NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
cis-benchmarks skill Audits systems against CIS benchmarks and helps remediate security violations. Useful for applying hardening baselines to Linux servers or Kubernetes nodes.
CX Codex +1
366installs
waf-setup skill A skill that deploys and tunes a web application firewall: AWS WAF, Cloudflare and ModSecurity rules against OWASP Top 10 attacks.
CX Codex +1
366installs
netlify-access-control skill Chooses the right Netlify protection layer: password, private project, or SAML SSO. Use it when securing a site or Deploy Preview.
CX Codex +1
2,200installs
gdpr-compliance skill A skill that walks you through consent management, data subject rights and privacy by design when your project handles personal data of EU and EEA residents.
CX Codex +1
365installs
dast-scanning skill A skill that walks your agent through dynamic security testing of a running app or API using OWASP ZAP, Burp Suite and Nikto.
CX Codex +1
363installs
stripe-webhooks skill A skill for Stripe webhook work: signature verification, event parsing and ready handler examples. Useful when payment events fail verification.
CX Codex +1
595installs
security-auditor skill Scans your code for OWASP Top 10 patterns: SQL injection, XSS, exposed secrets, broken auth. Fires on file changes and before deployments.
CX Codex +1
780installs
supabase-postgres-best-practices
official skill Supabase guidelines for Postgres performance optimization. Helps developers write SQL queries, design database schemas, and configure RLS.
CX Codex GP ChatGPT
40installs
affiliate-fraud-detection skill Builds fraud detection rules and validation workflows for affiliate programs in B2B SaaS and ecommerce, covering cookie stuffing, fake leads, and holds.
CX Codex +1
12,900installs
threat-modeling skill Analyzes system architecture using the STRIDE methodology, maps trust boundaries, and defines security mitigations.
CX Codex +1
355installs
security-automation skill A skill that automates security checks and remediation: pipelines, auto-fixes, SOAR playbooks, compliance as code.
CX Codex +1
354installs
user-management skill Manages Linux users, groups, ACLs, and sudo privileges. Helps configure host access controls and password policies directly through an AI agent.
CX Codex +1
352installs
ai-red-teaming skill A skill for attacking LLM apps on purpose: jailbreaks, data exfiltration, agent tool abuse. Useful before you ship a model-powered feature.
CX Codex +1
353installs
ai-agent-security skill A skill for defending agents against prompt injection, tool abuse and data exfiltration. Useful when an agent touches production, databases or cloud accounts.
CX Codex +1
352installs
dt-sec-ioc-hunting skill Hunts indicators of compromise from reports and advisories across Dynatrace logs and spans, then scores threat exposure from 0 to 100.
CX Codex +1
1,000installs
zero-trust skill Implements zero-trust network architecture with identity-based access, micro-segmentation, and continuous verification. Helps replace traditional VPNs with BeyondCorp-style controls.
CX Codex +1
350installs
agent-wallet-policy skill Inspects USDC spending limits on Circle agent wallets and drafts CLI commands to update caps safely. Helps keep agent expenses under human control.
CX Codex +1
788installs
security-scan
official skill Runs a single-pass security audit on a repository or selected path. Use it for a general review when there is no diff to inspect.
CX Codex GP ChatGPT
39installs
referral-abuse-guardrails skill Writes the rules that keep customers from farming refer-a-friend rewards: caps, payout holds, verification gates and an enforcement ladder.
CX Codex +1
13,100installs
gcp-networking skill Configures GCP networking: creates VPCs, firewall rules, Cloud NAT, load balancers, and Private Service Connect using gcloud CLI and Terraform.
CX Codex +1
347installs
iso27001-compliance skill Guides the setup of an Information Security Management System aligned with ISO/IEC 27001:2022. Useful for risk assessments and audit preparation.
CX Codex +1
346installs
python-backend skill A skill that hands your agent working patterns for Python backends: FastAPI, async SQLAlchemy, JWT/OAuth2, Upstash caching and rate limits. Useful when the agent writes your API.
CX Codex +1
2,200installs
aws-s3 skill Hardens Amazon S3 buckets with SSE-KMS encryption, lifecycle transitions, bucket policies, and cross-region replication via AWS CLI.
CX Codex +1
345installs
threat-modeling skill Runs a structured threat-modeling session over a new feature or architecture using STRIDE, attack trees and abuse cases — before any code exists.
CX Codex +1
412installs
policy-as-code skill A skill that has your coding agent write OPA/Rego and Kyverno policies and wire their checks into CI/CD before changes hit production.
CX Codex +1
345installs
soc2-compliance skill This skill maps SOC 2 Trust Services Criteria to concrete controls and tells you which evidence to collect for Type I and Type II audits.
CX Codex +1
344installs
spatie-security skill Applies Spatie's security guidelines across applications, databases, servers, and Git workflows. Useful during infrastructure setup and security code reviews.
CX Codex +1
629installs
gcp-secret-manager skill This skill manages secrets in Google Cloud Secret Manager, including IAM access and GKE integration. Use it for secret work in GCP projects.
CX Codex +1
342installs
aws-cloudtrail skill Configures organization-wide AWS CloudTrail audit logging and CloudWatch security alerts. Useful for compliance checks and incident investigation.
CX Codex +1
340installs
ai-coding-agent-guardrails skill A skill that sets permission boundaries, secret protection and review gates for AI coding agents on a team. Useful when agents touch repos with secrets and infra configs.
CX Codex +1
340installs
incident-management skill This skill lays out severity levels, an escalation matrix, war room roles and blameless reviews. Useful when production breaks and nobody agrees on what to do.
CX Codex +1
339installs
recon skill A skill for structured reconnaissance of an authorized target: passive gathering, port scanning, and a prioritized attack surface map.
CX Codex +1
405installs
qwencloud-ops-auth skill Configures authentication for QwenCloud APIs, checks credentials, and resolves 401 errors. Useful when setting up DASHSCOPE_API_KEY or fixing access issues.
CX Codex +1
1,600installs
access-review skill Runs periodic access reviews across AWS IAM and GitHub: flags dormant accounts, unused keys and missing MFA. Useful when you need evidence for SOC 2, HIPAA or ISO 27001.
CX Codex +1
337installs
asset-inventory skill Maintains an IT asset inventory and CMDB across AWS, on-premise hardware, and SaaS. Useful when preparing for ISO 27001, SOC 2, or FedRAMP compliance audits.
CX Codex +1
335installs
x-ray-a-company skill Works a company in four layers: legal entity, ownership, people, infrastructure and risk. Useful before you sign a contract or pay an invoice.
CX Codex +1
2,100installs
vendor-management skill Establishes third-party risk management and categorizes suppliers across four security tiers. Helps prepare vendor evidence for SOC 2 and ISO 27001 audits.
CX Codex +1
334installs
business-continuity skill A skill that walks you through writing a business continuity plan, running a business impact analysis and setting up crisis communications.
CX Codex +1
335installs
aws-secrets-manager skill A skill for AWS Secrets Manager: create secrets, set up automatic rotation and wire them into applications.
CX Codex +1
335installs
mcp-server-security skill A hardening guide for MCP servers: TLS, OAuth 2.1, mTLS, input validation and audit logging for tool calls.
CX Codex +1
334installs
1,001–1,040 of 1,434
