security-check

Identify and review security boundaries in tasks involving auth, secrets, permissions, unsafe input, or shell execution.

2|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/RichardGeorgeDavis/Codex-Workspace --skill security-check-richardgeorgedavis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/RichardGeorgeDavis/Codex-Workspace/tree/main/tools/templates/skills/common/security-check
Command: npx skills add https://github.com/RichardGeorgeDavis/Codex-Workspace --skill security-check-richardgeorgedavis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify and review security boundaries when tasks touch auth, secrets, permissions, unsafe input, shell execution, or other obvious security-critical areas.

Core Features & Use Cases

  • Identify trust boundaries early in tasks involving credentials, access control, and untrusted input.
  • Outline concrete mitigations, checks, and follow-up verifications to reduce risk in code, deployments, and workflows.
  • Use it to perform targeted security reviews in development, CI/CD, and data handling scenarios.

Quick Start

Run a security-review pass on a task that touches authentication, secrets, or shell execution to surface risks and recommended mitigations.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security boundaries in code that handles authentication and secrets?▼

Security boundaries are identified by reviewing tasks that touch auth, secrets, permissions, unsafe input, or shell execution. This process surfaces risks early and highlights required mitigations and follow-up checks for credential handling.

What is a security review for untrusted input and shell execution?▼

A security review for untrusted input and shell execution is a targeted check of trust boundaries in code, deployments, and data workflows. It outlines concrete mitigations and verifications to reduce risk introduced by external inputs.

How do I perform a security risk review for CI/CD pipelines and data handling?▼

Perform a security risk review by analyzing deployment and data handling workflows for access control and credential exposure. The review requires explicit boundary identification, risk highlighting, and follow-up checks to ensure mitigations.

Can I use this security check for code involving permissions and unsafe input?▼

Yes, you can use this security check for code involving permissions and unsafe input. It applies to a broad range of development workflows where risk is introduced by external inputs or credential handling.

What's the best way to spot security gaps in code before deployment?▼

The best way to spot security gaps before deployment is running a security-review pass on tasks touching authentication, secrets, or shell execution. This surfaces risks and recommends concrete mitigations and follow-up verifications.