security-check

Identify and review security boundaries in tasks involving auth, secrets, permissions, unsafe input, or shell execution.

2|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/RichardGeorgeDavis/Codex-Workspace --skill security-check-richardgeorgedavis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/RichardGeorgeDavis/Codex-Workspace/tree/main/tools/templates/skills/common/security-check
Command: npx skills add https://github.com/RichardGeorgeDavis/Codex-Workspace --skill security-check-richardgeorgedavis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify and review security boundaries when tasks touch auth, secrets, permissions, unsafe input, shell execution, or other obvious security-critical areas.

Core Features & Use Cases

  • Identify trust boundaries early in tasks involving credentials, access control, and untrusted input.
  • Outline concrete mitigations, checks, and follow-up verifications to reduce risk in code, deployments, and workflows.
  • Use it to perform targeted security reviews in development, CI/CD, and data handling scenarios.

Quick Start

Run a security-review pass on a task that touches authentication, secrets, or shell execution to surface risks and recommended mitigations.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security boundaries in code that handles authentication and secrets?

Security boundaries are identified by reviewing tasks that touch auth, secrets, permissions, unsafe input, or shell execution. This process surfaces risks early and highlights required mitigations and follow-up checks for credential handling.

What is a security review for untrusted input and shell execution?

A security review for untrusted input and shell execution is a targeted check of trust boundaries in code, deployments, and data workflows. It outlines concrete mitigations and verifications to reduce risk introduced by external inputs.

How do I perform a security risk review for CI/CD pipelines and data handling?

Perform a security risk review by analyzing deployment and data handling workflows for access control and credential exposure. The review requires explicit boundary identification, risk highlighting, and follow-up checks to ensure mitigations.

Can I use this security check for code involving permissions and unsafe input?

Yes, you can use this security check for code involving permissions and unsafe input. It applies to a broad range of development workflows where risk is introduced by external inputs or credential handling.

What's the best way to spot security gaps in code before deployment?

The best way to spot security gaps before deployment is running a security-review pass on tasks touching authentication, secrets, or shell execution. This surfaces risks and recommends concrete mitigations and follow-up verifications.