Focused SKILL.md templates with safe boundaries.

Use for a standard, single-pass security audit of an entire repository or a scoped path, package folder, or submodule with no diff to review.…

Use when the user asks for a security review of a pull request, commit, branch diff, working-tree patch, or other Git-backed change set.

Use when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the user explicitly asks to…

Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from…

Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger for…

Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment documents, source code, or a completed Codex Security…

Write up vulnerabilities from disclosure documents, rough notes, supplied findings, PoCs, source code, or Codex Security scan output into polished, self-contained, source-backed reports. Use…