NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
property-based-testing skill This skill helps create and inspect tests that check rules across generated inputs. Use it for parsers, serialization pairs, data structures, and Solidity contract invariants.
CX Codex +1
7,000installs
fp-check skill Walks a suspected vulnerability through verification and returns a TRUE POSITIVE or FALSE POSITIVE verdict backed by evidence. Built for confirming findings, not hunting new ones.
CX Codex +1
7,000installs
github-code-review skill Runs a swarm of specialized AI agents to inspect GitHub pull requests for security, performance, and architecture issues.
CX Codex +1
1,300installs
sharp-edges skill Audits API designs and configuration schemas for developer footguns. Flags dangerous defaults and fragile interfaces where the easiest path causes security vulnerabilities.
CX Codex +1
6,900installs
audit-context-building skill Maps assumptions, guarantees, and call chains in unfamiliar source code before vulnerability hunting starts. Useful for audits and threat modeling.
CX Codex +1
6,800installs
the-fool skill Challenges plans, architectures, and decisions using five structured reasoning modes. Useful for spotting blind spots and failure modes before writing code.
CX Codex +1
4,400installs
security-review skill Finds injections, XSS, authorization flaws, and other vulnerabilities in code. Reports only high-confidence findings.
CX Codex +1
21,300installs
agentic-actions-auditor skill Inspects GitHub Actions workflows for prompt injection risks and insecure AI agent setups. Catches attacker inputs leaking into prompts via event contexts or environment variables.
CX Codex +1
6,700installs
gh-cli skill A skill that redirects GitHub requests from curl and fetch to authenticated gh CLI for repositories, pull requests, and issues. Use it for private repos and higher API limits.
CX Codex +1
6,600installs
gateway-workers skill Skill for building, debugging, and reviewing Cloudflare Workers triggered by Forward actions in Gateway HTTP policies. Work with GatewayMiddleware, context types, and request continuation.
CX Codex +1
8,600installs
agentic-jujutsu skill Coordinates multiple AI agents working on code simultaneously without version control locks, learning from execution trajectories.
CX Codex +1
1,200installs
variant-analysis skill Finds related occurrences of an already identified defect across a repository. Use it after a vulnerability or logic issue turns up and similar code needs checking.
CX Codex +1
6,400installs
graphql-architect skill Designs schema-first GraphQL APIs, Apollo Federation 2.5+ subgraphs, and DataLoader resolvers to eliminate N+1 queries.
CX Codex +1
4,000installs
ads-server-side-tracking skill Audits server-side paid-media measurement: verifies event parameters between browser and server, checks deduplication, data hashing, and privacy compliance. Spots conversion loss and bugs in sGTM, Meta CAPI, TikTok Events API.
CX Codex +1
3,300installs
V3 Security Overhaul skill A skill that runs a security pass over claude-flow v3: three critical CVEs closed, and secure-by-default patterns wired into the code.
CX Codex +1
1,100installs
V3 Swarm Coordination skill Orchestrates a 15-agent hierarchical mesh swarm to implement claude-flow v3. Manages parallel execution across security, core, and integration domains over a 14-week plan.
CX Codex +1
1,100installs
sarif-parsing skill Processes existing SARIF reports from CodeQL, Semgrep, and other scanners. Use it to filter findings, remove duplicates, or prepare results for CI/CD.
CX Codex +1
5,900installs
use-link-identity skill Tells the agent how to fetch a Link Agent Attestation Token or signed claims and send them to a service that asked for them.
CX Codex +1
9,400installs
spec-to-code-compliance skill Compares an implementation against technical whitepapers or protocol specifications to flag missing logic, deviations, and unrecorded behavior.
CX Codex +1
5,800installs
audit-prep-assistant skill Prepares codebases for external security reviews using Trail of Bits' checklist. It helps run static analysis, boost test coverage, and generate system documentation.
