NeVibeCode · 1,340 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
audit-and-reduce-dependencies skill Shrinks JavaScript dependency footprint in pnpm projects and cleans up lockfiles while preserving workspace layouts. Best for trimming node_modules in Grafana plugins.
CX Codex +1
2,800installs
ctf-pwn skill A binary exploitation skill for CTF challenges. Guides agents through memory corruption analysis, layout calculation, and flag capture strategies.
CX Codex +1
333installs
ctf-rev skill Solves CTF reverse engineering challenges by systematically tracing input, identifying transformations, and isolating flag validation paths.
CX Codex +1
321installs
azure-well-architected-review
official skill Reviews Azure IaC and deployed resources against the five Well-Architected Framework pillars. Use it to surface risks and track remediation in GitHub issues.
41installs
code-review-pro skill Reviews files, a module, a diff or a branch and returns severity-ranked findings: vulnerabilities, correctness bugs, performance and maintainability issues, each with evidence and a fix.
CX Codex +1
2,600installs
newapi skill A skill for the New API gateway: models, groups, balance, tokens, and secure key substitution into configs and commands.
CX Codex +1
1,200installs
cx-platform-admin skill Manages Coralogix access controls, API keys, and user roles. Helpful when auditing team permissions or configuring IP access restrictions.
CX Codex +1
3,200installs
platform-datamask-run skill This skill runs a Salesforce Data Mask job end to end, from policy setup to a count of masked records. Handy when you clean PII out of a sandbox.
CX Codex +1
1,400installs
docker-sandboxes-network-credentials skill A skill for wiring Docker Sandboxes egress rules and credentials, so an agent reaches only the hosts you allow and authenticates without seeing raw tokens.
CX Codex +1
724installs
docker-sandboxes-kits skill Teaches your coding agent to author, validate, pack, and sign Docker Sandboxes spec.yaml kits under the v2 schema. Useful when creating agents or mixins.
CX Codex +1
723installs
viem-integration skill Guides TypeScript and JavaScript projects through EVM integration with viem. Use it to read chain data, call contracts, or send transactions.
CX Codex +1
1,700installs
cloud-onboarding skill Sets up the elastic CLI context and hands out Elastic Cloud access: invites, Serverless project roles, API keys.
CX Codex +1
1,000installs
workos skill Sets up AuthKit login and WorkOS integrations without requiring an API key up front. Helps configure SSO, webhooks, or migrate from Clerk and Auth0.
CX Codex +1
3,400installs
azure-developer-cli
official skill Helps design, review, and maintain Azure Developer CLI (azd) repositories. Useful when structuring azure.yaml, managing Bicep or Terraform code, and setting up CI/CD workflows.
32installs
proactive-agent skill Turns AI agents into proactive assistants that suggest next steps, log decisions before context window compactions, and enforce security checks.
CX Codex +1
632installs
brand-monitoring skill A Claude skill that sets up brand monitoring: fake accounts, typosquatting, counterfeit listings. It plans channels, cadence and alerts.
CX Codex +1
1,000installs
release-review skill Runs a macOS and iOS app through release checklists and returns a prioritised list of issues with concrete fixes. Useful before App Store or TestFlight submission.
CX Codex +1
514installs
code-review-analysis skill A skill that walks the agent through a systematic review: code quality, security, performance, tests. Useful when you are checking a pull request before merge.
CX Codex +1
2,400installs
hackerone skill Parses HackerOne scope tables, runs parallel pentesting agents per asset, and formats verified reports after checking exploit PoCs.
CX Codex +1
326installs
operating-safely skill Sets safety guards for destructive commands, secret handling, and parallel edits. It activates before dangerous operations like deleting data or restarting live processes.
CX Codex +1
17,900installs
verify-agent-action
official skill Audits proposed AI agent actions, deployments, and approvals before execution. It checks parameters, nonces, and telemetry, never authorizing or running actions on its own.
29installs
tm7-threat-model
official skill Creates .tm7 threat model files for Microsoft Threat Modeling Tool and adds STRIDE threats. Use it when a system description must become an editable threat model diagram.
29installs
audit-xcode-security-settings skill Runs a security pass over an Xcode project's build settings and switches on Clang warnings, analyzer checkers and Enhanced Security in stages. Useful when you need to harden a project.
CX Codex +1
695installs
finance-expert skill A skill for any task that touches an amount of money: balances, refunds, payouts, reconciliation, reporting. It carries a money model and double-entry rules.
CX Codex +1
6,400installs
test-specialist skill Guides AI coding agents when writing test suites and debugging JavaScript or TypeScript codebases. Useful for fixing coverage gaps and catching runtime errors.
CX Codex +1
902installs
security skill A security category index for Apple platforms that routes prompts directly to the privacy-manifests skill.
CX Codex +1
489installs
netsuite-sdf-roles-and-permissions skill Writes and reviews NetSuite SDF role XML and deployment permissions, returning exact permkey and permlevel values.
CX Codex +1
884installs
ansible-validator skill A skill that runs Ansible playbooks and roles through linters, check mode, Molecule and secret scanners. Useful when the code exists and you need to know what is wrong with it.
CX Codex +1
1,300installs
gitops-repo-audit skill Audits and validates Flux CD GitOps repositories from local files without touching live clusters. Catches schema errors, deprecated APIs, and security gaps.
CX Codex +1
662installs
azure-pipelines skill Get guidance on Azure Pipelines configuration and troubleshooting, from YAML and agents to secrets, tests, and deployments.
CX Codex +1
430installs
nushell-pro skill Guides an agent through writing, reviewing, debugging, and migrating Nushell code. Useful when maintaining .nu scripts or converting shell workflows.
CX Codex +1
2,500installs
security-fuzzing skill Provides curated SecLists fuzzing payloads for injection testing and input validation. Essential for authorized code audits, bug bounties, and CTFs.
CX Codex +1
583installs
azure-devops skill Provides your AI agent with reference guidance for Azure DevOps and server deployments. Useful for troubleshooting issues, checking quotas, and configuring access.
CX Codex +1
403installs
v4-security-foundations skill Walks through Uniswap v4 hook threats before you write code: caller checks, permission flags, delta accounting. Useful when touching beforeSwap or PoolManager.
CX Codex +1
1,200installs
integration-privy skill A skill that wires Privy authentication into a Solana Expo Android app on top of Mobile Wallet Adapter, using Sign-In-With-Solana.
CX Codex +1
11,600installs
seeker-genesis-token skill Verifies Seeker device ownership using Sign-in-with-Solana and server-side SGT checks. Useful for gating rewards and enforcing one claim per device.
CX Codex +1
11,600installs
c-bounds-safety skill Guides the adoption of the -fbounds-safety C language extension, helping add pointer annotations and debug runtime bounds violations.
CX Codex +1
623installs
sap-btp-best-practices skill A skill with SAP BTP practices: account model, authentication, CI/CD, failover. Useful when you plan a BTP landscape before writing anything.
CX Codex +1
1,000installs
develop-secure-contracts skill Guides coding assistants to integrate official OpenZeppelin contracts across multiple chains. Prevents writing redundant security logic from scratch.
CX Codex +1
545installs
security-payloads skill Delivers curated SecLists attack payloads for testing anti-virus filters and file upload handlers. Built for authorized penetration testers and auditors.
CX Codex +1
564installs
841–880 of 1,340
