security-check

Identify and review security boundaries in tasks involving auth, secrets, permissions, unsafe input, or shell execution.

2|Updated Mar 17, 2026

Search Tags:#security #permissions #secrets #input-validation #code-review #auth #risk-review

Ready to run

npx skills add https://github.com/RichardGeorgeDavis/Codex-Workspace --skill security-check-richardgeorgedavis

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/RichardGeorgeDavis/Codex-Workspace/tree/main/tools/templates/skills/common/security-check
Command: npx skills add https://github.com/RichardGeorgeDavis/Codex-Workspace --skill security-check-richardgeorgedavis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify and review security boundaries when tasks touch auth, secrets, permissions, unsafe input, shell execution, or other obvious security-critical areas.

Core Features & Use Cases

Identify trust boundaries early in tasks involving credentials, access control, and untrusted input.
Outline concrete mitigations, checks, and follow-up verifications to reduce risk in code, deployments, and workflows.
Use it to perform targeted security reviews in development, CI/CD, and data handling scenarios.

Quick Start

Run a security-review pass on a task that touches authentication, secrets, or shell execution to surface risks and recommended mitigations.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security boundaries in code that handles authentication and secrets?▼

Security boundaries are identified by reviewing tasks that touch auth, secrets, permissions, unsafe input, or shell execution. This process surfaces risks early and highlights required mitigations and follow-up checks for credential handling.

What is a security review for untrusted input and shell execution?▼

A security review for untrusted input and shell execution is a targeted check of trust boundaries in code, deployments, and data workflows. It outlines concrete mitigations and verifications to reduce risk introduced by external inputs.

How do I perform a security risk review for CI/CD pipelines and data handling?▼

Perform a security risk review by analyzing deployment and data handling workflows for access control and credential exposure. The review requires explicit boundary identification, risk highlighting, and follow-up checks to ensure mitigations.

Can I use this security check for code involving permissions and unsafe input?▼

Yes, you can use this security check for code involving permissions and unsafe input. It applies to a broad range of development workflows where risk is introduced by external inputs or credential handling.

What's the best way to spot security gaps in code before deployment?▼

The best way to spot security gaps before deployment is running a security-review pass on tasks touching authentication, secrets, or shell execution. This surfaces risks and recommends concrete mitigations and follow-up verifications.