Skip to main content
NeVibeCode · 136 items

Security: skills, plugins, subagents and slash commands

Security for Claude Code, Codex and Cursor: skills, plugins, subagents and slash commands, from popular to niche.

git-guardrails-claude-code Matt Pocock skill This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs java-springboot official github skill Gives GitHub Copilot Spring Boot development practices, from project layout to tests and security. Use it when writing or reviewing Java application code. GitHub Copilot 21,272installs sql-code-review official github skill Reviews SQL for security and performance issues, as well as maintainability. Use it when checking queries or a database schema. GitHub Copilot 14,060installs postgresql-code-review official github skill Reviews SQL and database schemas for PostgreSQL-specific issues. Use it before reviewing migrations, JSONB queries, functions, or access rules. GitHub Copilot 12,608installs make-repo-contribution official github skill This skill checks repository rules before issues, branches, commits, or pull requests, then guides the contribution workflow. GitHub Copilot 11,073installs agent-governance official github skill Provides governance patterns for AI agents that use APIs, databases, or file systems. Use it when agent actions need policy checks, threat detection, and audit records. GitHub Copilot 9,623installs azure-deployment-preflight official github skill Checks Azure Bicep deployments before they run, including syntax, permissions, and planned changes. Use it before azd provision or az deployment. GitHub Copilot 9,591installs azure-role-selector official github skill This skill selects an Azure role with the least privilege needed for an identity and shows how to assign it. Use it when Azure access needs a careful RBAC match. GitHub Copilot 9,399installs debian-linux-triage official github skill This skill troubleshoots Debian Linux issues with apt, systemd, and dpkg, while accounting for AppArmor and firewall concerns. Use it for guided diagnosis. GitHub Copilot 9,197installs google-cloud-recipe-auth official Google LLC skill This skill explains Google Cloud authentication and permissions. Use it when setting up IAM, ADC, or service accounts for local code and production workloads. Claude Code Gemini CLI CX Codex 15,450installs fedora-linux-triage official github skill This skill troubleshoots Fedora with dnf, systemd, and SELinux-aware checks. Use it when an agent needs a clear diagnostic sequence and ready-to-run commands. GitHub Copilot 8,800installs power-platform-mcp-connector-suite official github skill Builds Power Platform custom connectors with MCP support for Copilot Studio. Use it when creating, validating, or debugging connector schemas. GitHub Copilot 8,700installs centos-linux-triage official github skill This skill diagnoses and fixes CentOS issues with RHEL-compatible commands, SELinux-aware checks, and firewalld guidance. Use it for server triage. GitHub Copilot 8,700installs cloud-sql-basics official google skill This skill helps create and explain Cloud SQL resources for MySQL, PostgreSQL, and SQL Server. Use it when setting up a database in Google Cloud. Claude Code Gemini CLI CX Codex 14,679installs google-cloud-waf-security official google skill This skill reviews Google Cloud workloads against the security pillar of the Well-Architected Framework and suggests actions for IAM, networks, data, and operations. Claude Code Gemini CLI CX Codex 14,620installs code-reviewer official Anthropic subagent This subagent checks code changes for bugs, security issues, and project-rule violations. Use it when a review should focus on findings that matter. Claude Code 31,050installs code-review-excellence Seth Hobson skill This skill guides pull request reviews, catches logic and security issues, and helps teams give specific feedback. Use it for review standards or developer mentoring. Claude Code CX Codex Cursor 30,193installs security-review official github skill Reviews code and dependencies for vulnerabilities, exposed secrets, and access-control flaws. Use it before a release or when auditing a project path. GitHub Copilot 5,500installs security-requirement-extraction Seth Hobson skill Turns a threat model and business context into testable security requirements: user stories, acceptance criteria, test cases. Claude Code CX Codex Cursor 24,845installs agent-platform-migrate-from-ai-studio official google skill Guides a Gemini API migration from Google AI Studio to Gemini Enterprise Agent Platform. Use it when the app needs Google Cloud billing, IAM, or shared infrastructure. Claude Code Gemini CLI CX Codex 7,934installs dependabot official github skill A GitHub Copilot skill that helps write and tune .github/dependabot.yml: grouped updates, monorepo patterns, security updates. GitHub Copilot 4,400installs workload-manager-basics official google skill This skill manages Google Cloud Workload Manager rules, evaluations, scanned resources, and