NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
avast-premium-security-malware-analysis skill A skill for studying Avast Premium Security internals: behavior shield, real-time protection, malware detection. Built for educational and defensive research.
CX Codex +1
1,100installs
wxmini-security-audit skill This skill inspects decompiled wxapkg bundles for leaked secrets, API endpoints, weak crypto and vulnerabilities. Run it before shipping a mini-program.
CX Codex +1
1,100installs
report-malicious-repository skill Flags repositories that pose as antivirus or other commercial software and walks you through filing a GitHub report.
CX Codex +1
1,100installs
avast-security-awareness skill Trains your agent to flag repositories posing as antivirus tools or cracked software, and to warn you before anything gets downloaded.
CX Codex +1
1,100installs
avast-premium-security-analysis skill A skill for studying Avast Premium Security components and antivirus protection mechanisms. Useful when you take apart defensive software inside an isolated environment.
CX Codex +1
1,100installs
malware-warning-avast-keygen skill This skill spots repositories posing as an Avast Premium Security crack or keygen and explains why nothing from them should be run.
CX Codex +1
1,100installs
vibe-security-skill skill Audits code written with an AI assistant for the usual holes: exposed keys, broken RLS policies, weak auth.
CX Codex +1
1,100installs
rate-limiting-abuse-protection skill A skill that adds request throttling to your API: per-route policies, IP and user limits, sliding windows, and clean error responses.
CX Codex +1
319installs
ntwarden-windows-analysis-toolkit skill A skill for digging into Windows internals: processes, services, network, ETW, kernel. Useful when you need to break down what a suspicious process is doing.
CX Codex +1
443installs
arcjet skill Adds Arcjet protection to HTTP routes, AI tool calls, MCP servers, and background jobs. Useful for rate limiting, bot detection, and abuse prevention.
CX Codex +1
578installs
better-auth-authentication skill A skill for TypeScript apps: sets up email and password sign-in, social providers and email verification with Better Auth.
CX Codex +1
389installs
code-review-security skill A skill that walks pull requests and auth code through the OWASP Top 10 checklist and writes findings to security-review.md.
CX Codex +1
438installs
security-threat-awareness skill Flags repositories that disguise malicious downloads as legitimate security tools. Use it before installing software from GitHub.
CX Codex +1
1,000installs
malware-analysis-dragonflyTomb-avast skill A skill for pulling apart repositories that pose as antivirus installers. It helps you tell a fake distribution from the real thing.
CX Codex +1
1,000installs
avast-premium-security-awareness skill A skill that flags repositories posing as antivirus software while actually pushing malware.
CX Codex +1
1,000installs
solidity-gas-optimization skill A skill packing 80+ Solidity gas optimization techniques from the RareSkills book. Useful when writing, reviewing or auditing contracts.
CX Codex +1
547installs
avast-premium-security-malware-detection skill This skill inspects suspicious repositories posing as antivirus installers and points out where malware distribution starts.
CX Codex +1
989installs
mcp-security-hub skill This skill spins up 38 Dockerized MCP servers for offensive security tooling and wires them into an AI assistant.
CX Codex +1
987installs
encore-webhook skill A skill that walks your agent through inbound webhook endpoints on api.raw(), with signature checks for Stripe, GitHub, Slack and more.
CX Codex +1
418installs
sign-in-with-vercel
official skill Walks your agent through adding user login with a Vercel account over OAuth 2.0 and OpenID Connect. Useful when you hand passwords and sessions to an identity provider.
CX Codex GP ChatGPT
4installs
define-security-policy
official skill Helps author, review, and update SECURITY.md files so Codex Security knows project boundaries, invariants, and out-of-scope targets.
CX Codex GP ChatGPT
4installs
sandbox-sdk
official skill A Codex skill for building with Cloudflare Sandbox SDK, from command and code execution to sandbox files and preview URLs. Use it when a Worker needs to run untrusted or AI-generated code.
CX Codex GP ChatGPT
4installs
malware-warning-bitdefender-crack skill Flags repositories that disguise malware as cracked Bitdefender software and helps explain the signals behind the threat.
CX Codex +1
971installs
anonymize-logs skill Replaces sensitive values in customer logs line by line, leaving structure and format untouched. Useful when logs go to a vendor or into a commit.
CX Codex +1
509installs
roblox-networking skill A skill for designing and reviewing Roblox client-server communication. Use it when remote events, network ownership or exploit defenses come up in your codebase.
CX Codex +1
304installs
sumsub-conformance skill Walks a live Sumsub configuration and answers one question per requirement: is it collected, scored, enforced? Flags the items that are gathered and scored but never acted on.
CX Codex +1
973installs
malware-detection-and-removal skill A skill for spotting repositories that pose as cracked software and deciding what to do about them.
CX Codex +1
952installs
better-auth-core skill A skill for wiring Better Auth into TypeScript apps: the instance, server handlers, client, and sessions. Useful when you need auth running without digging through docs.
CX Codex +1
358installs
sumsub-integrate-dint-websdk skill Adds Sumsub Device Intelligence to an existing WebSDK flow. Use it to bind device signals to an applicant and read device risk labels.
CX Codex +1
960installs
sumsub-integrate-id-connect skill Walks your agent through the whole Sumsub ID Connect integration: sign-in button, code-to-token exchange, user consent and applicant creation in your workspace.
CX Codex +1
960installs
sumsub-integrate-msdk skill Walks an agent through adding Sumsub Mobile SDK to a native iOS or Android app, from dependency install to launching the verification screen.
CX Codex +1
958installs
npm-security-best-practices skill Guides npm dependency hardening, supply-chain attack prevention, and safer package-manager settings. Useful when reviewing Node.js installs.
CX Codex +1
919installs
authentication-setup skill Walks you through choosing an auth lane for a web app or API and drawing the line between what the provider owns and what stays in your app.
CX Codex +1
368installs
openai-privacy-filter skill A skill that wires a token-classification model into your project to find and blank out personal data. Useful before shipping logs or documents to an LLM.
CX Codex +1
369installs
env-manager skill Checks .env for structural errors, flags secrets sitting in client-exposed variables, and diffs the file against .env.example. Useful before a deploy.
CX Codex +1
340installs
masterhttprelayvpn-proxy skill A skill that walks your agent through running a local HTTP/SOCKS5 proxy, with traffic tunnelled through Google Apps Script and dressed up as Google requests.
CX Codex +1
365installs
environment-setup skill A skill for app configuration: which values belong in .env, what gets committed, how to validate required variables, and where secrets stop being your problem.
CX Codex +1
353installs
vercel-security-access skill A reference skill for Vercel security: roles, SSO, deployment protection, firewall, BotID and audit logs. Useful when you lock down projects and previews.
CX Codex +1
328installs
malware-repository-warning skill The skill triggers when someone asks for help with a crack, keygen or pre-activated antivirus, and answers with a warning instead of setup steps.
CX Codex +1
851installs
edgesecurityaccess-wireguard-vpn skill This skill walks the agent through standing up a WireGuard VPN: build the Go server, add users, and hand out configs over an HTTP API.
CX Codex +1
788installs
1,361–1,400 of 1,434