NeVibeCode · 1,340 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
nodejs-keccak256 skill Catches NIST SHA3 used where Ethereum expects Keccak-256. Useful when a selector, signature or storage slot comes out wrong.
CX Codex +1
4,800installs
cloudflare-one-migrations skill Plans a migration from VPN, SWG or SASE to Cloudflare One: maps policies to Cloudflare resources, flags parity gaps and stages the rollout.
CX Codex +1
89,500installs
security-scan skill Scans the .claude/ directory for leaked secrets, loose permissions and hook injection risks. Useful right after you edit settings.json or add an MCP server.
CX Codex +1
4,700installs
perl-security skill Enforces Perl security practices: taint mode handling, allowlist input validation, three-argument open, safe execution, and DBI placeholders.
CX Codex +1
4,800installs
production-audit skill Checks whether an app is ready to ship and what will break in production. Runs on local evidence, so repo data stays on your machine.
CX Codex +1
4,700installs
build-mcpb
official skill Packages a local MCP server with Node or Python so users can install it without setting up a runtime first.
6,229installs
stripe-best-practices skill This skill guides Stripe API choices, payment flows, and integration security. Use it when building, testing, or reviewing Stripe code.
CX Codex +1
98,100installs
healthcare-phi-compliance skill PHI and PII security patterns for healthcare systems under HIPAA, GDPR, and DISHA. Helps configure RLS, audit logging, and stop data leaks in URLs or logs.
CX Codex +1
4,500installs
security-bounty-hunter skill Finds remotely reachable vulnerabilities that can support a bounty report. Use it when you need an exploitable path, not a broad security checklist.
CX Codex +1
4,500installs
springboot-verification skill This skill runs a Spring Boot verification loop covering builds, code analysis, tests, security scans, and diff review. Use it before a PR or deployment.
CX Codex +1
4,500installs
llm-trading-agent-security skill This skill reviews autonomous trading agents with wallet or transaction authority. Use it to check spend limits, pre-send simulation, key handling, and execution safeguards.
CX Codex +1
4,600installs
django-verification skill Runs a 12-phase Django verification loop: environment, linters, migrations, pytest coverage, security scans and diff review. Built for pre-PR and pre-deploy checks.
CX Codex +1
4,600installs
solana-dev skill Skill for building Solana dApps, writing Anchor smart contracts, managing wallets and transactions. Covers setup, testing, and devnet deployment end-to-end.
CX Codex +1
98,900installs
safety-guard skill This skill asks the agent to confirm destructive commands and limits edits to a chosen directory. Use it during migrations, deployments, or autonomous runs.
CX Codex +1
4,500installs
sql-code-review
official skill Reviews SQL for security and performance issues, as well as maintainability. Use it when checking queries or a database schema.
14,060installs
gcloud
official skill Validates gcloud commands, reduces command output, and adds execution guardrails for Google Cloud work. Use it when an agent handles the CLI.
CX Codex
10,974installs
postgresql-code-review
official skill Reviews SQL and database schemas for PostgreSQL-specific issues. Use it before reviewing migrations, JSONB queries, functions, or access rules.
12,608installs
security-ownership-map
official skill Builds a people-to-file map from git history, computes bus factor, and flags sensitive code with too few active owners.
CX Codex +1
3,800installs
code-review-excellence skill This skill guides pull request reviews, catches logic and security issues, and helps teams give specific feedback. Use it for review standards or developer mentoring.
CX Codex
30,193installs
make-repo-contribution
official skill This skill checks repository rules before issues, branches, commits, or pull requests, then guides the contribution workflow.
11,073installs
ai-prompt-engineering-safety-review
official skill This skill reviews prompts for safety, bias, security flaws, and clarity, then suggests concrete improvements. Use it before putting prompt changes into practice.
10,327installs
agent-governance
official skill Provides governance patterns for AI agents that use APIs, databases, or file systems. Use it when agent actions need policy checks, threat detection, and audit records.
9,623installs
azure-deployment-preflight
official skill Checks Azure Bicep deployments before they run, including syntax, permissions, and planned changes. Use it before azd provision or az deployment.
9,591installs
agent-platform-migrate-from-ai-studio
official skill Guides a Gemini API migration from Google AI Studio to Gemini Enterprise Agent Platform. Use it when the app needs Google Cloud billing, IAM, or shared infrastructure.
CX Codex
7,934installs
security-requirement-extraction skill Turns a threat model and business context into testable security requirements: user stories, acceptance criteria, test cases.
CX Codex
24,845installs
azure-role-selector
official skill This skill selects an Azure role with the least privilege needed for an identity and shows how to assign it. Use it when Azure access needs a careful RBAC match.
9,399installs
debian-linux-triage
official skill This skill troubleshoots Debian Linux issues with apt, systemd, and dpkg, while accounting for AppArmor and firewall concerns. Use it for guided diagnosis.
9,197installs
access
official skill This skill manages Telegram channel access through a local JSON file. Use it for pairings, allowlists, and DM or group policy changes.
3,867installs
access
official skill Edits the iMessage channel's access.json: approves pairings, manages the allowlist, sets DM and group policy.
3,867installs
access
official skill This skill manages Discord channel access through pairing, allowlists, and DM or group policies. Use it when access changes must come from the terminal.
3,867installs
configure
official skill Saves a Telegram bot token and reviews access policy. Use it when setting up the channel or checking who can reach the bot.
3,861installs
configure
official skill Checks iMessage channel setup in Claude Code and audits access rules. Use it when messages fail to reach the assistant or to see which contacts are allowed.
3,861installs
configure
official skill Sets up the Discord channel for Claude Code by storing the bot token and enforcing allowlist access rules.
3,861installs
fedora-linux-triage
official skill This skill troubleshoots Fedora with dnf, systemd, and SELinux-aware checks. Use it when an agent needs a clear diagnostic sequence and ready-to-run commands.
8,800installs
power-platform-mcp-connector-suite
official skill Builds Power Platform custom connectors with MCP support for Copilot Studio. Use it when creating, validating, or debugging connector schemas.
8,700installs
centos-linux-triage
official skill This skill diagnoses and fixes CentOS issues with RHEL-compatible commands, SELinux-aware checks, and firewalld guidance. Use it for server triage.
8,700installs
entra-agent-user
official skill Walks an agent through creating an agent user in Microsoft Entra ID so it can act as a digital worker with a mailbox and Teams presence.
8,600installs
workload-manager-basics
official skill This skill manages Google Cloud Workload Manager rules, evaluations, scanned resources, and findings. Use it for workload best-practice checks.
CX Codex
6,999installs
gke-networking
official skill Plans and configures core GKE networking, including private nodes, VPC-native clusters, DNS, egress, IP ranges, and Dataplane V2.
CX Codex
6,551installs
gke-app-onboarding
official skill Guides a first application deployment to GKE, from containerization and manifests to rollout checks. Use it when moving an app to GKE.
CX Codex
6,489installs
41–80 of 1,340
