NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
diff-analyze skill Analyzes a git diff before a PR, scoring risk, classifying changes, and suggesting reviewer roles. Use it before merging a large change.
CX Codex +1
751installs
security-scan skill Scans a repo at three depths: dependency audit, hard-coded secrets, risky code patterns. Useful before a release or while reviewing a PR.
CX Codex +1
748installs
dependency-check skill Scans project dependencies for known vulnerabilities and CVEs. Run before releases, after lockfile changes, or when investigating security advisories.
CX Codex +1
748installs
mantis-critic
official skill Checks whether validated findings remain triggerable in release builds with assertions disabled. Use it after a finding has already been verified.
CX Codex +1
1,600installs
mantis-plan
official skill Generates a targeted security review plan based on your threat model and historical findings. Run at the start of a review campaign to map code boundaries and prioritize what to check.
CX Codex +1
1,600installs
mantis-summarize
official skill Builds a security-focused codebase map with mantis-summary.md files in each directory. Reduces token overhead during planning and research.
CX Codex +1
1,600installs
mantis-architecture
official skill Turns codebase analysis and collected learnings into an interlinked Markdown knowledge base. Use it at the start of an architecture and vulnerability review loop.
CX Codex +1
1,600installs
trailmark skill Builds and inspects multi-language code graphs to trace taint propagation, map attack surfaces, and prioritize security audits.
CX Codex +1
4,000installs
loop-worker skill Runs Ruflo background workers on a /loop schedule and checks them through MCP. Use it for recurring code checks and worker tasks.
CX Codex +1
744installs
anti-detect-browser skill Launch Chromium with a genuine device fingerprint through Playwright API. Each profile gets one coherent identity that persists across runs for testing, scraping, and multi-account work.
CX Codex +1
137,300installs
safety-scan skill Scans inputs for prompt injection, jailbreak attempts, and unsafe content before processing. Use it when handling untrusted data from users, APIs, or webhooks.
CX Codex +1
743installs
wasm-agent skill Creates and manages isolated WebAssembly agents for running untrusted code safely without host filesystem access.
CX Codex +1
739installs
bash-pro skill Teaches the agent to write defensive Bash scripts for CI/CD and ops, complete with Bats tests and ShellCheck linting.
CX Codex +1
966installs
autonomous-agent-patterns skill Design patterns for building an autonomous coding agent: tool calling, user approvals, browser automation, rollback checkpoints. Useful while you are designing the agent.
CX Codex +1
965installs
federation-audit skill Reviews signed coordination evidence and active work claims across RuFlo Federation. Identifies stale state and duplicates without altering shared data.
CX Codex +1
729installs
browser-login skill Authenticates against a site once, sanitizes cookies through AIDefence, vaults the session handle, and lets other skills reuse it without re-logging in.
CX Codex +1
729installs
iot-witness-verify skill Verifies witness chain integrity for Cognitum Seed devices and detects provenance gaps. Useful for uncovering broken hash chains and missing epochs.
CX Codex +1
728installs
computer-use-agents skill Guides the architecture of AI agents that control screens, cursors, and keystrokes using Anthropic Computer Use or OpenAI Operator. Useful for sandboxed desktop and GUI automation.
CX Codex +1
962installs
mermaid-to-proverif skill Turns a Mermaid sequence diagram of a crypto protocol into a ProVerif model — a .pv file you can check for secrecy, authentication and forward secrecy.
CX Codex +1
3,900installs
graph-evolution skill Compares Trailmark code graphs across two code snapshots to spot structural security changes. It catches attack path expansion and privilege shifts that text diffs overlook.
CX Codex +1
3,900installs
trailmark-structural skill Builds a Trailmark graph for a target directory and reports complexity, taint, blast radius, privilege boundaries, and attack surface data.
CX Codex +1
3,900installs
audit-augmentation skill Projects SARIF static analysis reports, weAudit notes, and binary graphs onto Trailmark code graphs. Useful when mapping vulnerabilities to call graphs and data taint paths.
CX Codex +1
3,900installs
crypto-protocol-diagram skill Reads protocol code or a spec and writes a Mermaid sequenceDiagram with crypto annotations, plus an ASCII diagram in the reply.
CX Codex +1
3,900installs
plaid-fintech skill Provides integration patterns for the Plaid API, covering Link tokens, ACH Auth, transaction sync, balance checks, and webhook handling.
CX Codex +1
956installs
browser-form-fill skill Fills web forms using a structured JSON field map and saved selector templates. It automates data entry and form submission directly in browser sessions.
CX Codex +1
717installs
gitnexus-taint-analysis skill A skill that teaches the agent GitNexus's CFG/taint/PDG internals: reading findings, adding sources and sinks, editing interprocedural code.
CX Codex +1
335installs
genotoxic skill Sorts survived mutants into false positives, missing unit tests and fuzzing targets, using a code graph built with Trailmark.
CX Codex +1
3,800installs
salesforce-component-standards
official skill Guides Salesforce UI development across LWC, Aura, and Visualforce. Enforces SLDS 2 compliance, accessibility, and platform security.
770installs
mantis-meta-agent
official skill A campaign supervisor for Mantis security review: it keeps the loop running pass after pass and holds state and snapshots. Built for reviews that run long unattended.
CX Codex +1
1,500installs
mantis-chain
official skill Stacks separate validated findings into multi-step exploit chains, so a handful of low-severity bugs can add up to one serious scenario.
CX Codex +1
1,500installs
mantis-pipeline-adapter
official skill A consulting skill that walks you through building your own deterministic harness for running Mantis skills.
CX Codex +1
1,500installs
mantis-patch
official skill Generates minimal security fixes in isolated environments, applies patches, and verifies them against reproduced vulnerability findings.
CX Codex +1
1,500installs
mantis-history
official skill A skill that walks your version control history, pulls out past vulnerabilities and the fixes behind them, and writes them to workspace/historical_learnings.jsonl for later Mantis stages.
CX Codex +1
1,500installs
mantis-calibrate
official skill Turns confirmed findings into a final risk score from 1 to 10, weighing reproduction evidence against architectural impact. Runs at the end of the pipeline, before the report.
CX Codex +1
1,500installs
mantis-reproduce
official skill Generates and executes crash reproducers in isolated sandboxes to verify security flaws. It helps confirm findings before patching.
CX Codex +1
1,500installs
mantis-dedupe
official skill Consolidates duplicate security findings before review. Use it after raw findings exist and several reports may describe the same flaw.
CX Codex +1
1,500installs
mantis-report
official skill Transforms verified security findings and exploit chains into a professional markdown report. Use at the end of your review cycle to generate stakeholder-facing documentation.
CX Codex +1
1,500installs
mantis-researcher
official skill Audits production source code against workspace/plan.json. It inspects target files for boundary checks, missing sanitization, and interface violations without modifying the codebase.
CX Codex +1
1,600installs
browser-extract skill Pulls text, tables and attribute values off a rendered page as structured JSON, with PII and prompt-injection checks running before anything reaches the model.
CX Codex +1
697installs
terraform-style-guide skill A skill that generates and validates Terraform code according to HashiCorp's official standards. Ensures consistent, secure, and readable HCL across your configurations.
CX Codex +1
12,600installs
321–360 of 1,434
