NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
oss-sponsors-brand-strategy skill Builds a company's open-source sponsorship portfolio, maps budget allocations across dependencies, and defines renewal metrics.
CX Codex +1
10,200installs
aws-iam skill A skill that helps your agent write IAM policies, create roles and set up least-privilege access in AWS.
CX Codex +1
333installs
mdm-device-management skill Guides device management and security across macOS, Windows, iOS, and Android. Covers Fleet self-hosting, osquery security policies, and MDM platform selection.
CX Codex +1
330installs
draft-security-advisory skill Transforms vulnerability reports into publication-ready GitHub Security Advisories without leaking payloads, endpoints, or file paths.
CX Codex +1
480installs
change-management skill Sets up production change management workflows, CAB review rules, and request templates. Useful for meeting SOC 2 and ITIL compliance standards.
CX Codex +1
329installs
startup-it-troubleshooting skill Copy-paste commands for the person who ended up doing IT at a startup: password resets, Wi-Fi, VPN, disk space.
CX Codex +1
330installs
electron-development skill A skill that gives the agent rules for building Electron desktop apps: process separation, IPC, window security.
CX Codex +1
1,300installs
fedramp-compliance skill A skill for teams taking a cloud service through FedRAMP: it maps impact levels and NIST 800-53 control families to what you have to implement.
CX Codex +1
328installs
llm-app-security skill Security controls and validation rules to protect chatbots, RAG pipelines, and SaaS AI features from prompt injection, leaks, and abuse.
CX Codex +1
327installs
oauth2-provider-design skill Guides the architectural design of an OAuth 2.1 authorization server for B2B SaaS. Useful when issuing tokens to third-party clients and defining consent flows.
CX Codex +1
7,800installs
app-marketplace-review skill This skill designs the operator-side review and approval process for third-party apps on a B2B SaaS marketplace. Useful before launch or when an existing review flow needs a rebuild.
CX Codex +1
8,100installs
api-auth-key-management skill Design provider-side API key architecture with checksum prefixes, hashed storage, and zero-downtime rotation. Helpful when managing machine credentials and audit compliance.
CX Codex +1
7,800installs
ai-security-hardening skill Hardens production LLM deployments against prompt injection, data exfiltration, and supply chain attacks. Useful when securing model endpoints or preparing for SOC2 compliance.
CX Codex +1
326installs
pci-dss-compliance skill A skill that maps PCI DSS v4.0 requirements onto your project: pick the right SAQ, scope the CDE, plan the controls.
CX Codex +1
327installs
mobile-audit skill Audits iOS and Android mobile apps against OWASP MASVS and MASTG standards. Use it to review sensitive storage, weak crypto, network pinning, and platform IPC issues.
CX Codex +1
389installs
cloudflare-zero-trust skill A skill for securing internal apps and SSH access with Cloudflare Zero Trust without running a VPN. Covers cloudflared tunnels, IdP policies, and device checks.
CX Codex +1
325installs
api-security-hardening skill Skill adds authentication, rate limiting, CORS, input validation and security headers to REST API endpoints.
CX Codex +1
862installs
gcp-audit-logs skill A skill that walks you through Cloud Audit Logs in GCP: turning on data access logs, exporting them to BigQuery, and querying suspicious events.
CX Codex +1
324installs
osint-recon skill Gathers and correlates public intelligence across domains, organizations, and metadata. Helps map attack surfaces and document open-source findings.
CX Codex +1
386installs
mcp-server-offering skill Walks you through designing a product's MCP server as a surface AI agents operate: which tools to expose, under what limits, and how to measure the payoff.
CX Codex +1
8,000installs
stripe-best-practices
official skill Integration guide for Stripe in Codex: covers Checkout Sessions, Connect Accounts v2, tax setup, and restricted API keys.
CX Codex GP ChatGPT
36installs
ebpf-observability skill Guides the agent in configuring kernel-level tracing and network flows. Useful for deep debugging and security monitoring with Cilium and Tetragon without code changes.
CX Codex +1
320installs
azure-keyvault skill A skill for Azure Key Vault: stores secrets, keys and certificates, sets up access and wires them into Azure services.
CX Codex +1
321installs
find-exposed-servers skill Discovers exposed hosts, open ports and services using Shodan and Censys scan data without touching the target. Helpful for passive reconnaissance and attack surface audits.
CX Codex +1
2,000installs
identity-access-management skill A skill for setting up SSO, SCIM provisioning and MFA through Google Workspace, Okta or Azure AD. Useful once manual onboarding stops keeping up with the team.
CX Codex +1
317installs
secrets-scan skill Scans source and config files for hardcoded credentials, API keys and tokens, whether you are reviewing before a merge or auditing a repo.
CX Codex +1
337installs
azure-monitor-audit skill Configures Azure Monitor, Log Analytics, and Activity Logs for centralized auditing. It helps fulfill logging requirements for SOC 2, HIPAA, PCI DSS, or ISO 27001.
CX Codex +1
313installs
saas-security-posture skill A skill that audits and hardens your company SaaS stack: SSO, OAuth grants, shadow IT and admin accounts across Slack, GitHub, Google Workspace and AWS.
CX Codex +1
314installs
dt-obs-compliance-assistant skill Monitors EU DORA compliance posture using Dynatrace Compliance Assistant. It inspects compliance scores, Critical or Important Functions, and incidents.
CX Codex +1
889installs
prompt-injection skill This skill audits apps with AI features for prompt injection, permission bypass and system prompt leaks. Useful once an LLM or agent lands in your codebase.
CX Codex +1
372installs
ai-inference-service-mesh skill A skill that wires Istio and Linkerd into your inference stack: mTLS, canary releases, access policies and GPU backend protection.
CX Codex +1
310installs
mac-mini-llm-lab skill Sets up an Apple Silicon Mac mini as an always-on local LLM inference server with Ollama, MLX, launchd auto-start, and remote networking.
CX Codex +1
309installs
multi-tenant-llm-hosting skill A skill that walks your agent through building shared LLM inference for several teams or customers: tenant isolation, quotas, billing attribution and noisy-neighbor protection.
CX Codex +1
309installs
Skills-Security-Check skill Scans a folder of skills, flags suspicious patterns with static analysis, then has the agent sort out false positives. Useful before you install someone else's skill.
CX Codex +1
593installs
ci-cd-best-practices skill Provides guidelines for automated pipelines, testing workflows, and zero-downtime deployment patterns. Works with assistants supporting pipeline generation and DevOps tasks.
CX Codex +1
1,200installs
sap-api-policy skill Evaluates SAP interface integrations against the SAP API Policy v.4.2026a baseline and delivers an evidence-based technical assessment.
CX Codex +1
387installs
dig-through-data-brokers skill Guides people-search investigations across data brokers and public records. It generates lead selectors and structures personal privacy audits.
CX Codex +1
1,900installs
secrets-in-git-history skill A skill that teaches the agent to hunt API keys, tokens and identities in git history and on GitHub, not just in the checked-out tree.
CX Codex +1
1,900installs
who-owns-this-domain skill A skill that separates who registered a domain from who actually runs it, using WHOIS, RDAP, DNS records, ASN and historical archives. Useful for phishing takedowns, domain disputes and vendor checks before payment.
CX Codex +1
1,900installs
incident-triage skill Guides rapid security incident triage and containment using the NIST SP 800-61 methodology. Useful when handling breaches, malware, or suspicious activity.
CX Codex +1
361installs
1,041–1,080 of 1,434
