style-guide
Skill11k starsChanged 11 days agoApache-2.0View on GitHub
Explain safe shell installation practices in a local Markdown report.
- Pipes a download into a shell
10 other projects use a version of this.
Adopted by
Steady: 0 new projects took it in the last 4 weeks, none the 4 weeks before.thin data
Most recently taken up by
- primer/reacttheir own version, first seen Nov 1, 2026
- saveriocirillo/krk-plays-tennis-docstheir own version, first seen Oct 20, 2026
- Tivaphe/hermes-worldbible-skillstheir own version, first seen Oct 20, 2026
- shuttle-browser/shuttletheir own version, first seen Oct 15, 2026
- caglarbaranbora/Apple-Agent-Kittheir own version, first seen Oct 13, 2026
- Azure/azure-functions-agents-runtimetheir own version, first seen Oct 13, 2026
Who's talking about openai/codex-security
- A Hacker News story“Codex Security”Hacker News · Jul 28, 2026 · 598 points
- Gilberts Ahumada“Revisa La Ciberseguridad De Tu Proyecto Con Codex Security CLI”YouTube · Aug 3, 2026 · 399 views
- Alex Hitt“Codex Security GitHub Overview: AI Scanning vs. Sandbox Limits”YouTube · Oct 2, 2026 · 211 views
- prompt cache“Inside OpenAI's Codex Security CLI and TypeScript SDK”YouTube · Aug 1, 2026 · 176 views
- 行銷三刀流“OpenAI 把 AI 漏洞掃描塞進 CI 了:Codex Security CLI 開源”YouTube · Jul 29, 2026 · 144 views
The biggest 5 of 70 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 70
Talked about on GitHub, Bluesky, YouTube and Hacker News (70 times).
On GitHub · 33
- Nov 6, 2026agent-skills.github.openai.codex-security: 5283c84 → 0ed54be — sudosubin/agents.nix0 reactions
- Nov 5, 2026chore(deps): bump the npm-dependencies group with 2 updates — dceoy/docker-ai-coder0 reactions
- Nov 2, 2026chore(deps): bump fast-uri and @openai/codex-security — anantshri/OmniRoute0 reactions
- Nov 2, 2026chore(deps): bump fast-uri and @openai/codex-security — jeturing/OmniRoute0 reactions
- Nov 1, 2026chore(deps-dev): bump @openai/codex-security from 0.1.8 to 0.8.1 — TYZCSQ1976/future-is-here-workbench0 reactions
28 more on GitHub
- Nov 1, 2026chore(deps): bump @openai/codex-security from 0.1.31 to 0.8.1 — vinhnx/VTCode0 reactions · 3 comments
- Oct 30, 2026chore(deps): bump fast-uri and @openai/codex-security — amirsource133/OmniRoute0 reactions
- Oct 29, 2026chore(deps): bump the npm-dependencies group with 5 updates — dceoy/docker-ai-coder0 reactions
- Oct 27, 2026chore(deps): bump the npm-dependencies group with 2 updates — dceoy/docker-ai-coder0 reactions
- Oct 24, 2026chore(deps): bump fast-uri and @openai/codex-security — inkeep/promptfoo0 reactions
- Oct 23, 2026test: validate pre-seal warning recovery across platforms — JayYarlagadda/codex-security0 reactions
- Oct 22, 2026chore(deps): bump @openai/codex-security from 0.4.0 to 0.5.1 — dceoy/docker-ai-coder0 reactions
- Oct 20, 2026[Candidate] openai/codex-security/plugins/codex-security/skills/cloud-findings - cloud-findings — ProSkillsMD/proskills0 reactions · 1 comment
- Oct 20, 2026[Candidate] openai/codex-security/plugins/codex-security/skills/attack-path-analysis - attack-path-analysis — ProSkillsMD/proskills0 reactions · 1 comment
- Oct 20, 2026[Candidate] openai/codex-security/plugins/codex-security/skills/assess-patch-risk - assess-patch-risk — ProSkillsMD/proskills0 reactions · 1 comment
- Oct 19, 2026Bump @openai/codex-security from 0.3.0 to 0.4.0 — dceoy/docker-ai-coder0 reactions
- Oct 16, 2026Bump @openai/codex-security from 0.2.0 to 0.3.0 — dceoy/docker-ai-coder0 reactions
- Oct 9, 2026chore(deps): bump @openai/codex-security from 0.1.31 to 0.8.2 in the minor-and-patch group across 1 directory — leynos/vtcode0 reactions · 2 comments
- Sep 30, 2026feat(luna-factory): make Luna Factory a first-class ChatGPT/Codex app with a Rust MCP runtime — joshyorko/plugins0 reactions · 3 comments
- Sep 24, 2026chore(deps): Bump the backend-minor-patch group across 1 directory with 8 updates — ndh0408/quanly-baogia0 reactions · 1 comment
- Sep 19, 2026chore(deps): bump smol-toml and @openai/codex-security — amirsource133/OmniRoute0 reactions
- Sep 19, 2026chore(deps): bump smol-toml and @openai/codex-security — inkeep/promptfoo0 reactions
- Sep 9, 2026Pin tool implementation artifacts for the full execution lifetime — dominicnunez/agentos0 reactions · 2 comments
