Use for a standard, single-pass security audit of an entire repository or a scoped path, package, folder, or submodule with no diff to review. This is the default repository scan. Do not use for PR, commit, branch, or working-tree diffs, or for deep, multi-pass scans.
Install
npx skills add openai/plugins --skill security-scannpx skills add openai/plugins --skill security-scan -a claude-code -gnpx skills add openai/plugins --skill security-scan -a codex -ggemini skills install https://github.com/openai/plugins.git --path plugins/codex-security/skills/security-scangh skill install openai/plugins security-scangit clone --depth 1 https://github.com/openai/plugins /tmp/openai__plugins
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/openai__plugins/plugins/codex-security/skills/security-scan ~/.claude/skills/security-scan # Claude Code
cp -R /tmp/openai__plugins/plugins/codex-security/skills/security-scan ~/.agents/skills/security-scan # Codex, Cursor, Gemini CLI, Copilot, OpenCode