NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
finding-triage skill Evaluates a single security finding from a scanner or audit to establish reachability, contextual severity, and a ticket-ready disposition.
CX Codex +1
360installs
disk-forensics skill A skill for working through disk images, file systems and memory captures: deleted file recovery, timeline building, artifact hunting. Built for investigations and CTF work.
CX Codex +1
357installs
privacy-engineering skill A skill that helps your AI agent implement and audit privacy controls in code and infrastructure: GDPR, CCPA/CPRA, LGPD, PIPEDA.
CX Codex +1
352installs
crypto-audit skill Reviews how cryptography is implemented in your code: cipher modes, KDF parameters, IV and nonce handling, signature checks. Useful when the code looks right but still leaks.
CX Codex +1
353installs
iam-audit skill Audits cloud and IdP access policies, designs greenfield RBAC models, and plans identity migrations. Useful when untangling privilege creep or moving to SSO.
CX Codex +1
351installs
cloud-audit skill This skill checks AWS, GCP and Azure configurations for misconfigurations, excessive permissions and public exposure. Useful before a release or after an incident.
CX Codex +1
352installs
github-webhooks skill A skill for receiving and verifying GitHub webhooks: signature checks, event types, and handlers for push, pull_request, issues and release.
CX Codex +1
487installs
vuln-research skill Investigate a CVE against your project: check affected versions, trace whether vulnerable code is used, and weigh patches against mitigations.
CX Codex +1
350installs
drupal-security skill A coding-agent skill that nudges you toward safe Drupal patterns: parameterized queries, escaped output, permission checks. It activates on its own while you write forms, controllers or handle user input.
CX Codex +1
823installs
flutter-networking skill A skill for Flutter network code: HTTP/REST, WebSocket, auth and token refresh, timeouts, retries, JSON parsing, caching. Useful when adding requests or chasing network errors.
CX Codex +1
722installs
dd-audit skill A skill for Datadog Audit Trail work: who changed what, whether a key was compromised, and what caused a cost spike.
CX Codex +1
709installs
databricks-unity-catalog skill Helps agents handle Unity Catalog permissions, configure row filters and column masks, manage storage, and query system tables in Databricks.
CX Codex +1
325installs
follow-the-crypto skill A skill for tracing cryptocurrency addresses and transactions across public blockchains through block explorers.
CX Codex +1
1,800installs
geolocate-from-pixels skill Extracts location and timestamp data from outdoor photos and video using visual cues alone, without EXIF or GPS metadata. Built for verification, fact-checking, and GEOINT.
CX Codex +1
1,800installs
secrets-in-file-metadata skill Pulls EXIF, XMP, IPTC and Office or PDF properties with exiftool: GPS, camera serial, authors, timestamps. Useful when you need to know where a file came from.
CX Codex +1
1,800installs
investigate-anything skill Router and baseline methodology for investigations into people, companies, or domains. It turns loose requests into falsifiable questions and sets collection plans.
CX Codex +1
1,800installs
what-an-email-reveals skill Walks an email address through MX checks, Gravatar, corporate format inference, breach exposure and full header analysis. Built for phishing triage and invoice fraud.
CX Codex +1
1,800installs
write-the-intel-brief skill Turns investigation findings into a defensible intelligence product: judgements up front, source and timestamp on every claim, observation kept apart from inference.
CX Codex +1
1,800installs
whose-number-is-this skill Structured phone OSINT workflow covering E.164 normalisation, carrier and VoIP detection, messaging app checks, and search engine string permutations.
CX Codex +1
1,800installs
find-anyone skill Builds a corroborated profile of a specific person from public records. Binds the name to a second selector first so two namesakes never merge.
CX Codex +1
1,800installs
hunt-a-handle skill Sweeps a username across hundreds of platforms with sherlock, maigret and WhatsMyName, then helps you tell real accounts of one person from lookalikes.
CX Codex +1
1,800installs
recon-a-domain-passively skill Builds a complete asset inventory for a domain, its subdomains, and infrastructure without sending packets to the target. Helpful for third-party risk reviews and M&A diligence.
CX Codex +1
1,800installs
threat-model
official skill Builds repository threat models, maps trust boundaries, and outputs threatmodel.md in Codex.
CX Codex GP ChatGPT
32installs
owasp-top-10 skill Security audit guide based on OWASP Top 10 2021. Helps agents spot injection flaws, broken access controls, and authentication issues during code reviews.
CX Codex +1
757installs
container-audit skill Skill for auditing Docker images, Dockerfiles, and Kubernetes manifests. Finds misconfigurations, excessive privileges, exposed secrets, and runtime risks.
CX Codex +1
342installs
compliance-os skill This skill selects applicable frameworks, maps shared controls, and builds a combined audit and evidence plan for multi-framework programs.
33installs
access-control-rbac skill A skill that guides the agent through role-based access control: roles, permissions, policies and least privilege.
CX Codex +1
757installs
legal-document-analyzer skill This skill reviews contracts, detects risks, and checks compliance. Use it when an agent must process PDF, DOCX, or plain-text legal documents.
CX Codex +1
1,200installs
sap-browser-automation skill This skill lets an agent inspect and operate authenticated SAP pages through a browser, Edge CDP, or Playwright. It covers SSO reuse, target checks, and screenshots.
CX Codex +1
362installs
red-team-engagement skill Plans and coordinates authorized adversary emulation engagements to test detection and response. Fits assumed-breach exercises, Rules of Engagement drafting, and blue-team deconfliction.
CX Codex +1
336installs
threat-hunting skill Proactively hunts for adversaries in SIEM, EDR, and logs before alerts fire. Guides hypothesis-driven investigations using the PEAK framework and MITRE ATT&CK.
CX Codex +1
333installs
mev-analysis skill Evaluates MEV exposure and sandwich attack risks for Solana DEX trading. Recommends slippage limits and Jito bundle protections.
CX Codex +1
459installs
gitlab-workflow skill Adds GitLab practices to coding assistants, covering merge request guidelines and multi-stage .gitlab-ci.yml pipelines.
CX Codex +1
1,100installs
docker skill Establishes best practices for lean Docker images, multi-stage builds, container security, and Compose workflows.
CX Codex +1
1,100installs
nextauth-authentication skill Guides AI agents through implementing Auth.js v5 in Next.js applications with secure session management and route protection.
CX Codex +1
1,100installs
siem-detection skill Engineers and audits SIEM detection rules across Sigma, KQL, SPL, and Elastic, mapping coverage against MITRE ATT&CK.
CX Codex +1
330installs
security-comms skill Translates technical security findings and incident write-ups into tailored updates for executives, engineers, legal, and customers.
CX Codex +1
328installs
breach-patterns skill Audits your stack against real-world breach postmortems like Capital One or SolarWinds. It extracts concrete questions to harden systems before an incident occurs.
CX Codex +1
327installs
find-leaks-in-the-wild skill A skill for finding leaked selectors across pastes, forums and Telegram channels, and for telling a real breach dump from a recycled combolist.
CX Codex +1
1,700installs
track-planes-and-ships skill An OSINT skill for tracking aircraft and vessels via public ADS-B and AIS data, resolving identifiers and tracing ownership.
CX Codex +1
1,700installs
1,081–1,120 of 1,434
