security

Identify security vulnerabilities and generate JSON findings with CWE and OWASP references.

145|21|Updated Jan 2, 2026

Search Tags:#security #vulnerability #audit #codex #compliance #gates #minimax

Ready to run

npx skills add https://github.com/alfredolopez80/multi-agent-ralph-loop --skill security-alfredolopez80

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/alfredolopez80/multi-agent-ralph-loop/tree/main/.claude/skills/security
Command: npx skills add https://github.com/alfredolopez80/multi-agent-ralph-loop --skill security-alfredolopez80

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Streamline and strengthen codebase security by coordinating Codex-based primary analysis with MiniMax second opinions, delivering consistent, actionable remediation guidance.

Core Features & Use Cases

Codex-driven security audit: CWE and OWASP coverage with structured JSON findings.
MiniMax second opinion: independent validation to catch edge cases and reduce false positives.
Quality-gates integration: feeds results into Ralph gates for policy-driven merge checks.
Structured reporting: includes severity, CWE references, OWASP mappings, code snippets, and remediation steps.

Quick Start

Invoke /security on your project to run a Codex-driven audit with a MiniMax second opinion and generate a structured JSON report.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is an automated multi-agent security audit?▼

An automated multi-agent security audit uses Codex GPT-5 for primary vulnerability analysis and MiniMax for cross-validation, identifying security flaws in authentication, cryptography, and input handling to reduce false positives.

How do I get structured JSON findings for CWE and OWASP vulnerabilities?▼

You get structured JSON findings by invoking an automated security audit that outputs severity levels, CWE references, OWASP categories, code snippets, and remediation steps, which is suitable for direct integration with quality gates.

Can I use security audit results to enforce merge checks in my CI pipeline?▼

Yes, the security audit generates a structured JSON report with severity and CWE references designed for integration with Ralph gates, enabling policy-driven merge checks to block vulnerable code from deployment.

Does multi-agent cross-validation help reduce false positives in codebase security audits?▼

Multi-agent cross-validation reduces false positives by using MiniMax to provide an independent second opinion on Codex GPT-5 primary analysis, ensuring edge cases in authorization and deployment configurations are caught.

What code paths are covered by a Codex-driven vulnerability audit?▼

A Codex-driven vulnerability audit covers code paths related to authentication, authorization, input handling, cryptography, and deployment configurations to identify and report security vulnerabilities comprehensively.