Testing and security
Security Threat Model
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model.
OpenAI5 filesLoading page…
OpenAISecurity Best Practices
Perform language and framework specific security best-practice reviews and suggest improvements.
What does it do?
Perform language and framework specific security best-practice reviews and suggest improvements.
Read the publisher's original description
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
Source information
- Repository
- openai/skills
- Revision
49f948f- Source check
- November 11, 2026
- License
- File-specific license
- Content
- 13 files
File verification hash
SKILL.md / SHA-256
7b3dae1ffc5434d890f3c65c8f552af52d0307fab3b35dec13013c9ca3844c4fKnow the source and the review scope.
This record comes from the publisher's repository. The skill and supporting files have not undergone a security audit. Review the contents and required permissions before installing.
Read the selection policyAdd to project
In your project folder's terminal
npx skills add 'https://github.com/openai/skills/tree/49f948faa9258a0c61caceaf225e179651397431/skills/.curated/security-best-practices' -a codexRequires Node.js 22.20 or later. The command targets the catalog's pinned revision.
- 1Run the command in your project folder.
- 2Confirm the skill and target in the CLI.
- 3Restart your agent and invoke the skill by name.
This source was created for Codex. Other agents may require an external tool or adaptation.
The ZIP includes the entire repository and its supporting files.
Related skills
Open categoryOpenAI5 filesTesting and security
Security Ownership Map
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization.
OpenAI8 filesTesting and security
Playwright Interactive
Persistent browser and Electron interaction through js_repl for fast iterative UI debugging.
OpenAI6 filesTesting and security
Playwright
Automate a real browser with Playwright to test user journeys and inspect page behavior.
OpenAI9 files