Skip to main content
NeVibeCode · 1,434 items

Skills for Security

Skills for Security: what each one does, an install command and example prompts.

flowdriver-covert-transport reason-machines skill Routes SOCKS5 traffic through Google Drive API calls so it survives DPI and SNI filtering. Useful on networks where a normal proxy gets blocked. CX Codex +1 310installs sparkfinderoven-security-compliance-skills reason-machines skill A suite of commands and workflows for security and compliance work: OWASP scanning, CVE detection, GDPR audits, SOC 2 readiness, threat modeling. CX Codex +1 759installs pentestify-security-report-generator reason-machines skill A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export. CX Codex +1 747installs encore-go-secret encoredev skill A skill that shows the agent how to declare API keys and passwords in Encore Go with a package-level secrets struct. CX Codex +1 307installs sparkfinderoven-r01-security-compliance-skills reason-machines skill A skill suite that scans code for OWASP vulnerabilities, checks dependencies for CVEs, audits GDPR and SOC 2 readiness, and builds STRIDE threat models. CX Codex +1 729installs esaa-security-audit reason-machines skill This skill runs 95 checks across 16 security domains and records every finding as an immutable event, so the same repo state yields the same report. CX Codex +1 717installs security tartinerlabs skill Checks dependencies for CVEs, scans the working tree and git history for secrets, wires a scanner into pre-commit, and runs an OWASP pass over the repo. CX Codex +1 531installs foundry-security-spec reason-machines skill A skill that walks your agent through implementing Cisco's Foundry spec: a multi-role system for finding and validating vulnerabilities. Useful when you're building your own evaluation pipeline. CX Codex +1 683installs web-security-scanner-pro reason-machines skill A skill that teaches your agent to drive Web Security Scanner Pro: 49 modules, WAF evasion, CMS checks and HTML or PDF reports. CX Codex +1 607installs find-bugs davila7 skill Walks the diff on your current branch and reports bugs, security holes and code quality problems. Handy before a merge or a push. 944installs sumsub-create-aml-resolution-rules sumsub skill Builds and publishes Sumsub rules that auto-review AML screening hits: clearing false positives, confirming true ones. CX Codex +1 447installs linux-pentester-command-reference reason-machines skill A skill that hands your agent a Linux command reference split by pentest phase: recon, enumeration, exploitation, privesc. CX Codex +1 308installs safe-action-better-auth next-safe-action skill This skill wires Better Auth into next-safe-action: the middleware fetches the session, rejects unauthenticated calls and hands you a typed context. CX Codex +1 477installs azure-keyvault-secrets-rust Microsoft skill Tells the agent how to read and write Azure Key Vault secrets from Rust using the official azure_security_keyvault_secrets crate. 6installs tool-abuse-detection Tencent skill Runs dialogue probes against an agent to catch command execution, out-of-scope file reads and SSRF. Useful when the agent holds file, code or network tools. CX Codex +1 ★ 7,083repo stars memory-poisoning-detection Tencent skill This skill checks whether an agent stores a hostile instruction in long-term memory and follows it in later tasks. CX Codex +1 ★ 7,083repo stars hardcoded-secret-detection Tencent skill This skill has the agent scan the source, configs and IaC it can reach for keys, tokens and passwords sitting in plain text. CX Codex +1 ★ 7,083repo stars data-leakage-detection Tencent skill A skill that runs escalating dialogue probes against an agent to surface leaked system prompts, credentials, PII and internal config. CX Codex +1 ★ 7,083repo stars agentic-supply-chain-detection Tencent skill This skill probes whether your agent pulls plugins, models or updates from untrusted sources. Useful when a project leans on third-party dependencies. CX Codex +1 ★ 7,083repo stars managing-network-policies celigo skill A skill for managing Celigo network policies: named IP allow and deny lists that restrict where MCP servers, API tokens and user sign-in can connect from. CX Codex +1 303installs pci-dss-scoping securityskills skill Walks an agent through PCI DSS scoping: cardholder data flows, segmentation checks and a v4.0 requirements matrix. Built for audit prep. CX Codex +1 414installs zoom-oauth official Zoom skill A Claude and Claude skill for Zoom authentication work: picking the grant flow, scope behaviour, refresh token rotation and error diagnosis. CX Codex GP ChatGPT ★ 7,596repo stars twilio-verify-send-otp official Twilio skill A skill that walks your agent through the full OTP lifecycle in Twilio Verify: create a service, send a code, check the submitted one. CX Codex GP ChatGPT ★ 7,596repo stars twilio-security-api-auth official Twilio skill Walks you through Twilio's four auth methods and helps you wire up the right one before shipping API calls to production. CX Codex GP ChatGPT ★ 7,596repo stars twilio-lookup-phone-intelligence official Twilio skill A Claude and Claude skill that validates phone numbers through Twilio Lookup v2 and scores fraud risk before you send an SMS or place a call. CX Codex GP ChatGPT ★ 7,596repo stars nextjs-supabase-auth davila7 skill Guides the agent through Supabase Auth in Next.js App Router: middleware, OAuth callback, protected routes and cookie-based sessions. 367installs code-review-checklist davila7 skill A skill that walks a reviewer through context, functionality, quality, security, performance and tests. Useful on pull requests and audits. 365installs pentest-checklist zebbern skill A skill that walks you through pentest planning: objectives, scope, environment prep, tester selection and monitoring. Useful before a security assessment. 336installs secure-code-review zebbern skill This skill walks your code through all ten OWASP Top 10 categories and returns a report with vulnerable examples and working fixes. Useful before a release or when reviewing unfamiliar code. CX Codex +1 ★ 4,676repo stars network-101 zebbern skill A skill that walks the agent through standing up and testing HTTP, HTTPS, SNMP and SMB in a pentest lab, from service config to log analysis. CX Codex +1 ★ 4,676repo stars aws-penetration-testing zebbern skill A skill that walks the agent through AWS pentesting: IAM enumeration, privilege escalation, metadata SSRF, S3 and Lambda exploitation. CX Codex +1 ★ 4,676repo stars microsoft-azure-webjobs-extensions-authentication-events-dotnet Microsoft skill A skill for handling Microsoft Entra ID custom authentication events in .NET: token claims, attribute collection, OTP delivery. 1installs azure-security-keyvault-keys-dotnet Microsoft skill A skill for managing Azure Key Vault and Managed HSM keys from .NET: creation, rotation, encryption, signing. Useful when your agent writes C#. 1installs wireshark-analysis zebbern skill A Claude skill for Wireshark work: capture and display filters, TCP/UDP stream reconstruction, protocol stats and anomaly hunting. 113installs

1,401–1,434 of 1,434

Narrow it down

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor