Security best practices
Reviews secure-by-default implementation choices for supported languages and frameworks.
OpenAI
What this skill does
Security guidance/review for Python, JavaScript/TypeScript, and Go when the user explicitly requests it.
Where, why and how to use it
Use for an explicit secure-coding review or security-focused implementation. Identify the actual stack, then consult relevant references.
Official skill from a deprecated Codex catalog. Treat it as historical; current Codex examples live in openai/plugins. It does not replace a scoped vulnerability assessment.
Source location
openai/skills:skills/.curated/security-best-practices/SKILL.md
Compatibility and setup
Codex catalog conventions; validate other hosts.
Requires matching stack references; this repository is deprecated.
Boundaries
A best-practices pass is not proof of security or a complete audit; keep claims scoped.
Source version
openai/skills main; deprecated; unpinned. Reference checked 2026-10-14. Source verification does not mean this skill is installed, its connector is available or its service entitlement active.
Example instruction
Review this TypeScript API for secure defaults and cite the applicable findings.