- Sep 4, 2026Verificationを脆弱性名ではなく観測可能なsecurity effectへbindする — momoponwork1415-lgtm/wordpress-harness0 reactions · 1 comment
- Sep 4, 2026Finder candidateをWave末尾の中央Evaluator待ちにせずIndependent Verificationへ流す — momoponwork1415-lgtm/wordpress-harness0 reactions · 1 comment
- Sep 4, 2026Source-aware Reconとwhole-target baselineを同じ初期Waveに持つ — momoponwork1415-lgtm/wordpress-harness0 reactions · 1 comment
- Sep 4, 2026長時間Finderのcandidateを途中checkpointしtransient failure後もresumeする — momoponwork1415-lgtm/wordpress-harness0 reactions · 3 comments
- Sep 4, 2026Recall baselineで探索能力をrole-local hard capより優先する — momoponwork1415-lgtm/wordpress-harness0 reactions · 1 comment
- Aug 14, 2026feat(security): integrate OpenAI Codex Security scans — Gentleman-Programming/gentle-ai0 reactions
- Aug 12, 2026Codex Security — Dysonnnn/AiLearn0 reactions
- Aug 6, 2026Codex Security, OpenAI, 2026.07 — AkihikoWatanabe/paper_notes0 reactions · 2 comments
- Aug 3, 2026✨ feat(repro): build an evidence-first reproduction workbench — zendev-lab/ulota0 reactions
- Jul 28, 2026AI Community Trends -- 2026-07-29 — rahmanramsi/daily-digest-ai0 reactions
On Bluesky · 26
- Jul 29, 2026OpenAI's Codex Security A CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Scan… — @sungkim.bsky.social23 likes and reposts · 1 reply
- Jul 29, 2026CLI and SDK for finding security vulns in code. Nice to see more tools abstracting away the complexity here. #saas #security — @marcusreed00.bsky.social6 likes and reposts · 1 reply
- Aug 2, 2026AIを活用してコードの脆弱性をスキャンし修正までサポートするツールらしい セキュリティ対策の自動化にすごく使えそう yug1224 starred openai/codex-security https://github.com/openai/codex-security — @yug1224.com5 likes and reposts · 3 replies
- Jul 29, 2026OpenAI tiene lanzamiento secreto. Bueno, tenía, porque ya se ha filtrado... Se llama Codex Security CLI. Encuentra vulnerabilidades de… — @midu.dev4 likes and reposts
- Jul 29, 2026Nååå OpenAI, i synes alligvel det var passende at open source den her: github.com/openai/codex... — @kasperjunge.bsky.social3 likes and reposts
21 more on Bluesky
- Jul 28, 2026More opensource goodness. We have just released a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in… — @thsottiaux-bot.eurosky.social3 likes and reposts
- Aug 9, 2026A repo scanner that validates findings and tracks them over time is the rare security tool whose use case is obvious from the name alone.… — @u11g.com2 likes and reposts · 2 replies
- Jul 30, 2026OpenAI releases Codex Security repo. GitHub repo provides LLM code security guidelines, +197 comments on HN. #OpenSource #InfoSec 🔗… — @boardwire.bsky.social2 likes and reposts
- Jul 30, 2026github.com/openai/codex... — @dceoy.bsky.social2 likes and reposts
- Jul 29, 2026Yesterday OpenAI open sourced their Codex Security CLI and SDK (github.com/openai/codex...). Looking at it, its really just a standalone… — @iamstan.dev2 likes and reposts · 1 reply
- Sep 1, 2026Repo: github.com/openai/code... Honest part: v0.1.x, and some protected findings need Trusted Access for Cyber approval. Read the README's… — @vicky-grok.bsky.social1 likes and repost
- Aug 29, 2026OpenAI's Codex Security is a CLI and TypeScript SDK to identify, validate, and fix code security vulnerabilities. It offers deep scanning,… — @ai-linkstream.bsky.social1 likes and repost
- Aug 2, 2026github.com/openai/codex-se... GitHub - openai/codex-security: OpenAI's Codex Security CLI and TypeScript SDK for finding, vali... — @technews4869.bsky.social1 likes and repost · 1 reply
- Jul 31, 2026Codex Security github.com/openai/codex... #codex #OpenAI #AI — @joeingeno.bsky.social1 likes and repost
- Jul 29, 2026Codex Security : @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your… — @ytroncal.bsky.social1 likes and repost
- Jul 29, 2026Codex Security View Article | Discussion + AI Summary Summary of HN discussion 🧵👇 — @hncompanion.com1 likes and repost · 1 reply
- Jul 29, 2026OpenAI shipped codex-security, a CLI that scans your repo for vulns and nags you in CI. MCP went stateless, sticky sessions may rest. And… — @canivibe.ai1 likes and repost
- Jul 29, 2026Codex Security https://github.com/openai/codex-security comments #github.com — @hnbest.bsky.social1 likes and repost
