wiz-sec-public

wiz-sec-public/secure-rules-files

Cursor rule

Enforces security best practices for .NET applications built with ASP.NET Core, focusing on preventing top CWEs.

wiz-sec-public/secure-rules-files

Cursor rule

Enforces security best practices for C applications to prevent common vulnerabilities during code generation.

wiz-sec-public/secure-rules-files

Cursor rule

Enforce secure infrastructure-as-code best practices for HCL/Terraform configurations to prevent common cloud security misconfigurations.

wiz-sec-public/secure-rules-files

Cursor rule

Enforces security best practices for Java applications built with Spring by addressing common vulnerabilities.

wiz-sec-public/secure-rules-files

Cursor rule

Enforces security best practices for JavaScript and Node.js applications.

wiz-sec-public/secure-rules-files

Cursor rule

Generates secure JavaScript code for React applications, focusing on preventing common vulnerabilities like XSS, CSRF, and hardcoded secrets, adhering to OWASP ASVS guidelines.

wiz-sec-public/secure-rules-files

Cursor rule

Generates secure Python/Django code inherently preventing top security weaknesses, adhering to OWASP ASVS and avoiding common CWEs.

wiz-sec-public/secure-rules-files

Cursor rule

This rule enforces security best practices for Python applications built with Flask, focusing on preventing common web vulnerabilities.

wiz-sec-public/secure-rules-files

Cursor rule

Enforces security best practices for YAML infrastructure configurations using Cloudformation.

wiz-sec-public/SITF

Skill Claude CodeCodex

Generate SITF-compliant attack flow JSON files from attack descriptions or incident reports. Use when analyzing supply chain attacks, breaches, or security incidents.

wiz-sec-public/SITF

Skill Claude CodeCodex

Generate SITF-compliant attack flow JSON from red team or pentest reports. Accepts report files, URLs, or pasted findings. Use when documenting offensive security engagements.

wiz-sec-public/SITF

Skill Claude CodeCodex

Generate a PR-ready technique proposal when an attack step doesn't map to existing SITF techniques. Use after /attack-flow identifies technique gaps.