Skills and MCP tagged “codex-security”

security-scan official OpenAI skill Runs a single-pass security audit on a repository or selected path. Use it for a general review when there is no diff to inspect. CX Codex GP ChatGPT 39installs threat-model official OpenAI skill Builds repository threat models, maps trust boundaries, and outputs threatmodel.md in Codex. CX Codex GP ChatGPT 32installs triage-finding official OpenAI skill Triages external security reports against repository code and SECURITY.md policies, assigning static-evidence verdicts without modifying files. CX Codex GP ChatGPT 30installs security-diff-scan official OpenAI skill Reviews pull requests, commits, and local diffs for security vulnerabilities. Catches risks in modified and deleted code before merging. CX Codex GP ChatGPT 30installs validation official OpenAI skill This skill checks whether candidate security findings hold up. Use it to validate findings from discovery, not to start a full repository scan. CX Codex GP ChatGPT 29installs deep-security-scan official OpenAI skill This skill runs multiple independent security scans across your entire repository or a scoped path, aggregates findings, and generates a complete report. Use it when standard scanning needs more depth and confidence. CX Codex GP ChatGPT 29installs fix-finding official OpenAI skill Resolves confirmed security vulnerabilities through targeted, validated patches. Useful when you need to close an exploit path without breaking existing APIs. CX Codex GP ChatGPT 27installs attack-path-analysis official OpenAI skill Evaluates plausible security findings in Codex and ChatGPT, traces paths from source to sink, and calibrates severity against the repository threat model. CX Codex GP ChatGPT 27installs track-findings official OpenAI skill This skill moves validated Codex Security findings into Linear, Jira, or GitHub. Use it when scan results are reviewed and ready for controlled tracking. CX Codex GP ChatGPT 26installs vulnerability-writeup official OpenAI skill Turns vulnerability notes, PoCs, and source code into a checked, self-contained report. Use it to assess one finding or a disclosure campaign. CX Codex GP ChatGPT 25installs finding-discovery official OpenAI skill This skill searches code or changes for plausible security vulnerabilities in the context of a threat model. Use it during finding discovery, not to start a full scan. CX Codex GP ChatGPT 24installs propose-security-hardening official OpenAI skill This skill turns vulnerability evidence and scan findings into architectural hardening options. Use it when a single-finding patch does not address the wider design. CX Codex GP ChatGPT 13installs define-security-policy official OpenAI skill Helps author, review, and update SECURITY.md files so Codex Security knows project boundaries, invariants, and out-of-scope targets. CX Codex GP ChatGPT 4installs