Codex Security scan
Performs a standard single-pass security review of a repository or scoped path.
OpenAI plugin examples
What this skill does
Use for a standard repository/path scan; not for PR diffs or deep multi-pass scans.
Where, why and how to use it
Use only when a standard security scan is requested or routed. Preserve scan scope, inspect source-backed paths, and validate findings.
This is a structured security workflow whose host may supply scan context and tools. It is not generic security advice or authorization for exploit activity.
Source location
openai/plugins:plugins/codex-security/skills/security-scan/SKILL.md
Compatibility and setup
Codex security host/workflow integration; standalone use may lack required context/tools.
Requires the Codex Security plugin context and an explicit scope.
Boundaries
No scope expansion, live probing, or exploit validation without authorization; preserve scan outputs securely.
Source version
openai/plugins main; unpinned. Reference checked 2026-10-14. Source verification does not mean this skill is installed, its connector is available or its service entitlement active.
Example instruction
Run the standard security scan on the authorized API module and report only evidence-backed findings.