NeVibeCode · 1,340 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
semgrep-rule-variant-creator skill Ports completed Semgrep rules to selected languages and creates separate rule and test directories. Use it when you already have a rule to adapt.
CX Codex +1
5,300installs
cosmos-vulnerability-scanner skill Finds vulnerabilities in Cosmos SDK modules and CosmWasm contracts that halt a chain or drain funds. Useful before a network goes live.
CX Codex +1
5,300installs
fuzzing-obstacles skill Patches anti-fuzzing patterns like checksums and time-seeded PRNGs in C, C++, and Rust. Useful when fuzzers get stuck on early validation checks.
CX Codex +1
5,300installs
address-sanitizer skill This skill gives an agent a routine for building code with -fsanitize=address, reading ASan reports and freeing the fuzzer from memory caps. Aimed at C/C++ and Rust with unsafe blocks.
CX Codex +1
5,400installs
vulnerability-scanner skill Guides AI agents through vulnerability assessments using OWASP 2025 standards and attack surface mapping. Useful during pre-release security reviews.
CX Codex +1
1,300installs
wp-plugin-development skill This skill guides WordPress plugin work, from project structure and hooks to admin settings, security checks and release packaging.
CX Codex +1
8,000installs
substrate-vulnerability-scanner skill Scans Substrate and Polkadot pallets for 7 critical vulnerabilities such as panic DoS and integer overflow. Useful when auditing FRAME runtimes before mainnet launch.
CX Codex +1
5,200installs
atheris skill Guides setup of coverage-guided fuzzing for Python code and C extensions with Atheris. Use it to investigate crashes and memory corruption.
CX Codex +1
5,200installs
ossfuzz skill Guides your AI agent through enrolling projects in Google OSS-Fuzz and running fuzzer targets locally with helper scripts.
CX Codex +1
5,200installs
devcontainer-setup skill Creates a sandboxed devcontainer with Claude Code, persistent volumes, and tooling for Python, Node, Rust, or Go. Helpful when setting up isolated development workspaces.
CX Codex +1
5,200installs
constant-time-testing skill This skill helps test whether a cryptographic implementation’s runtime varies with secret data. Use it when auditing crypto code or investigating a possible timing leak.
CX Codex +1
5,200installs
algorand-vulnerability-scanner skill Checks Algorand contracts written in TEAL or PyTeal against 11 known vulnerability patterns, from rekeying to unprotected admin calls.
CX Codex +1
5,200installs
dwarf-expert skill Inspects DWARF debug sections in compiled binaries, verifies DIE trees, and assists with parsers. Handy when analyzing compiled code.
CX Codex +1
5,200installs
libfuzzer skill A skill that walks the agent through libFuzzer: the harness, the -fsanitize=fuzzer build, corpus handling, campaign triage. For C/C++ built with Clang.
CX Codex +1
5,200installs
testing-handbook-generator skill Turns Trail of Bits Testing Handbook pages into Claude skills, picking a template per section type and writing the SKILL.md files for you.
CX Codex +1
5,200installs
second-opinion skill Runs external CLI code reviews via Codex or Antigravity. It inspects dirty working trees, branch diffs, and specific commits without editing files.
CX Codex +1
5,300installs
shipping-artifacts skill Generates core documentation to make vibe-coded applications reviewable before release. It maps architecture, permission flows, and test coverage for audits.
CX Codex +1
1,700installs
burpsuite-project-parser skill Explores and queries Burp Suite project files from the command line. It extracts proxy history, scanner findings, and HTTP traffic without opening the desktop app.
CX Codex +1
5,100installs
yara-rule-authoring skill Authors and reviews YARA-X detection rules for malware hunting, flagging strings that produce weak atoms and conditions that will fire on clean files.
CX Codex +1
5,100installs
ruzzy skill This skill installs and runs Ruzzy, a coverage-guided Ruby fuzzer built on libFuzzer. Reach for it when a gem needs crash hunting or a native extension needs a memory-safety check.
CX Codex +1
5,100installs
wycheproof skill Validates cryptographic implementations using Project Wycheproof test vectors. It helps your agent spot known vulnerabilities and edge cases across AES, RSA, and ECDSA.
CX Codex +1
5,200installs
blockchain-developer skill This skill guides smart contract, Web3 application, and decentralized-system work. Use it for design, reviews, and transaction checks before any on-chain action.
CX Codex +1
1,200installs
production-code-audit skill Skill for systematic code review covering security flaws, logic errors and performance issues before deployment. Identifies specific problems, proposes fixes and validates them.
CX Codex +1
1,200installs
let-fate-decide skill This skill uses a Tarot spread to suggest a direction when a request leaves several reasonable options open. It suits casual handoffs where the agent is asked to choose.
CX Codex +1
4,700installs
zeroize-audit skill Finds passwords, keys and tokens left in memory across C, C++ and Rust, and checks whether the compiler threw their wiping away.
CX Codex +1
4,700installs
pptx-reference-deck-analysis skill Reads a PPTX reference deck without changing it, covering structure, theme, typography, layouts, and OOXML. Use it before building a new deck from a reference.
CX Codex
2,500installs
vibe-security skill A skill that audits apps built fast with an AI assistant: leaked keys, broken database access rules, and trust placed in values coming from the client.
CX Codex +1
3,600installs
mantis-threat-model
official skill Turns the Mantis knowledge base into a project threat model: trust boundaries, entry points, attacker profiles. Useful once the architecture is written down but the threat model is not.
CX Codex +1
1,800installs
wordpress-penetration-testing skill This skill audits WordPress installations for common vulnerabilities and REST API permission issues in plugins. Designed for authorized security assessments.
CX Codex +1
1,100installs
sign-in-with-google-web
official skill Guides Google Identity Services setup across web projects. It implements secure token handling and IETF authentication patterns.
CX Codex
743installs
google-cloud-scc-remediation
official skill This skill handles Google Cloud Security Command Center findings, from IAM fixes to resource misconfigurations. Use it when an agent must address a specific finding.
CX Codex
742installs
salesforce-apex-quality
official skill Checks Apex for governor-limit risks, security gaps, and missing tests. Use it when GitHub Copilot reviews or generates Salesforce classes, triggers, and test code.
884installs
diagramming-code skill Generates Mermaid diagrams from code graphs using Trailmark. Useful for visualizing call paths, module dependencies, and data flows.
CX Codex +1
4,200installs
dimensional-analysis skill Audits numeric code for unit confusion and decimal-scale errors, then adds dimensional comments. Use it when formulas or conversions need a unit-level review.
CX Codex +1
4,200installs
gmgn-token skill Researches a token by address through the GMGN API, covering price, liquidity, holders and contract risk. Use it before assessing a token purchase.
CX Codex +1
17,900installs
pii-detect skill Scans text, source code, and configs for personal data, tokens, and credentials before commits or logging. Flags exposed lines and suggests redaction.
CX Codex +1
762installs
code-reviewer skill Configures your agent to perform deep code reviews focused on OWASP security flaws, resource leaks, and architecture patterns before merging changes.
CX Codex +1
1,000installs
shopify-apps skill Patterns for Shopify app development with Remix and React Router. Guides App Bridge setups, Polaris UI components, billing flows, and webhooks.
CX Codex +1
1,000installs
backend-security-coder skill Hardens backend application code with allowlist validation, safe database queries, secure cookie handling, and API authentication logic.
CX Codex +1
1,000installs
twilio-communications skill Helps build Twilio communication features: SMS, voice calls, WhatsApp messaging, and two-factor verification. Useful when wiring IVR systems or securing account logins.
CX Codex +1
994installs
281–320 of 1,340
