security-diff-scan
Skill7.8k starsChanged 6 months agoNo licenceView on GitHub
Review a pull request, commit, branch diff, or working-tree patch for security vulnerabilities.
2 other projects use a version of this, 1 of them edited.
Trending
Quiet since September.about the whole repository
Most recently taken up by
- kenhuangus/defense-factory-skillstheir own version, first seen Oct 25, 2026
- openai/codex-securityedited, first seen Oct 13, 2026
Who's talking about openai/plugins
- openai/codex“open source codex-security plugin”GitHub · Jun 24, 2026 · 6 reactions
- openai/codex“[bug] GitHub publish skill requires gh even when connector path is available”GitHub · Jul 29, 2026 · 3 reactions
- openai/codex“Increase MAX_NAME_LEN from 64 to 128 for plugin-namespaced skill names”GitHub · May 27, 2026 · 3 reactions
- openai/codex“GitHub plugin connector shows unrelated installed accounts and a private repo after reinstall”GitHub · May 26, 2026 · 3 reactions
- openai/codex“ClickUp connector exposes clickup_create_task_comment but backend returns "Tool ... not found"”GitHub · Jul 13, 2026 · 2 reactions
The biggest 5 of 18 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 18
Talked about on GitHub, Bluesky and Hacker News (18 times).
On GitHub · 12
- Jun 24, 2026open source codex-security plugin — openai/codex6 reactions · 2 comments
- Jul 29, 2026[bug] GitHub publish skill requires gh even when connector path is available — openai/codex3 reactions · 1 comment
- May 27, 2026Increase MAX_NAME_LEN from 64 to 128 for plugin-namespaced skill names — openai/codex3 reactions · 2 comments
- May 26, 2026GitHub plugin connector shows unrelated installed accounts and a private repo after reinstall — openai/codex3 reactions · 4 comments
- Jul 13, 2026ClickUp connector exposes clickup_create_task_comment but backend returns "Tool ... not found" — openai/codex2 reactions · 1 comment
7 more on GitHub
- Sep 25, 2026SEO: add a verified list of Codex skills to install on /codex-skills — TommyBez/skillsboard1 reaction · 3 comments
- Aug 4, 2026docs: add openai, agentskills, and aihero skill references — Viperwow/strict-ai1 reaction · 2 comments
- Jul 9, 2026[Outlook Email Connector] Shared-mailbox attachments target the signed-in mailbox and fail with ErrorInvalidMailboxItemId — openai/codex1 reaction
- Jul 8, 2026feat: add rstack Codex plugin — rstackjs/agent-skills1 reaction · 1 comment
- Jun 19, 2026Remove bundled imagegen system skill — openai/codex1 reaction
- Jun 18, 2026Shorten NGS plugin default prompt — daniel-graham/plugins1 reaction
- Jun 4, 2026Pull plugin service less frequently — openai/codex1 reaction · 4 comments
On Bluesky · 5
- Jun 10, 2026🚀 Skyrocketing! 🚀 (200+ new stars) 📦 openai / plugins ⭐ 2,515 (+284) 🗒 JavaScript OpenAI Plugins — @github-trending-js.bsky.social2 likes and reposts · 1 reply
- Jul 11, 2026🔥 Hot Repo! 🔥 (100+ new stars) 📦 openai / plugins ⭐ 4,276 (+119) 🗒 JavaScript OpenAI Plugins — @github-trending-js.bsky.social1 likes and repost
- May 6, 2026🚀 GitHub Intelligence Drop plugins (Python • 🟢) ⭐ 1K → https://github.com/openai/plugins SageFs (F# • 🟢) ⭐ 64 →… — @githubfeed.bsky.social1 likes and repost
- Mar 27, 2026GitHub - openai/plugins: OpenAI Plugins https://github.com/openai/plugins — @tech-trending.bsky.social1 likes and repost
- Jun 9, 2026🚀 Skyrocketing! 🚀 (200+ new stars) 📦 openai / plugins ⭐ 2,472 (+284) 🗒 JavaScript OpenAI Plugins — @github-trending.bsky.social0 likes and reposts · 1 reply
On Hacker News · 1
- Mar 16, 2026OpenAI Codex Game Studio Plugin1 point
Other versions2 projects use a version of this.
Word for word · 0
None found.
Edited · 1
- openai/codex-security★ 11k28% same
Wrote their own version · 1
- kenhuangus/defense-factory-skills★ 2same name
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository542 other files it gives its agents.
- plugins/build-web-apps/skills/react-best-practices/AGENTS.mdAGENTS.md
- plugins/build-web-apps/skills/supabase-best-practices/AGENTS.mdAGENTS.md
- plugins/data-analytics/AGENTS.mdAGENTS.md
- plugins/product-design/templates/mobile-app/AGENTS.mdAGENTS.md
- plugins/product-design/templates/prototype/AGENTS.mdAGENTS.md
- plugins/vercel/skills/react-best-practices/AGENTS.mdAGENTS.md
- plugins/zoom/AGENTS.mdAGENTS.md
- plugin-creatorSkill
- adobe-batch-edit-photosSkill
- adobe-create-mockupsSkill
- adobe-create-social-variationsSkill
- adobe-design-from-templateSkill
- adobe-edit-quick-cutSkill
- adobe-retouch-portraitsSkill
- airtable-cliSkill
- airtable-filtersSkill
- airtable-overviewSkill
- boltz-check-statusSkill
- boltz-cli-setupSkill
- boltz-protein-designSkill
- boltz-protein-screenSkill
- boltz-small-molecule-admeSkill
- boltz-small-molecule-designSkill
- boltz-small-molecule-screenSkill
- boltz-structure-and-bindingSkill
- ios-app-intentsSkill
- ios-debugger-agentSkill
- ios-ettrace-performanceSkill
- ios-memgraph-leaksSkill
- ios-simulator-browserSkill
- swiftui-liquid-glassSkill
- swiftui-performance-auditSkill
- swiftui-ui-patternsSkill
- swiftui-view-refactorSkill
- appkit-interopSkill
- build-run-debugSkill
- liquid-glassSkill
- packaging-notarizationSkill
- signing-entitlementsSkill
- swiftpm-macosSkill
- swiftui-patternsSkill
- telemetrySkill
- test-triageSkill
- view-refactorSkill
- window-managementSkill
- frontend-app-builderSkill
- frontend-testing-debuggingSkill
- react-best-practicesSkill
- shadcnSkill
- stripe-best-practicesSkill
- supabase-postgres-best-practicesSkill
- accessibility-and-inclusive-visualizationSkill
- canvas2d-data-visualizationSkill
- d3-data-visualizationSkill
- dashboards-and-real-time-visualizationSkill
- data-visualizationSkill
- gantt-chart-visualizationSkill
- geospatial-and-cartographic-visualizationSkill
- grammar-of-graphics-and-declarative-visualizationSkill
- node-link-and-diagram-layoutSkill
- The first 60 shown.
The file
We split this skill into the rules it gives an agent
3 rules. About 0 are common, 0 are distinctive, and 3 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈0
Distinctive · estimate
This author's own choices. Worth a look.
3
Very specific
Tied to their project's names, files or tools. Probably skip.
No licence file, so all rights are reserved — read it at the source. We count its rules but don't quote them. Read them on GitHub.
≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

