165 tagged cve, measured the same way as everything else here.
Browse within: apache 45cisa-kev 34cvss 34bun 32cpe 32bug-bounty 25false-positive 21cve-scanning 12ai-skills 10github-advisory 10nvd 10open-source-security 10security-research 10appsec 9
Skill Claude CodeCodex
Check if recent cybersecurity alerts from 10 international CERTs affect your current project. Use when the user asks about security vulnerabilities, CVEs, "is my project affected", "any new security alerts", "check for vulnerabilities", "cyberowlai", or "/cyberowlai". Also trigger when the user is working on…
Skill Claude CodeCodex
Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates covering CVEs, OWASP Top 10, misconfigurations, and security issues across web applications, APIs, and infrastructure. Use when: (1) Performing rapid vulnerability scanning with automated CVE detection, (2)…
Skill Claude CodeCodex
A practical guide for AI agents that need to use vdb. If you are changing the code rather than using it, read AGENTS.md instead.
Skill Claude CodeCodex
Write, debug, or validate a CVEhound detection rule (.cocci or .grep) for a Linux kernel CVE. Use when adding a rule under cvehound/cve/, when a rule's slow tests fail, or when asked why a rule does or doesn't fire on a kernel tree. Not for general Coccinelle work outside this repository.
Skill Claude CodeCodex
Debug a completed or stuck Hacker Bob session — pipeline quality, drift, failures, improvements.
Skill Claude CodeCodex
Headless Bob diff-review pipeline — invoked by bob-runner.ts via 'claude --dangerously-skip-permissions --print "/bob-diff-review -- ..."'. Ingests a unified diff, initializes a Bob repo session, builds the symbol surface index, maps changed hunks to impacted surfaces, spawns per-surface evaluator agents, and…
Skill Claude CodeCodex
Hacker Bob orchestrator runtime — invoked by /bob-evaluate. Do not call directly.
Skill Claude CodeCodex
For each open issue in the configured candidate pool, read the issue body and comments and classify the candidate disposition. On user confirmation, posts a triage-proposal comment that invites the project team to react. Read-only on tracker state — no workflow transitions, closures, or label changes. Six classes in…
Skill Claude CodeCodex
Walk a maintainer through deep, sequential code review of open pull requests on the configured repo. Defaults to the "my reviews" queue (the union of five maintainer signals — see the Inputs table); selectors can narrow to a single PR, an area label, or a collaborator subset. Drafts an approve / request-changes /…
Skill Claude CodeCodex
Sweep open pull requests on the configured repo, classify each one against the project's quality criteria, propose a disposition, and — on the maintainer's confirmation — carry out the action via gh. Disposition options per PR: draft / comment / close / rebase / CI-rerun / workflow-approve / ping-stale-reviewer /…
Skill Claude CodeCodex
Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API. Builds dependency graphs, calculates risk scores, identifies transitive vulnerability paths, and generates compliance reports.…
Skill Claude CodeCodex
Detect code injection vulnerabilities in packages that dynamically generate or evaluate code via new Function(), eval(), vm.run, or template literal interpolation.
Skill Claude CodeCodex
Detect Regular Expression Denial of Service (ReDoS) where crafted input causes catastrophic backtracking in regex patterns applied to user-controlled strings.
Skill Claude CodeCodex
Generate polished, human-sounding vulnerability disclosure reports for GHSA, HackerOne, and email. Auto-selects channel, calculates CVSS, and adapts tone.
Skill Claude CodeCodex
Turnkey cybersecurity lab — 2,077 skills, 131+ tools, 28 frameworks, and evolving methodology for security research, pentesting, forensics, and threat intelligence. Includes one-step ecosystem cloner for 8 repositories.
Skill Claude CodeCodex
CVE-oriented multi-agent code audit system. Use when user provides a git repository URL for vulnerability discovery with the goal of submitting CVEs. This skill orchestrates subagents to find exploitable vulnerabilities (RCE, SQLi, Auth Bypass, etc.), write weaponized POCs, and generate CVE-ready reports. ALWAYS use…
Bhanunamikaze/Code-VulnScan-Skill
Skill Claude CodeCodex
Use this when the user wants to find security vulnerabilities in a codebase, perform a security audit, scan for CVEs, detect secrets, review React/Next.js, Go, Java/Kotlin JVM, PHP, Ruby, .NET, or Rust web services, audit architecture/application/infrastructure flaws, review auth/API/crypto/business logic, check…
kevinmhorvath/threat-intel-toolkit
Skill Claude CodeCodex
Check whether a working exploit or public PoC exists for a vulnerability. Given a CVE ID (e.g. CVE-2024-3400) or a named vulnerability (e.g. Log4Shell, EternalBlue, BlueKeep, Citrix Bleed), it queries CISA KEV, EPSS, Metasploit, Nuclei, Exploit-DB, and the nomi-sec/trickest GitHub PoC aggregators, then reports an…
kevinmhorvath/threat-intel-toolkit
Skill Claude CodeCodex
Aggregate free / open-source threat-intel feeds into a local cache and check indicators (IPs, domains, URLs, CVEs) against them. Trigger whenever the user drops an IP, domain, URL, or CVE and asks "is this malicious", "is this a known bad IP", "check this indicator / IOC", "is this domain on any blocklist", "who's…
Skill Claude CodeCodex
Use this skill when the user wants to update their project's CLAUDE.md or AGENTS.md, verify their Claude Code setup, or check for improvements to their project configuration. Triggers on requests like: "update my project docs", "verify my claude setup", "check my project configuration", "audit my .claude directory"…
Skill Claude CodeCodex
Use when creating /goal directives, reusable testable outcome-oriented success standards for agentic workflows. Use whenever the user asks to create a goal, write a /goal directive, define what good looks like, set success criteria for an agent, define a reusable instruction, create a quality standard, write…
Skill Claude CodeCodex
Use this skill when reviewing Python code for common anti-patterns to avoid. Use as a checklist when reviewing code, before finalizing implementations, or when debugging issues that might stem from known bad practices.
jonnybottles/patch-tuesday-mcp
Skill Claude CodeCodex
Monthly Patch Tuesday identity/security triage using the single msrcsearch tool with product watchlists.
Skill Claude CodeCodex
Finds and ranks open-source packages worth auditing for passive CVE/VulDB research. Use when the user asks for vulnerability research targets, CVE hunting candidates, packages to audit, projects to fuzz, or /omv-find. Supports npm, Python, Go, Rust, Java, Ruby, PHP, C#, Swift, Dart, Elixir, Perl, R, and Lua, with…