NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
autoresearch skill This skill runs iteration loops that modify code, verify a metric, and keep or discard the result. Use it for debugging, improvements, and regression checks.
CX Codex +1
2,600installs
iam-helper-for-policy-management
official skill This skill manages Google Cloud IAM allow policies v1 and deny policies v2. Use it to inspect access or prepare controlled policy changes.
CX Codex
2,400installs
google-cloud-filestore-auditing
official skill This skill audits Google Cloud Filestore for backup readiness, NFS access exposure, and zone isolation. Use it when reviewing storage posture across projects.
CX Codex
2,300installs
skill-inspector skill Reviews a skill for vulnerabilities, excessive permissions, and hidden behavior before you install it. Combines NVIDIA SkillSpector static scanning with semantic source inspection.
CX Codex +1
921installs
spring-boot-engineer skill Generates Spring Boot 3.x code, JPA repositories, REST controllers, and Spring Security 6 configurations. Useful when writing Java microservices and reactive endpoints.
CX Codex +1
8,400installs
case-review skill Audits a reverse engineering case package for handoff: verifies Evidence to Finding and Path traceability, checks artifact hash integrity, and generates a report without modifying the case.
CX Codex +1
934installs
nestjs-best-practices skill A NestJS skill for writing, reviewing, and refactoring code around architecture, dependency injection, security, and performance.
CX Codex +1
30,400installs
threat-model
official skill Builds a threat model for a codebase in three modes and writes it to THREAT_MODEL.md. Use it before vulnerability discovery or a security review.
CX Codex +1
1,200installs
block-no-verify-hook skill This skill adds a PreToolUse hook that blocks git bypass flags such as --no-verify. Use it when pre-commit checks must run before an agent can execute a command.
CX Codex
6,500installs
ctf-reverse skill A reverse engineering reference for CTF challenges: guides coding agents through binary inspection, anti-debug bypass, and virtual machine analysis.
CX Codex +1
10,100installs
gke-workload-identity
official skill Diagnoses Pod authentication failures in Google Cloud through Workload Identity Federation for GKE. Use it to check KSA, IAM bindings, and the GKE metadata server.
CX Codex
2,000installs
signed-audit-trails-recipe skill A step-by-step guide to signed records for Claude Code tool calls. Use it to evaluate policy gates and offline verification before installing protect-mcp runtime hooks.
CX Codex
6,200installs
ctf-web skill Routes and guides agents through web CTF challenges, covering everything from SQL injection and SSTI to auth bypasses and SSRF.
CX Codex +1
9,700installs
cookie-debugging skill Skill for inspecting cookies, sessions, and authentication errors via Chrome DevTools MCP. Diagnoses 401/403, auth redirects, Set-Cookie issues, and verifies cookie consent compliance.
CX Codex +1
870installs
secops-triage
official skill This skill triages Google SecOps alerts, assesses entity risk, and helps decide whether a case should be closed or escalated.
CX Codex
1,900installs
secops-investigate
official skill This skill supports deep incident and entity investigations in Google SecOps. Use it for UDM searches, asset and user timelines, and lateral movement analysis.
CX Codex
1,900installs
secops-hunt
official skill secops-hunt supports proactive threat hunting in Google SecOps, from IoC lookups to UDM-based anomaly searches. Use it when testing a hunt hypothesis.
CX Codex
1,900installs
secops-detection-engineering
official skill This skill authors, validates, tests, and deploys YARA-L 2.0 rules in Google SecOps. Use it to examine detection coverage gaps.
CX Codex
1,900installs
secops-cases
official skill Manage Google Security Operations SOAR cases, from queue review and alert grouping to investigation notes, status changes, and closure.
CX Codex
1,900installs
protect-mcp-setup skill This skill configures Cedar checks for tool calls and Ed25519-signed receipts. Use it when you need policy-gated actions and an audit trail that can be verified offline.
