workflows you want to run from Claude Code.
636installs
incident-response skill Sorts a fired alert into one of 14 incident types, filters false positives, and tells you who to page and what to preserve.
634installs
review-swarm skill Runs a parallel read-only review of a git diff or selected files. Use it to surface regressions, security concerns, and missing test coverage before merging.
CX Codex +1
756installs
ciso-advisor skill Turns security risks into financial estimates and helps plan compliance work. Use it to shape a security program, assess vendors, or coordinate incident response.
623installs
terraform-patterns skill Analyzes Terraform code for anti-patterns and scaffolds structured modules. Useful when hardening state backends or fixing security misconfigurations.
617installs
apigee-agent-gateway-governance
official skill This skill builds an Apigee proxy that inspects LLM traffic through Agent Gateway. Use it to meter model tokens, extract caller identity, or screen prompts.
CX Codex
145installs
solidity-auditor skill Runs a security audit of your Solidity code while you develop: one pass over the repo or a single file, with a report at the end.
CX Codex +1
830installs
build-game-map-editor skill Guides the creation of production-linked browser map editors for Three.js and isometric games. It keeps drafts isolated from live gameplay saves.
CX Codex +1
1,200installs
platform-sharing-rules-generate skill A skill for Salesforce record-level access: creates, edits and deletes Sharing Rules metadata through sf. Useful when sharing rules are managed from the editor, not the UI.
CX Codex +1
6,000installs
django-access-review skill A skill that hunts IDOR and broken authorization in Django: it walks views, DRF viewsets and ORM queries and shows where checks are missing.
CX Codex +1
2,700installs
kubernetes-skill skill Prevents Kubernetes hallucinations when writing manifests, Helm charts, and Kustomize overlays. It diagnoses misconfigurations before deployment.
CX Codex +1
1,400installs
authentication skill Build iOS sign-in flows with Apple credentials, passkeys, OAuth and biometrics. Useful when an app needs credential-state handling and server-side token checks.
CX Codex +1
3,900installs
helm-chart-builder skill Scaffolds production-ready Helm charts, analyzes templates for anti-patterns, and audits Kubernetes manifest security. Useful when packaging apps for clusters.
581installs
clawsec-suite skill This skill monitors ClawSec advisories, verifies signatures, and checks installed skills for affected entries. Use it when security checks need approval gates.
CX Codex +1
868installs
agentforce-test skill Writes and runs test suites for Agentforce agents: smoke checks, batch runs and adversarial probes. Useful once an agent is built and needs checking before it ships.
CX Codex +1
5,700installs
dx-org-permission-set-assign skill Assigns Salesforce permission sets to org users via sf org assign permset. Handles default admins, target org aliases, and batch assignments.
CX Codex +1
5,700installs
681–720 of 1,434
