NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
git-pr-reviewer skill The skill reads your branch diff and walks the changed files for bugs, security holes, performance and test gaps. Handy when you would rather not read the diff yourself.
CX Codex +1
320installs
credential-scanner skill Scans your project for exposed keys and passwords before a file-reading skill can pick them up.
CX Codex +1
538installs
infisical-self-host skill Guides self-hosted deployments of the Infisical platform using Docker, Compose, or Kubernetes. Useful for configuring required PostgreSQL, Redis, and encryption variables.
CX Codex +1
702installs
code-review skill Guides your coding agent through structured code reviews covering security, logic bugs, speed, and test coverage before merging pull requests.
CX Codex +1
★ 79,238repo stars
secure-secret-drop skill This skill spins up a temporary Cloudflare Quick Tunnel link so you can hand an agent a password or key without pasting it into chat.
CX Codex +1
3,900installs
endor-setup skill This skill gets endorctl ready to work: checks the install, downloads the binary, handles authentication and runs a vulnerability scan.
CX Codex +1
1,200installs
vtex-io-app-settings skill Helps an agent define settingsSchema for a VTEX IO app and read the values safely in code. Useful when merchants should change app behavior themselves.
CX Codex +1
1,200installs
vtex-io-graphql-api skill Guides GraphQL schema and resolver work in VTEX IO apps. Use it when exposing app data through queries or mutations.
CX Codex +1
1,200installs
zeroboot-vm-sandbox skill This skill runs agent code inside a real KVM virtual machine through Zeroboot, forking a template in under a millisecond.
CX Codex +1
1,300installs
vulnerability-scanning skill This skill outlines checks for dependencies, source code, and container images. Use it to review a project before deployment or add security checks to CI/CD.
CX Codex +1
512installs
dependency-auditor skill Checks npm packages for vulnerabilities, outdated versions and unused entries. Useful before a release or when package.json has grown messy.
CX Codex +1
302installs
docker-security-guide skill A skill that makes your coding agent review Docker setups for vulnerabilities and suggest concrete fixes.
CX Codex +1
595installs
dependency-auditor skill Audits npm, pip, and Go packages before installation. Protects projects from typosquatting, dangerous install scripts, and vulnerable transitive dependencies.
CX Codex +1
500installs
api-rate-limiting skill A skill that walks you through rate limiting an API with token bucket, sliding window and Redis-backed counters. Useful when you open an endpoint to the public or split access by plan.
CX Codex +1
491installs
better-auth skill Guides Better Auth setup across TypeScript stacks, Cloudflare D1, and Drizzle ORM. Prevents broken adapter imports and schema migration bugs.
CX Codex +1
488installs
api-security-hardening skill Security layers for a REST API on Express: rate limits and input validation. Useful before the API goes to production.
CX Codex +1
487installs
threat-modeling-techniques skill A skill for threat modeling: walks the system through STRIDE, builds attack trees and scores risk with DREAD. Best used before the code exists.
CX Codex +1
356installs
recover-eco-funds skill A skill that walks you through recovering USDC stuck in legacy Circle CLI deposits made with the eco method. Read-only checks first, no guessing at intent data.
CX Codex +1
300installs
sandbox-guard skill Builds Docker sandbox configs so you can run untrusted OpenClaw skills without handing them the host. Useful the moment you install someone else's skill.
CX Codex +1
483installs
headless-checkout-proxy skill Guides agents when building cart and checkout flows for headless VTEX via a BFF. Ensures safe OrderForm proxying and strict PCI DSS compliance.
CX Codex +1
1,100installs
headless-bff-architecture skill Design a VTEX BFF for headless storefronts and keep private APIs, credentials, and shopper tokens out of browser code.
CX Codex +1
1,100installs
vtex-io-security-boundaries skill Guides coding assistants when auditing route exposure and data boundaries in VTEX IO apps. Prevents tenant leaks and enforces payload validation.
CX Codex +1
1,100installs
vtex-io-auth-tokens-and-context skill Decides which VTEX IO token should back a backend request: the app itself, a shopper, or an Admin user.
CX Codex +1
1,100installs
vtex-io-auth-and-policies skill This skill guides VTEX IO permission design for integrations, protected routes, and manifest policies. Use it when access boundaries need review or change.
CX Codex +1
1,100installs
permission-auditor skill Walks through the permissions an OpenClaw skill asks for, explains each one in plain language, and suggests a smaller set.
CX Codex +1
476installs
output-sanitizer skill A skill that scans the agent's reply before it is shown or logged and strips leaked keys, PII and internal paths. Useful when output leaves your machine.
CX Codex +1
475installs
setup-auditor skill Checks an OpenClaw environment for leaked credentials, unsafe defaults and missing sandbox controls. Returns a report with a readiness verdict and a fix checklist.
CX Codex +1
469installs
config-hardener skill Checks AGENTS.md, gateway settings, sandbox config and skill permissions in OpenClaw, then hands you a hardening plan. Useful before you let more skills run on a host.
CX Codex +1
468installs
payment-gateway-integration skill A skill for wiring Stripe, PayPal or Square into your app: payment intents, subscriptions, webhooks and refunds. Useful when you build checkout or billing.
CX Codex +1
454installs
csrf-protection skill A skill that walks your agent through CSRF protection: synchronizer tokens, double-submit cookies and SameSite attributes.
CX Codex +1
453installs
network-watcher skill Checks where OpenClaw skills send data over the network and flags exfiltration before you install them.
CX Codex +1
454installs
entra-agent-id skill Provisions OAuth2-capable identities for AI agents using Microsoft Graph beta API. Useful when configuring Microsoft Entra service principals and blueprints.
69installs
entra-agent-id skill Creates Microsoft Entra identities for AI agents and configures OAuth 2.0 token exchange through Microsoft Graph.
69installs
agent-email-patterns skill A skill of architecture patterns for agents that talk over email: dedicated inboxes, reply loops, drafts a human approves before sending.
CX Codex +1
853installs
propose-security-hardening
official skill This skill turns vulnerability evidence and Codex Security results into structural hardening options, tradeoff analysis, and an implementation plan.
CX Codex GP ChatGPT
13installs
docyrus-api-dev skill This skill guides Docyrus API integration with OAuth2, data-source requests, query payloads, and external connectors. Use it while building a Docyrus-backed app.
CX Codex +1
824installs
incident-responder skill Step-by-step incident response playbook for OpenClaw security breaches. Guides you through containment, investigation, credential rotation, and recovery.
CX Codex +1
444installs
security-headers-configuration skill Sets up HTTP security headers against XSS, clickjacking and MIME sniffing. Useful when hardening an app or preparing for an audit.
CX Codex +1
438installs
reverse-engineering skill A skill that walks the agent through binary analysis: Ghidra decompilation, radare2 workflows, Binary Ninja scripting. Useful when there is no source and you need the logic back.
CX Codex +1
350installs
jwt-decode skill Splits a JWT into header, payload and signature, prints every claim and flags the expiry. Handy when you just need to see what is inside a token.
CX Codex +1
708installs
1,241–1,280 of 1,434
