NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
catalyst-authentication skill Guides user login, social auth, and OAuth connections in Zoho Catalyst. Prevents broken production deployments caused by mismatched ZAID identifiers.
CX Codex +1
999installs
static-code-analysis skill Implements static code analysis with linters and security scanners to find bugs before runtime. Useful for enforcing standards and automating reviews.
CX Codex +1
617installs
drupal-development skill This skill guides agents through Drupal 10 module work using Drupal conventions and PHP practices. Use it when building services, forms, routes, or schema updates.
CX Codex +1
911installs
supabase skill Guides AI agents on Supabase backend patterns, PostgreSQL schemas, Row Level Security policies, and Deno Edge Functions.
CX Codex +1
910installs
data-encryption skill Sets up data encryption at rest and in transit using AES-256-GCM, RSA, and TLS configurations for Node.js, Python, and PostgreSQL.
CX Codex +1
611installs
vulnerability-scanning skill A skill that walks your agent through finding vulnerabilities in dependencies, code, containers and secrets. Useful before deploys and during security audits.
CX Codex +1
611installs
windows-ui-automation skill A skill for automating Windows apps through UI Automation and Win32 APIs: element discovery, input simulation, process interaction. Risk level HIGH.
CX Codex +1
1,300installs
api-authentication skill A skill for API authentication: JWT, OAuth 2.0, API keys and session handling. Useful when you lock down endpoints or build a login flow.
CX Codex +1
607installs
vulnerability-writeup
official skill Turns vulnerability notes, PoCs, and source code into a checked, self-contained report. Use it to assess one finding or a disclosure campaign.
CX Codex GP ChatGPT
25installs
wordpress skill The wordpress skill gives an agent a rulebook for WordPress and WooCommerce work in PHP. It keeps code inside WordPress standards and reminds the agent about hooks, nonces and prepared queries.
CX Codex +1
894installs
security-testing skill Flags security flaws in code and dependencies, tests against OWASP Top 10 risks, and guides DAST scanning via OWASP ZAP.
CX Codex +1
601installs
auth-nodejs-cloudbase skill A skill for configuring server-side identity, user lookup, and custom login tickets in CloudBase backend services with the Node.js SDK.
CX Codex +1
960installs
secrets skill A skill that walks the agent through creating, listing, rotating and deleting Goldsky secrets — the named credential objects pipeline sinks point at.
CX Codex +1
3,600installs
auth-web-cloudbase skill Guides frontend authentication and session handling for Tencent CloudBase in Web apps. Helps agents avoid deprecated methods and broken route guards.
CX Codex +1
951installs
deploy skill Executes validated IaC templates against Azure and verifies resource health. Runs automatically at Phase 4 of the azure-app-onboard orchestrator.
126installs
soc2-audit-prep skill This skill checks SOC 2 Type II readiness with six questions about scope, control cycles, exceptions, and evidence. Use it before or during the observation period.
25installs
finding-discovery
official skill This skill searches code or changes for plausible security vulnerabilities in the context of a threat model. Use it during finding discovery, not to start a full scan.
CX Codex GP ChatGPT
24installs
docker-best-practices skill A Docker skill that guides your agent through Dockerfiles, base image choice and production container setup.
CX Codex +1
938installs
fuzzing skill Guides agents in writing fuzz targets for C and C++, configuring libFuzzer or AFL++, and wiring coverage-guided tests into CI pipelines.
CX Codex +1
618installs
security-audit-logging skill A skill that walks your agent through building security audit logging: events, user actions, system changes. Useful when you need logs for compliance or incident review.
CX Codex +1
561installs
privacy-data-security skill Guides privacy and cybersecurity compliance for SEC-registered firms under Regulation S-P, Regulation S-ID, and SEC standards.
CX Codex +1
698installs
woocommerce skill Development guidelines for WordPress and WooCommerce. Helps assistants write safe PHP code with hooks, custom product types, and REST endpoints.
CX Codex +1
826installs
oauth-implementation skill Guides the setup of OAuth 2.0, OpenID Connect, JWT tokens, and SSO in web and mobile apps. Useful when configuring social logins or securing backend APIs.
CX Codex +1
553installs
anti-money-laundering skill An agent skill that walks through BSA/AML work: CTR and SAR thresholds, OFAC screening, structuring detection, FinCEN filing rules.
CX Codex +1
685installs
deno-sandbox skill A skill that teaches the agent the @deno/sandbox SDK: isolated microVMs for user-submitted and AI-generated code.
CX Codex +1
358installs
know-your-customer skill Walks your agent through KYC: identity verification, beneficial ownership, EDD for PEPs, and keeping the customer profile current.
CX Codex +1
679installs
infisical-api skill A skill that teaches your agent to call the Infisical REST API: secrets, projects, environments, machine identities. Useful when secrets get edited from code, not the dashboard.
CX Codex +1
968installs
sql-best-practices skill SQL guidelines for coding agents: covers query formatting, indexing, explicit joins, and injection defenses for database workflows.
CX Codex +1
790installs
304-frameworks-spring-boot-security skill Configures Spring Boot security, endpoint authorization, and SecurityFilterChain. It helps implement JWT resource servers, method security, and safe headers.
CX Codex +1
301installs
sql-injection-prevention skill Enforces parameterized queries, prepared statements, and input validation in database code. Useful when writing API endpoints or auditing legacy queries for security flaws.
CX Codex +1
526installs
post-trade-compliance skill Guides the design of post-trade monitoring: alert logic, investigation workflow, allocation fairness checks and reporting triggers.
CX Codex +1
658installs
everything-claude-code-harness skill The skill builds out an agent harness: subagents, slash commands, memory hooks and a security scan. Useful when every Claude session starts from a blank slate.
CX Codex +1
1,800installs
payment-gateway-integration skill A skill for wiring Stripe, PayPal and Square into your backend: charges, subscriptions, webhooks. Useful when you build billing or a store.
CX Codex +1
524installs
account-opening-compliance skill This skill helps shape compliance checks for account opening, from identity verification to sanctions screening. Use it when planning risk-based approvals or handling verification exceptions.
CX Codex +1
654installs
capacitor-security skill Audits the app layer of a Capacitor project for leaked secrets, weak on-device storage and cleartext traffic, then walks through the fixes.
CX Codex +1
1,200installs
dd-audit-compliance-report skill Pulls Datadog Audit Trail events into an auditor-ready report mapped to SOC 2 and PCI DSS controls.
CX Codex +1
477installs
dd-audit-key-compromise skill Traces what a suspicious Datadog API key did: when, from where, which endpoints, what got deleted. Useful the moment a key may have leaked.
CX Codex +1
476installs
dd-audit-security-investigation skill Investigates security events in Datadog Audit Trail via pup. Pinpoints who deleted resources, altered permissions, or authenticated from suspicious locations.
CX Codex +1
476installs
supabase-audit-functions skill A skill that finds exposed Supabase Edge Functions and tests them for missing auth, IDOR and open admin endpoints.
CX Codex +1
914installs
security-headers-configuration skill Configures HTTP security headers like CSP, HSTS, and X-Frame-Options for web apps. Hardens servers and APIs against XSS, clickjacking, and MIME sniffing.
CX Codex +1
512installs
1,161–1,200 of 1,434