CX Codex
6,000installs
quickstart
official skill Guides a first pass through the code-security repository, from threat modeling to a canary scan. It also answers repo-specific questions with cited sources.
CX Codex +1
1,100installs
customize
official skill A skill to adapt the C/C++ vulnerability-finding pipeline to other languages, domains, and target shapes. Turns an opinionated demo into a template: swap the detector, prompts, and sandbox — and the pipeline hunts what you need.
CX Codex +1
1,100installs
patch
official skill Generates candidate diffs for verified security findings and writes inert patches for manual review.
CX Codex +1
1,100installs
triage
official skill This skill checks scanner findings, removes duplicates, and ranks vulnerabilities by derived exploitability. Use it for a file or directory of raw results.
CX Codex +1
1,100installs
vuln-scan
official skill Static vulnerability scanner for source code. Reads a directory, spawns parallel review subagents per focus area, and writes findings to JSON and markdown for triage.
CX Codex +1
1,100installs
ctf-pwn skill Binary exploitation guide for CTF challenges. Helps turn memory corruption bugs into code execution and shell access.
CX Codex +1
9,400installs
ctf-crypto skill A skill for solving crypto CTF challenges, covering RSA, AES, hashes, signatures, PRNG, ZKP, and mathematical attacks.
CX Codex +1
9,200installs
ctf-osint skill A field guide to public-source research for CTF challenges, from username and DNS checks to image searches and geolocation. Useful when clues point beyond the challenge files.
CX Codex +1
9,100installs
github-actions-hardening
official skill Reviews .github/workflows/*.yml against the Actions threat model linters miss: attacker-controlled text pasted into run:, privileged triggers running fork code, unpinned actions.
2,200installs
requesting-code-review skill Pre-commit code verification pipeline that scans for security flaws, checks test regressions against a baseline, and runs an auto-fixing reviewer subagent.
CX Codex +1
469installs
ctf-forensics skill Digital forensics and signal analysis techniques for CTF challenges: disk images, memory dumps, PCAP files, steganography, Windows artifacts, and side-channel attacks.
CX Codex +1
9,100installs
privacy-policy skill Skill drafts a detailed privacy policy accounting for GDPR, CCPA, and other regulations. Use it when building a new product, updating data protection docs, or preparing for compliance audits.
CX Codex +1
3,500installs
solve-challenge skill Runs first-pass CTF triage, identifies the likely challenge category, and routes work to a specialized ctf-* skill. Use it when you have files, a remote service, or only a short prompt.
CX Codex +1
8,900installs
websocket-engineer skill This skill guides WebSocket and Socket.IO work with bidirectional messages, rooms, presence tracking, and Redis-based scaling.
CX Codex +1
6,800installs
ctf-misc skill Provides reference techniques and payloads for miscellaneous CTF challenges like sandbox escapes, exotic encodings, and signal analysis.
CX Codex +1
8,800installs
ctf-malware skill A skill for analysing malware samples and network traffic in CTF challenges. It covers obfuscated scripts, PE and .NET files, PCAP captures, and C2 protocols.
CX Codex +1
8,700installs
code-reviewer skill Analyzes code diffs and files to spot bugs, security vulnerabilities (SQL injection, XSS), code smells, N+1 queries, and returns a prioritized review report. Use for pull request reviews and code audits.
CX Codex +1
6,500installs
codeql
official skill Walks you through CodeQL code scanning: Actions workflows, CLI commands, SARIF output, and fixing failed analyses.
2,000installs
omni-auth skill A skill for handling Anthropic auth: Bearer tokens for the API, session cookies for the dashboard. Useful when your agent hits gateway endpoints.
CX Codex +1
1,100installs
review-agent-setup skill This skill gates AI review actions behind manual human approval before pull requests or CI pipelines change. Every attempt generates an Ed25519-signed receipt for offline auditing.
CX Codex
5,200installs
161–200 of 1,434
