Use when Codex is already in the validation phase of a security scan or the user explicitly asks to determine whether one or more candidate security findings are valid. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
Install
npx skills add openai/plugins --skill validationnpx skills add openai/plugins --skill validation -a claude-code -gnpx skills add openai/plugins --skill validation -a codex -ggemini skills install https://github.com/openai/plugins.git --path plugins/codex-security/skills/validationgh skill install openai/plugins validationgit clone --depth 1 https://github.com/openai/plugins /tmp/openai__plugins
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/openai__plugins/plugins/codex-security/skills/validation ~/.claude/skills/validation # Claude Code
cp -R /tmp/openai__plugins/plugins/codex-security/skills/validation ~/.agents/skills/validation # Codex, Cursor, Gemini CLI, Copilot, OpenCode