findings. Use it for workload best-practice checks. Claude Code Gemini CLI CX Codex 6,999installs code-reviewer VoltAgent Community subagent Reviews code changes for bugs, security flaws and maintenance issues. Use it before merging complex work or auditing a project. Claude Code 31,050installs stride-analysis-patterns Seth Hobson skill This skill uses STRIDE to identify threats in system architecture and security decisions. Use it to structure a threat modeling session or prepare security documentation. Claude Code CX Codex Cursor 20,506installs gke-networking official google skill Plans and configures core GKE networking, including private nodes, VPC-native clusters, DNS, egress, IP ranges, and Dataplane V2. Claude Code Gemini CLI CX Codex 6,551installs gke-app-onboarding official google skill Guides a first application deployment to GKE, from containerization and manifests to rollout checks. Use it when moving an app to GKE. Claude Code Gemini CLI CX Codex 6,489installs gke-cluster-creation official google skill Creates and audits GKE clusters with Autopilot, Standard Regional, and AI templates. Use it when provisioning a cluster, choosing its mode, or reviewing production readiness. Claude Code Gemini CLI CX Codex 6,485installs gke-backup-dr official google skill Configures Backup for GKE for GKE cluster backups and restores. Use it for backup policies, disaster recovery, and cluster recovery workflows. Claude Code Gemini CLI CX Codex 6,464installs gke-multitenancy official google skill Plans GKE multi-tenancy with team isolation, RBAC, resource limits and cost allocation. Use it when teams or environments share one cluster. Claude Code Gemini CLI CX Codex 6,448installs detection-engineering-coverage-evaluation official google skill This skill checks Google SecOps rule coverage against synthetic events generated from threat intelligence. Use it to find detection gaps and prepare rules to address them. Claude Code Gemini CLI CX Codex 6,394installs threat-mitigation-mapping Seth Hobson skill Maps identified threats to security controls and supports remediation planning. Use it when reviewing control coverage or setting security priorities. Claude Code CX Codex Cursor 19,456installs auth-implementation-patterns Seth Hobson skill A skill for designing authentication and authorization: JWT, OAuth2, sessions, roles. Useful when you build a login flow or fix an access bug. Claude Code CX Codex Cursor 19,388installs google-cloud-recipe-foundation-builder official google skill Sets up a baseline landing zone for a Google Cloud Organization, including security policies, folders, projects, billing, and centralized logs. Use it when establishing a new organization foundation, not when onboarding one project. Claude Code Gemini CLI CX Codex 6,337installs data-manager-api-setup official google skill This skill sets up Data Manager API access and client libraries. Use it when preparing a local environment before building an API integration. Claude Code Gemini CLI CX Codex 6,109installs google-cloud-solution-architecture official google skill This skill gathers requirements and designs complex Google Cloud systems. Use it for new cloud workloads, migrations, and multi-product architecture work. Claude Code Gemini CLI CX Codex 5,980installs github-actions-templates Seth Hobson skill This skill creates GitHub Actions workflows for testing, builds, and deployments. Use it when a project needs CI/CD or reusable workflow templates. Claude Code CX Codex Cursor 17,420installs attack-tree-construction Seth Hobson skill Builds attack trees to map threat paths, spot defense gaps, and explain security risks. Useful for penetration test planning and architecture reviews. Claude Code CX Codex Cursor 17,309installs google-cloud-storage-basics official google skill This skill helps an agent manage Google Cloud Storage buckets and objects, from file transfers and access control to storage policies. Claude Code Gemini CLI CX Codex 5,516installs google-cloud-global-frontend-configuration official google skill This skill guides design and deployment of a Google Cloud global external Application Load Balancer. Use it for CDN, WAF, and Service Extensions setup. Claude Code Gemini CLI CX Codex 5,300installs solidity-security Seth Hobson skill This skill helps write and audit Solidity contracts against common vulnerabilities. Use it for DeFi work, security checks, and audit preparation. Claude Code CX Codex Cursor 15,382installs

1–40 of 136

Security of AI-written code: in the Veracode 2025 study, models left OWASP Top 10 vulnerabilities in 45% of tasks. Skills and rules here look for secrets in code, injection, XSS, client-side authorization and database permissions. A hook that blocks a commit containing a key beats a skill that politely asks the agent not to. And remember that a skill is code too: GitHub warns that skills are not reviewed and may contain prompt injection.

More in NeVibeCode

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor