NeVibeCode · 460 items
Security: skills, plugins, subagents, slash commands and mcp servers
Security for Claude Code, Codex and Cursor: skills, plugins, subagents, slash commands and mcp servers, from popular to niche.
mantis-researcher
official skill Audits production source code against workspace/plan.json. It inspects target files for boundary checks, missing sanitization, and interface violations without modifying the codebase.
Claude Code CX Codex Cursor +1
1,500installs
browser-extract skill Pulls text, tables and attribute values off a rendered page as structured JSON, with PII and prompt-injection checks running before anything reaches the model.
Claude Code CX Codex Cursor +1
697installs
network-engineer subagent Designs, optimizes, and debugs cloud and hybrid network infrastructure. Useful when configuring VPC peering, zero-trust security policies, or resolving latency spikes.
Claude Code
1,871installs
browser-auth-flow skill Drives your login flow once, then probes it for redirect leaks, missing CSRF tokens, weak session cookies and OAuth mistakes. Writes a findings.md with a verdict.
Claude Code CX Codex Cursor +1
689installs
aws-iam skill Verified corrections for the IAM mistakes agents keep making, plus step-by-step workflows for roles and baseline policies.
Claude Code CX Codex Cursor +1
10,200installs
reverse-engineer skill Structured reverse engineering workflow for binaries: static decompilation, dynamic tracing, pattern detection, and automation scripts.
Claude Code CX Codex Cursor +1
891installs
okx-agentic-wallet skill This skill gives a coding agent the OKX Onchain OS wallet: balances, transfers, swaps, bridges, limit orders and contract calls, all through the onchainos CLI.
Claude Code CX Codex Cursor +1
17,400installs
legal-advisor subagent Drafts privacy policies, terms of service, and DPA documents aligned with GDPR and CCPA. Useful when your app needs legal notices and compliance texts.
Claude Code CX Codex Cursor
1,776installs
varlock skill Instructs coding agents to manage secrets via Varlock, redact sensitive values in LLM context, and define configurations inside .env.schema.
Claude Code CX Codex Cursor +1
747installs
assuredworkloads-environment-assessor
official skill Evaluates Google Cloud resources and Org Policies against data sovereignty standards. Recommends the right Assured Workloads framework before rollout.
Claude Code Gemini CLI CX Codex
475installs
insforge-integrations skill A skill that walks your agent through hooking a third-party auth provider into InsForge and through taking x402 payments on an HTTP endpoint.
Claude Code CX Codex Cursor +1
55,700installs
senior-backend skill Scaffolds backend APIs, detects database bottlenecks, and runs load tests. Useful when designing Express routes, optimizing PostgreSQL, or preparing for production.
Claude Code
1,674installs
ra-qm-skills skill Router across 15 compliance skills: ISO 13485, MDR, FDA, ISO 27001, GDPR, EU AI Act. Useful when a request does not clearly match one of them.
Claude Code
1,653installs
api-gateway-backend-security-and-rate-limiting
official skill Configure client authentication, backend access, and per-project quotas for Google Cloud API Gateway. Use it when securing Cloud Run services or investigating quota errors.
Claude Code Gemini CLI CX Codex
360installs
senior-security skill Builds STRIDE and DREAD threat models, scans code for secrets, and routes other security work to specialist skills.
Claude Code
1,277installs
wordpress-master subagent Architect, optimize, and troubleshoot WordPress setups, from custom themes and plugins to WooCommerce and enterprise multisite networks.
Claude Code
763installs
gdpr-dsgvo-expert skill Scans code for GDPR and German BDSG privacy risks, builds DPIA reports, and tracks data subject rights deadlines.
Claude Code
980installs
senior-secops skill Checks source code, dependencies and security controls. Use it before an audit, after a CVE, or when adding checks to CI/CD.
Claude Code
903installs
information-security-manager-iso27001 skill Automates ISO 27001:2022 ISMS implementation, security risk assessment, and compliance checking for HealthTech and MedTech companies.
Claude Code
855installs
security-pen-testing skill This skill guides vulnerability checks across web apps, APIs, and dependencies, from OWASP reviews to pen test reports. Use it for assessments you are authorized to perform.
Claude Code
834installs
red-team skill Skill for structured authorized red team operations: MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, and OPSEC risk assessment.
Claude Code
826installs
adversarial-reviewer skill This skill reviews changes through Saboteur, New Hire, and Security Auditor personas. Use it before merging a PR or when Claude is too agreeable.
Claude Code
813installs
assuredworkloads-frameworks-navigator
official skill Maps compliance requirements to Google Cloud Data Boundary Frameworks and cloud controls. It helps teams select built-in frameworks and spot compliance gaps.
Claude Code Gemini CLI CX Codex
191installs
isms-audit-expert skill Skill for ISO 27001 compliance verification, security control assessment, and certification support. Documents audit findings, classifies nonconformities, and manages corrective actions.
Claude Code
791installs
assuredworkloads-frameworks-author
official skill This skill authors custom cloud controls and customized frameworks for Assured Workloads when built-in resources do not cover the requirement.
Claude Code Gemini CLI CX Codex
185installs
skill-security-auditor skill Scans AI agent skills for malicious code before install: detects eval(), os.system(), data exfiltration, prompt injection, and vulnerable dependencies.
Claude Code
785installs
risk-manager subagent Subagent for analyzing financial, operational, and regulatory risk. Helps teams quantify exposure, design control frameworks, and validate risk models.
Claude Code
550installs
fda-consultant-specialist skill This skill guides FDA pathways for medical devices, QMSR requirements, HIPAA assessments, and device cybersecurity. Use it when planning or reviewing regulatory work.
Claude Code
775installs
fintech-engineer subagent Designs payment systems, banking integrations, and compliance-focused financial services with strict transaction accuracy. Useful for payment gateways and KYC rules.
Claude Code
518installs
mdr-745-specialist skill This skill supports EU MDR 2017/745 device classification, technical documentation, clinical evaluation, and post-market surveillance planning.
Claude Code
737installs
diagnose
official skill This skill audits an AI workflow across five dimensions and returns scores with prioritized fixes. Use it before launch or after major workflow changes.
GitHub Copilot
209installs
gcp-cloud-architect skill Plans Google Cloud architectures, estimates costs, and generates infrastructure code. Use it when moving an app to GCP or choosing a deployment pattern.
Claude Code
717installs
audit-integrity
official skill Enforces evidence verification, prevents finding suppression, and gates security reports with a score of at least 8 out of 10 during audits.
GitHub Copilot
202installs
ai-security skill Scans prompts for injection signatures and assesses risks such as model inversion and agent tool abuse. Use it before exposing an AI system to untrusted input.
Claude Code
703installs
docker-development skill This skill reviews Dockerfiles, Compose files, and containers for build, image-size, and security issues. Use it when setting up or cleaning up containerized projects.
Claude Code
702installs
secrets-vault-manager skill This skill helps manage infrastructure-level secrets across Vault and cloud stores, with access policies, rotation, and auditing for services and operators.
Claude Code
697installs
database-schema-designer skill This skill turns database requirements into relational schemas, ERDs, and migrations. Use it when planning tables for a feature or reviewing an existing design.
Claude Code
692installs
dependency-auditor skill An offline Claude Code skill that checks dependencies for vulnerability patterns and license conflicts, then drafts a risk-ranked upgrade plan. Use it before a release or license review.
Claude Code
688installs
atlassian-admin skill Manage Atlassian users, groups, access, and organization settings. Useful when handling account changes, SSO, or integrations across Jira and Confluence.
Claude Code
682installs
pr-review-expert skill Reviews GitHub PRs and GitLab MRs for security risks, breaking changes, and test gaps. Use it before merging changes that affect shared code or APIs.
Claude Code
675installs
321–360 of 460