NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
marketplace-order-hook skill Guides VTEX order integrations built with Feed v3 or Hook. Use it when a webhook must validate events, fetch order data, and avoid duplicate processing.
CX Codex +1
1,000installs
payment-pci-security skill Enforces PCI DSS requirements and Secure Proxy routing when building payment connectors that handle card authorization, token exchange, and post-auth requests.
CX Codex +1
1,000installs
dockerfile-optimise skill A skill with 48 rules from official Docker docs: layer caching, multi-stage builds, security. Useful when writing or refactoring Dockerfiles.
CX Codex +1
344installs
rc-security skill Walks an agent through a RevenueCat security review on Android: signature verification mode, API key hygiene, user identity and server-side entitlement checks.
CX Codex +1
649installs
supabase-audit-auth-config skill Audits Supabase GoTrue authentication settings via the public API. It uncovers disabled email confirmations, short passwords, and open CORS origins before production.
CX Codex +1
549installs
payment-provider-framework skill This skill guides VTEX IO payment connector work, from PPF wiring to Secure Proxy and build checks. Use it when implementing or maintaining a connector app.
CX Codex +1
979installs
api-filtering-sorting skill A skill that walks your coding agent through building API filtering and sorting: query parsing, validation, and injection safety.
CX Codex +1
418installs
roblox-security skill A skill that steers your coding agent toward server-authoritative Roblox code: request validation, anti-cheat checks, rate limits.
CX Codex +1
703installs
defense-in-depth-validation skill A skill that pushes your agent to validate data at every layer it passes through, so the bug becomes structurally impossible. Useful when bad data fails deep in execution.
CX Codex +1
413installs
cicd-expert skill A skill for building CI/CD: GitHub Actions, GitLab CI, Jenkins, security gates and ArgoCD GitOps. Useful when a pipeline needs writing or fixing.
CX Codex +1
645installs
owasp-llm-top10 skill This skill audits LLM and GenAI applications against the OWASP Top 10 for LLM Applications 2025. Useful before shipping a chatbot or a RAG pipeline.
CX Codex +1
390installs
oauth-implementation skill Guides OAuth 2.0 and OpenID Connect setup across web, mobile, and backend services while enforcing token rotation and PKCE.
CX Codex +1
408installs
vercel-firewall
official skill A skill that walks your agent through Vercel Firewall: custom WAF rules, IP blocks, rate limiting, Attack Mode and the vercel firewall CLI.
CX Codex GP ChatGPT
12installs
session-management skill A coding-agent skill for building sign-in: JWT access and refresh tokens, session storage in Redis, and cookie flags that keep tokens out of reach.
CX Codex +1
408installs
authjs-skills skill An agent skill that walks through Auth.js v5 authentication in Next.js: Google OAuth, email and password sign-in, environment variables.
CX Codex +1
791installs
supabase-audit-rpc skill Lists the PostgreSQL functions exposed through Supabase's RPC endpoint and tests each one for RLS bypass and SQL injection.
CX Codex +1
524installs
dependency-upgrade skill Upgrades dependencies without the usual risk: sets a cooldown on new versions, blocks postinstall scripts, and rolls out changes in stages.
CX Codex +1
404installs
supabase-audit-realtime skill Tests Supabase Realtime WebSocket channels for subscriptions that work without authorization and for data leaking through them.
CX Codex +1
522installs
claude-hook-writer skill A skill that walks you through Claude hook design, flags unsafe input handling and catches the mistakes that break hooks.
CX Codex +1
397installs
logging-best-practices skill A skill that tells your agent how to log: levels, request context, PII masking. Useful when logs bloat or passwords end up in them.
CX Codex +1
396installs
banking-expert skill Gives the agent a reference on core banking, KYC/AML, payments and banking regulation. Useful when accounts, transfers or customer checks come up.
CX Codex +1
800installs
security-scan skill Scans a codebase for OWASP Top 10 flaws, hardcoded credentials and unsafe configs. Useful before a deploy or when reading unfamiliar code.
CX Codex +1
471installs
dotnet-security skill Hardens ASP.NET Core apps with security middleware, safe database queries, and automated NuGet dependency auditing.
CX Codex +1
322installs
supabase-help skill Lists all 24 Supabase security audit skills with their commands and usage examples. Handy when you forget which skill does what.
CX Codex +1
503installs
security-advisory skill Guides private vulnerability triage for GitHub Security Advisories: drafts board cards, audits code ownership against SDKs, and tracks private fork fixes.
CX Codex +1
★ 91,547repo stars
supabase-report skill Generates a structured Markdown security report from Supabase audit findings with risk scoring and remediation guidance.
CX Codex +1
493installs
jwt-validate skill This skill checks a JWT's structure, claims and signature step by step. Useful when a token keeps getting rejected and you need the reason.
CX Codex +1
620installs
supabase-audit-tables-read skill Reads data from exposed Supabase tables to show what actually leaks. Useful when you want to verify RLS policies before shipping.
CX Codex +1
487installs
supabase-audit-auth-users skill Checks whether Supabase Auth responses reveal if an email is registered. Useful before you ship to production.
CX Codex +1
484installs
supabase-audit-tables-list skill Enumerates tables exposed through the Supabase PostgREST API so you can see the attack surface before testing deeper.
CX Codex +1
480installs
jwt-encode skill Builds and signs JSON Web Tokens for testing and development, with HMAC, RSA and ECDSA. Handy when you need a valid token inside the agent session.
CX Codex +1
606installs
supabase-detect skill This skill checks a web app for signs of Supabase and records what it finds. Use it before auditing an unfamiliar application.
CX Codex +1
478installs
supabase-extract-db-string skill Scans client-side code for PostgreSQL connection strings and exposed Supabase credentials. Use it when auditing an application before release.
CX Codex +1
477installs
tigris-security-access-control skill This skill guides Tigris object-storage access control: keys, roles, CORS, and presigned URLs. Use it when securing buckets or reviewing access settings.
CX Codex +1
3,100installs
supabase-audit-buckets-list skill Lists every storage bucket in a Supabase project with its configuration and flags public ones as risk. Useful before you test file access rules.
CX Codex +1
474installs
supabase-audit-buckets-read skill This skill walks your Supabase Storage buckets and reports what an anon key can actually reach. Useful before shipping, when you want proof that RLS policies hold.
CX Codex +1
471installs
supabase-audit-auth-signup skill Checks whether signup is open on your Supabase project and hunts for abuse vectors: spam accounts, weak passwords, disposable emails.
CX Codex +1
473installs
supabase-report-compare skill Diffs two Supabase security audit reports and sorts every finding into fixed, still open, or new. Useful after a round of fixes and for periodic reviews.
CX Codex +1
468installs
supabase-extract-jwt skill This skill finds Supabase JWTs in client code, cookies, and storage patterns, then inspects their claims. Use it when checking exposed credentials.
CX Codex +1
465installs
infisical-terraform skill Walks your agent through the Infisical Terraform provider: provider auth, ephemeral secrets that stay out of state, and OIDC for Terraform Cloud.
CX Codex +1
478installs
1,281–1,320 of 1,434