CX Codex +1
5,700installs
entry-point-analyzer skill Finds externally callable smart contract functions that change state and classifies their access level. Use it before an audit to map the attack surface.
CX Codex +1
5,700installs
semgrep-rule-creator skill A skill that walks you through creating custom Semgrep rules to detect security vulnerabilities and code patterns in your projects. Use it when you need static analysis tailored to your codebase.
CX Codex +1
5,800installs
security-auditor skill Turns your AI coder into a security expert: conducts audits, analyzes vulnerabilities, reviews SDLC and compliance with OWASP, GDPR, PCI-DSS standards.
CX Codex +1
1,400installs
organization-best-practices skill Sets up multi-tenant organizations, invitations, and permissions in Better Auth. Helps manage teams and custom RBAC rules without digging through documentation.
CX Codex +1
36,500installs
solana-vulnerability-scanner skill Detects 6 critical vulnerabilities across native Rust and Anchor programs on Solana. Helps identify flaws in account validation, PDA derivation, and CPI logic.
CX Codex +1
5,600installs
token-integration-analyzer skill Checks ERC20 and ERC721 implementations plus code that integrates external tokens. Use it before accepting tokens with non-standard transfer or approval behaviour.
CX Codex +1
5,500installs
intended-vs-implemented skill Audits the gap between documented architecture and actual code boundaries. Catches missed permission checks and untrusted data exposure in AI-built codebases.
CX Codex +1
1,800installs
firestore-rules-creation skill Creates and refactors Cloud Firestore Security Rules in firestore.rules. Use it when project queries and data access need rule coverage.
CX Codex +1
25,300installs
thermo-nuclear-review skill A skill for comprehensive analysis of branch changes: checks code for bugs, broken functionality, security vulnerabilities, and feature-gate leaks. Use when you need thorough review before merge.
CX Codex +1
2,700installs
learn-reverse-engineering skill Interactive tutor for reading compiled programs. One lesson per invocation: from file formats and disassembly to symbolic execution and AI-assisted analysis. Requires Python 3.10+ and your own source code.
CX Codex +1
488installs
cargo-fuzz skill Sets up cargo-fuzz inside a Cargo-based Rust crate and walks through the harness, sanitizers and crash triage.
CX Codex +1
5,400installs
constant-time-analysis skill Inspects compiled assembly and bytecode for timing side-channels. It flags secret-dependent branches and variable-time operations in crypto routines.
CX Codex +1
5,400installs
harness-writing skill Helps you write and fix a fuzzing harness: map raw bytes onto API arguments, kill non-determinism, stop chasing crashes that never reproduce.
CX Codex +1
5,400installs
firebase-apk-scanner skill Unpacks an Android APK, pulls out its Firebase config and probes databases, buckets and functions for open access. Built for mobile app security audits.
CX Codex +1
5,400installs
guidelines-advisor skill Audits smart contract codebases against Trail of Bits guidelines. It spots upgradeability pitfalls, flawed inheritance, and testing gaps.
CX Codex +1
5,500installs
mcp-security-audit
official skill Audits MCP server configurations for exposed secrets, shell injection, mutable package references, and unapproved servers. Use it before changing .mcp.json.
1,100installs
arize-ai-provider-integration
official skill Manage Arize AI integrations for language model providers: create connections, inspect their settings, and update or remove them. Use it when configuring models for Arize evaluators or other Arize features.
1,100installs
agent-supply-chain
official skill Checks AI agent plugins, tools, and dependencies with SHA-256 manifests. Use it before promoting a plugin or auditing its files.
1,100installs
two-factor-authentication-best-practices skill Walks an agent through adding two-factor auth to a Better Auth app: TOTP, codes by email or SMS, backup codes, trusted devices.
CX Codex +1
34,300installs
fuzzing-dictionary skill Generates and connects token dictionaries for parsers and protocols in libFuzzer or AFL++ when coverage stalls on initial checks.
CX Codex +1
5,300installs
241–280 of 1,434