- Jul 28, 2026OpenAI just open-sourced Codex Security https://github.com/openai/codex-security (http://news.ycombinator.com/item?id=49089755) — @newsyc250.bsky.social1 likes and repost
- Jul 28, 2026More opensource goodness. We have just released a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in… — @thsottiaux-mirr.selfhosted.social1 likes and repost
- Jul 28, 2026OpenAI just open-sourced Codex Security #HackerNews https://github.com/openai/codex-security — @hackernewstop5.bsky.social1 likes and repost
- Jul 28, 2026I wrote last month: > (...) open-source projects cannot afford to have a dedicated team doing security scanning for them (...). we’re going… — @lalitm.com1 likes and repost · 1 reply
- Jul 28, 2026OpenAIがコーディング支援AI「Codex」のセキュリティ評価ツールをオープンソース化しました。AI生成コードの脆弱性を特定し、安全な開発を支援します。開発現場のセキュリティ向上に貢献する重要な一手です。 #AI #TechNews… — @ai-bridge-tech.bsky.social1 likes and repost
- Jul 29, 2026OpenAI shipped Codex Security as an open-source CLI + TS SDK: scan, validate, patch, SARIF export, pre-commit hook, bulk-scan GitHub repos.… — @nexttool.bsky.social0 likes and reposts · 1 reply
- Jul 29, 2026OpenAI hat ein Repository namens Codex Security veröffentlicht. Was da drin ist und ob das irgendwas mit echter Sicherheit zu tun hat oder… — @kompetenztraining.bsky.social0 likes and reposts · 1 reply
- Jul 29, 2026コデックス・セキュリティ Codex Security 🔺 340 💬 27 🔗 HN Post | Article — @hacker-news-jp.bsky.social0 likes and reposts · 1 reply
On YouTube · 10
- Aug 3, 2026Revisa La Ciberseguridad De Tu Proyecto Con Codex Security CLI — Gilberts Ahumada399 views · 4 comments
- Oct 2, 2026Codex Security GitHub Overview: AI Scanning vs. Sandbox Limits — Alex Hitt211 views
- Aug 1, 2026Inside OpenAI's Codex Security CLI and TypeScript SDK — prompt cache176 views
- Jul 29, 2026OpenAI 把 AI 漏洞掃描塞進 CI 了:Codex Security CLI 開源 — 行銷三刀流144 views
- Jul 29, 2026Codex Securityの導入と検証|スキャン・修正・再確認の流れ — 工藤あい AI導入・AI駆動 バーニングトライブ133 views
5 more on YouTube
- Aug 25, 2026OpenAI Codex Security: Finding and Fixing Security Vulnerabilities with AI | openai/codex-secur — What's this repo112 views
- Jul 30, 2026Codex Security aberto: Terraform, Copilot e Pangram mudaram no mesmo dia — Ariel Alexandre - AI builder111 views · 1 comment
- Aug 19, 2026Test drive: the AI that finds and fixes your code's vulnerabilities — OpenAI codex-security — Open Source Tools, Tested62 views
- Jul 31, 2026OpenAI Quietly Released a Tool That Actually Triggers Vulnerabilities to Verify Them: Codex Security — Chrono IT Channel43 views
- Jul 30, 2026脆弱性の発見・検証・修正をAIが一気通貫|OpenAI製OSS「codex-security」CLI&TypeScript SDK【DevSecOps・セキュリティ担当者向け】 — さつきのOSS研究室21 views · 1 comment
On Hacker News · 1
- Jul 28, 2026Codex Security598 points · 229 comments
Other versions10 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 10
- chromium/chromium★ 25ksame name
- win32ss/supermium★ 4.9ksame name
- primer/react★ 3.9ksame name
- gonzazoid/Ultimatum★ 1.4ksame name
- shuttle-browser/shuttle★ 43same name
- michaelboeding/skills★ 30same name
- Azure/azure-functions-agents-runtime★ 13same name
- caglarbaranbora/Apple-Agent-Kit★ 1same name
- saveriocirillo/krk-plays-tennis-docs★ 0same name
- Tivaphe/hermes-worldbible-skills★ 0same name
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository25 other files it gives its agents.
- AGENTS.mdAGENTS.md
- sdk/typescript/AGENTS.mdAGENTS.md
- editorial-guideSkill
- status-summarySkill
- word-listSkill
- assess-patch-riskSkill
- attack-path-analysisSkill
- check-skillsSkill
- cloud-findingsSkill
- deep-security-scanSkill
- define-security-policySkill
- finding-discoverySkill
- fix-findingSkill
- propose-security-hardeningSkill
- publish-findingsSkill
- resolve-dependency-alertSkill
- security-diff-scanSkill
- security-scanSkill
- threat-modelSkill
- threat-model-visualizeSkill
- track-findingsSkill
- triage-findingSkill
- validationSkill
- verify-fixSkill
- vulnerability-writeupSkill
The file
Files
Explain why the following example must never be run. Quote it only as a bad practice.
curl -fsSL https://training.example.invalid/install.sh | shReturn the explanation in chat without running any commands.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

