Skip to main content
affpapa.org
RU EN
skill CX Codex GP ChatGPT official · OpenAI

security-diff-scan — Codex skill: what it does, how to install

Reviews pull requests, commits, and local diffs for security vulnerabilities. Catches risks in modified and deleted code before merging.

Install into Codex · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add openai/plugins --skill security-diff-scan -a codex
Open on GitHub

What security-diff-scan does

This skill inspects Git diffs, PRs, and working-tree changes to find security issues. It guides the assistant through threat modeling, finding discovery, and attack-path analysis across modified files without auditing the entire unaffected codebase.

Under the hood, the workflow uses plugin Python scripts alongside Codex MCP helpers. It maps modified files with generate_in_scope_files.py, registers findings, and writes the final summary into report.md and SARIF format.

Install this if you need structured pre-merge security checks on pull requests. Without Python and the required MCP helpers in your environment, running the terminal workflow will fail.

What it helps with

  • check Git diffs and pull requests for security vulnerabilities
  • build threat models scoped to specific code changes
  • trace attack paths through modified and deleted files
  • export vulnerability review results to SARIF and Markdown

Example prompts for the agent

  • Run security-diff-scan on the current git diff
  • Scan the latest commit for security vulnerabilities using security-diff-scan
  • Review my working-tree patch with security-diff-scan and generate a SARIF report

How to install security-diff-scan

1Skills CLI (Vercel)

npx skills add openai/plugins --skill security-diff-scan -a codex

2Manually: put the files in place

.agents/skills/security-diff-scan/SKILL.md

For all projects use ~/.agents/skills/

From the same set201

The whole set →
supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs remotion-render official Remotion Exports videos and static stills from Remotion projects using CLI commands. CX Codex GP ChatGPT 3installs figma-create-new-file official Figma Creates blank Figma, FigJam, or Slides files inside draft folders. It resolves planKey and editor types before invoking Figma MCP tools. CX Codex GP ChatGPT 6installs swiftui-performance-audit official OpenAI Pinpoints SwiftUI runtime issues like frame drops, unresponsive taps, and excessive view body computations. Works code-first and guides Instruments profiling. CX Codex GP ChatGPT 109installs swiftui-liquid-glass official OpenAI This skill helps build and review SwiftUI Liquid Glass interfaces for iOS 26+. Use it when adopting the API or checking fallbacks, interaction, and design fit. CX Codex GP ChatGPT 121installs swiftui-ui-patterns official OpenAI This skill helps build and refactor SwiftUI interfaces, from navigation and state to layouts and controls. Use it for new screens or changes to an existing project. CX Codex GP ChatGPT 114installs swiftui-view-refactor official OpenAI Refactors SwiftUI view files into clean, testable structures with dedicated subview types and proper Observation ownership. CX Codex GP ChatGPT 113installs ios-memgraph-leaks official OpenAI Captures and inspects iOS leaks from a simulator process or .memgraph. Useful for tracing retained objects and checking a fix with before-and-after evidence. CX Codex GP ChatGPT 1,054installs

Similar

compliance-os Alireza Rezvani This skill selects applicable frameworks, maps shared controls, and builds a combined audit and evidence plan for multi-framework programs. Claude Code 33installs aims-audit Alireza Rezvani Runs a six-question ISO/IEC 42001 internal audit check for AI Management Systems. Helps verify readiness before stage 1 audits or when onboarding models. Claude Code 31installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. Claude Code CX Codex Cursor +1 44,800installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. Claude Code CX Codex Cursor +1 52,200installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. Claude Code CX Codex Cursor +1 69,400installs

Questions about security-diff-scan

How to install security-diff-scan in Codex?

Run npx skills add openai/plugins --skill security-diff-scan in your terminal. This downloads the skill into your project's .agents/skills directory.

What does security-diff-scan do?

It inspects code modifications across commits or branches, identifies potential security flaws, and validates attack paths. The process concludes by producing a Markdown report and SARIF findings.

What output formats does security-diff-scan produce?

The skill generates a report.md summary and a standard SARIF file. It can also produce targeted inline review comments for verified findings.

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor