OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
Install
npx skills add openai/codex-securitygh skill install openai/codex-securitygit clone --depth 1 https://github.com/openai/codex-securitySkills in this collection
- Cloud FindingsOpenAIOfficialRead existing Codex Security Cloud findings, reports, recorded assignment and verification, and scan status from the connected account. Use for Cloud read requests and finding links, not local scans or requests to change Cloud data.
- Publish FindingsOpenAIOfficialImport selected Snyk Open Source findings, Semgrep Code CLI/CI reports, or Wiz package vulnerabilities, SAST, repository secrets, and IaC findings locally or to Codex Security Cloud after previewing the destination and evidence.