codex-security-review

Automate security code review by running static analysis on your working-tree or branch to identify OWASP Top 10 vulnerabilities and hardcoded secrets. This Skill generates detailed reports with severity levels and suggested fixes, ensuring critical flaws like SQL injection are caught before merging.

Static analysis detects OWASP Top 10 vulnerabilities by scanning code patterns for injection flaws, broken access control, secrets exposure, and misconfigurations. It uses CWE patterns to identify these security risks proactively, providing automated assessments of potential exploitation points.

The best way to scan a full codebase for hardcoded secrets and misconfigurations is using automated static analysis with configurable review scopes. You can target the working-tree, specific branch, or entire codebase to identify security vulnerabilities based on CWE patterns.

Run a security vulnerability scan on a specific git branch by configuring the review scope to target that branch. The static analysis uses configurable effort levels to evaluate code for injection flaws, broken access control, and secrets exposure, integrating with the OpenAI Codex CLI for deterministic execution.

This static analysis tool requires no external dependencies to run. It operates independently using scripts and references components to conduct automated security reviews and generate detailed vulnerability reports based on OWASP Top 10 and CWE patterns.

Automated security reports include findings categorized by severity levels and provide suggested fixes for detected vulnerabilities. The reports cover security flaws identified through OWASP Top 10 and CWE pattern matching, offering detailed insights for addressing injection flaws, broken access control, and secrets exposure.