NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
container-hardening skill Hardens Docker images and runtime environments with non-root users, read-only filesystems, and Kubernetes security contexts.
CX Codex +1
433installs
use-developer-controlled-wallets skill A skill for Circle developer-controlled wallets: create wallet sets, move tokens, sign messages and run contract calls through the Wallets SDK.
CX Codex +1
969installs
jenkinsfile-validator skill Validates Jenkins declarative and scripted pipelines, inspects shared Groovy libraries, and catches hardcoded secrets locally before committing.
CX Codex +1
660installs
vulnerability-scanning skill A skill for finding and prioritizing CVEs across systems and dependencies with Nessus, OpenVAS, Qualys and Nuclei. Useful for audits and compliance work.
CX Codex +1
424installs
use-circle-wallets skill A skill that picks between developer-controlled, user-controlled and modular Circle wallets, then hands implementation to the matching skill.
CX Codex +1
954installs
use-modular-wallets skill A skill for building crypto wallets on the Circle Modular Wallets SDK: passkey login, gasless transactions and modules like multisig.
CX Codex +1
952installs
use-user-controlled-wallets skill A skill for building non-custodial wallets on Circle's SDK, with Google, Apple, Facebook, email OTP or PIN login and keys the user keeps.
CX Codex +1
949installs
ssl-tls-management skill A skill for SSL/TLS work: issuing Let's Encrypt certificates, automating renewal, running cert-manager in Kubernetes and checking cipher suites. Useful when you set up HTTPS or fix an expired cert.
CX Codex +1
420installs
scenario-team-admin skill Governs a Scenario workspace via MCP: sets model allowlists or blocklists, updates member roles, limits Creative Unit spend, and audits project API keys.
CX Codex +1
341installs
terraform-validator skill Runs terraform fmt, validate, tflint and checkov over your .tf files, then writes a report with the findings.
CX Codex +1
640installs
static-analysis skill Guides static analysis configuration for C and C++ projects using clang-tidy, cppcheck, and scan-build. It helps filter warnings and triage false positives.
CX Codex +1
1,200installs
penetration-testing skill Security testing skill that guides ethical hacking, simulated attacks, and vulnerability documentation across applications and infrastructure.
CX Codex +1
1,100installs
hashicorp-vault skill A skill that walks your agent through HashiCorp Vault: secret engines, auth methods, policies and certificate issuance, without guessing CLI syntax.
CX Codex +1
413installs
electron-dev skill A skill for building Electron desktop apps with React, TypeScript and Vite: IPC, tray, PTY terminals, packaging.
CX Codex +1
305installs
ai-system-testing skill A skill for testing AI features in your product: prompt regressions, response quality, hallucinations, RAG grounding and injection.
CX Codex +1
1,100installs
security-testing skill Runs negative-path security checks in CI: ZAP, Semgrep, dependency scanning and tests for XSS, SSRF, auth bypass.
CX Codex +1
1,100installs
jwt-security skill A skill that feeds your coding agent a checklist for JWT work: algorithm allowlists, required claims, short token lifetimes, safe storage.
CX Codex +1
1,600installs
sops-encryption skill A skill that walks your agent through encrypting configs and Kubernetes secrets with Mozilla SOPS, using AWS KMS, GCP KMS or PGP keys. Useful when secrets live in Git.
CX Codex +1
403installs
api-audit skill Walks your REST, GraphQL and RPC endpoints against the OWASP API Security Top 10 (2023). Useful when you want a pass over the API contract, not the whole codebase.
CX Codex +1
482installs
podman skill Guides the agent to run daemonless and rootless containers with Podman. Handy for managing pods and generating systemd unit files.
CX Codex +1
400installs
adding-auth skill A skill that walks the agent through adding authentication to a web app with NextAuth.js: OAuth providers, sessions and protected routes.
CX Codex +1
379installs
incident-response skill Handles security breaches and system compromises using structured six-phase incident response playbooks and Linux forensic collection scripts.
CX Codex +1
394installs
dependency-audit skill Checks dependencies, frameworks, runtimes, and dev tools for CVEs and security anti-patterns. Use it when a project needs a stack-level security review.
CX Codex +1
468installs
codex-review skill Runs code audits using the OpenAI Codex CLI and GPT-5.2-Codex. Useful for catching security flaws and bugs before committing or inside CI/CD pipelines.
CX Codex +1
328installs
fluentbit-validator skill Validates and lints classic-mode Fluent Bit configs before deployment. It catches issues in INPUT, FILTER, and OUTPUT sections and verifies tag routing.
CX Codex +1
595installs
windows-hardening skill An agent skill that hardens Windows Server to Microsoft security baselines and CIS benchmarks: account policy, Group Policy, Defender, SMB.
CX Codex +1
388installs
audit-logging skill A skill for setting up centralized audit logging, retention and SIEM forwarding. Useful when you need an action trail for compliance or incident review.
CX Codex +1
385installs
runway-dev skill This skill guides Runway Dev integrations through current API contracts and the official SDK. Use it when building or debugging an app connection.
CX Codex +1
774installs
secrets-audit skill Finds leaked API keys across source code, Git history, and build artifacts while auditing secrets-management posture.
CX Codex +1
456installs
security-audit skill A skill that walks an agent through security reviews of code, infrastructure and AI agent configs using OWASP, CWE and CVSS. Useful before a release or when reading an unfamiliar codebase.
CX Codex +1
698installs
docker-compose-production skill Hardens Docker Compose files for production environments with resource limits, health checks, log rotation, Docker secrets, and network isolation.
CX Codex +1
484installs
pulumi-esc skill Guides coding agents through managing environments, secrets, and OIDC credentials in Pulumi ESC. It structures YAML manifests and connects them to Pulumi stacks.
CX Codex +1
1,400installs
agent-decision-receipts skill This skill mints a signed receipt for a consequential agent action — deploy, delete, pay, grant access — and verifies it later from the certificate alone.
44installs
security-guidance skill This skill applies OWASP ASVS guidance to code involving input, auth, storage, networks, files, cryptography, or access control.
CX Codex +1
401installs
penetration-testing skill Walks your agent through pentest phases: recon, scanning, exploitation, reporting. Useful when you need to validate your own security controls.
CX Codex +1
373installs
sast-scanning skill A skill that walks through static application security testing, so flaws in source code surface before deployment. Handy when you wire a security gate into CI/CD.
CX Codex +1
372installs
prompt-injection-defense skill Defends LLM applications against direct and indirect prompt injection attacks. It is designed for securing RAG pipelines and agentic tool-calling workflows.
CX Codex +1
372installs
code-review-security skill A skill that reviews code for vulnerabilities against OWASP Top 10 and ASVS, then reports findings with attack scenarios and fixed snippets.
CX Codex +1
402installs
compliance-testing skill A skill that tests how your site handles consent: what loads before a click, what survives a rejection.
CX Codex +1
1,000installs
kubernetes-hardening skill Generates hardened Kubernetes manifests with strict security contexts, network policies, and RBAC rules. Useful when preparing workloads for security compliance.
CX Codex +1
366installs
961–1,000 of 1,434
