NeVibeCode · 1,340 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
fix-finding
official skill Resolves confirmed security vulnerabilities through targeted, validated patches. Useful when you need to close an exploit path without breaking existing APIs.
CX Codex GP ChatGPT
27installs
attack-path-analysis
official skill Maps security findings from source to sink and calibrates severity against threat models. Useful for vetting plausible vulnerabilities.
CX Codex GP ChatGPT
27installs
gdpr-audit-prep skill A slash command that runs your data processing through six DPO questions, each cited to a GDPR article. Useful before an internal audit, after a breach, or in due diligence.
28installs
api-rate-limiting skill Guides the implementation of token bucket and sliding window rate limiting. Protects APIs from brute force attacks and traffic surges using Redis or Flask.
CX Codex +1
640installs
security-auditor skill A skill that hunts vulnerabilities in your code: walks the OWASP Top 10, checks configs, dependencies and leaked secrets. Useful before a release or a review.
CX Codex +1
1,000installs
neo4j-security-skill skill This skill walks an agent through Neo4j user, role and privilege management in Cypher against the system database. Useful when access has to be provisioned by script instead of by hand.
CX Codex +1
824installs
security-best-practices skill A skill providing security principles for backend and microservice development. It helps agents enforce strict input validation, protect APIs, and prevent sensitive data leaks.
CX Codex +1
930installs
track-findings
official skill Routes verified Codex Security findings into Linear, Jira, GitHub issues, and draft advisories. It prevents duplicate tickets and previews payloads before filing tasks.
CX Codex GP ChatGPT
26installs
compliance-readiness skill Runs a 6-question compliance officer interrogation to pressure-test compliance programs before audits or new framework adoption. Maps overlapping controls and flags gaps.
27installs
supabase-audit-rls skill Tests Row Level Security policies in Supabase for bypasses and misconfigurations. Useful once tables start leaking data.
CX Codex +1
1,100installs
catalyst-authentication skill Guides user login, social auth, and OAuth connections in Zoho Catalyst. Prevents broken production deployments caused by mismatched ZAID identifiers.
CX Codex +1
999installs
static-code-analysis skill Implements static code analysis with linters and security scanners to find bugs before runtime. Useful for enforcing standards and automating reviews.
CX Codex +1
617installs
supabase skill Guides AI agents on Supabase backend patterns, PostgreSQL schemas, Row Level Security policies, and Deno Edge Functions.
CX Codex +1
910installs
data-encryption skill Sets up data encryption at rest and in transit using AES-256-GCM, RSA, and TLS configurations for Node.js, Python, and PostgreSQL.
CX Codex +1
611installs
vulnerability-scanning skill A skill that walks your agent through finding vulnerabilities in dependencies, code, containers and secrets. Useful before deploys and during security audits.
CX Codex +1
611installs
windows-ui-automation skill A skill for automating Windows apps through UI Automation and Win32 APIs: element discovery, input simulation, process interaction. Risk level HIGH.
CX Codex +1
1,300installs
api-authentication skill A skill for API authentication: JWT, OAuth 2.0, API keys and session handling. Useful when you lock down endpoints or build a login flow.
CX Codex +1
607installs
vulnerability-writeup
official skill Turns vulnerability notes, PoCs, and source code into a checked, self-contained report. Use it to assess one finding or a disclosure campaign.
CX Codex GP ChatGPT
25installs
wordpress skill The wordpress skill gives an agent a rulebook for WordPress and WooCommerce work in PHP. It keeps code inside WordPress standards and reminds the agent about hooks, nonces and prepared queries.
CX Codex +1
894installs
security-testing skill Flags security flaws in code and dependencies, tests against OWASP Top 10 risks, and guides DAST scanning via OWASP ZAP.
CX Codex +1
601installs
auth-nodejs-cloudbase skill A skill for configuring server-side identity, user lookup, and custom login tickets in CloudBase backend services with the Node.js SDK.
CX Codex +1
960installs
secrets skill A skill that walks the agent through creating, listing, rotating and deleting Goldsky secrets — the named credential objects pipeline sinks point at.
CX Codex +1
3,600installs
auth-web-cloudbase skill Guides frontend authentication and session handling for Tencent CloudBase in Web apps. Helps agents avoid deprecated methods and broken route guards.
CX Codex +1
951installs
deploy skill Executes validated IaC templates against Azure and verifies resource health. Runs automatically at Phase 4 of the azure-app-onboard orchestrator.
126installs
soc2-audit-prep skill This skill checks SOC 2 Type II readiness with six questions about scope, control cycles, exceptions, and evidence. Use it before or during the observation period.
25installs
finding-discovery
official skill This skill searches code or changes for plausible security vulnerabilities in the context of a threat model. Use it during finding discovery, not to start a full scan.
CX Codex GP ChatGPT
24installs
docker-best-practices skill A Docker skill that guides your agent through Dockerfiles, base image choice and production container setup.
CX Codex +1
938installs
fuzzing skill Guides agents in writing fuzz targets for C and C++, configuring libFuzzer or AFL++, and wiring coverage-guided tests into CI pipelines.
CX Codex +1
618installs
security-audit-logging skill A skill that walks your agent through building security audit logging: events, user actions, system changes. Useful when you need logs for compliance or incident review.
CX Codex +1
561installs
privacy-data-security skill Guides privacy and cybersecurity compliance for SEC-registered firms under Regulation S-P, Regulation S-ID, and SEC standards.
CX Codex +1
698installs
woocommerce skill Development guidelines for WordPress and WooCommerce. Helps assistants write safe PHP code with hooks, custom product types, and REST endpoints.
CX Codex +1
826installs
oauth-implementation skill Guides the setup of OAuth 2.0, OpenID Connect, JWT tokens, and SSO in web and mobile apps. Useful when configuring social logins or securing backend APIs.
CX Codex +1
553installs
anti-money-laundering skill An agent skill that walks through BSA/AML work: CTR and SAR thresholds, OFAC screening, structuring detection, FinCEN filing rules.
CX Codex +1
685installs
deno-sandbox skill A skill that teaches the agent the @deno/sandbox SDK: isolated microVMs for user-submitted and AI-generated code.
CX Codex +1
358installs
know-your-customer skill Walks your agent through KYC: identity verification, beneficial ownership, EDD for PEPs, and keeping the customer profile current.
CX Codex +1
679installs
infisical-api skill A skill that teaches your agent to call the Infisical REST API: secrets, projects, environments, machine identities. Useful when secrets get edited from code, not the dashboard.
CX Codex +1
968installs
sql-best-practices skill SQL guidelines for coding agents: covers query formatting, indexing, explicit joins, and injection defenses for database workflows.
CX Codex +1
790installs
304-frameworks-spring-boot-security skill Configures Spring Boot security, endpoint authorization, and SecurityFilterChain. It helps implement JWT resource servers, method security, and safe headers.
CX Codex +1
301installs
sql-injection-prevention skill Enforces parameterized queries, prepared statements, and input validation in database code. Useful when writing API endpoints or auditing legacy queries for security flaws.
CX Codex +1
526installs
post-trade-compliance skill Guides the design of post-trade monitoring: alert logic, investigation workflow, allocation fairness checks and reporting triggers.
CX Codex +1
658installs
1,121–1,160 of 1,340
