In brief
Transforms vulnerability notes, disclosure reports, proof of concept, source code, or Codex Security findings into autonomous vulnerability reports, written in a natural style, and validated with scepticism. It is used for a vulnerability or a disclosure campaign; Codex Security scan is optional.
What it does
- Writes an autonomous report, based on notes, PoC or observations
- Validates the statement with skepticism; Codex scan is not mandatory
Who it is for, and an example
Persons who must produce a clear disclosure writing, based on notes, a PoC or findings, for a vulnerability or campaign.
Example request: "From these notes and this PoC, write an autonomous vulnerability report, validated with skepticism. »
The skill is justified in transforming notes, disclosure reports, PoCs, code or Codex Security findings into stand-alone reports for a vulnerability or disclosure campaign. Example written by iadujour.fr from the SKILL.md, not tested.
Install
In Codex: codex plugin add codex-security@openai-curated (Official Place of Deposit).
codex plugin add codex-security@openai-curatedWorks with
- Codex
Source: README: Codex plugin collection; the deposit marketplace is called "Official Codex". Other officers are not appointed.
Level: Advanced
Address for advanced use (security, production, architecture or fine settings) described in SKILL.md.
Good to know
SKILL.md excerpt
The original description, which the agent reads to decide whether to load the skill (in English):
Turn vulnerability notes, disclosure reports, PoCs, source code, or Codex Security findings into self-contained, sceptically validated, natural-sounding vulnerability reports. Use for one vulnerability or a disclosure campaign; a Codex Security scan is optional.
Quoted from SKILL.md at commit 0722921 . The folder also contains 2 extra files (agents/, references/).
The SKILL.md has 179 lines and 9 main sections:
- Purpose
- Non-negotiable rules
- Actors, language and release references
- Trace affected release history
- Evidence-first intake
- Campaign workflow
- Single-finding drafting prompt
- Source and exploitability standard
- Report acceptance
Licence: No licence found
Checked on 10 November 2026 : no licence file in the skill folder or at the repository root.
No licence found: short excerpt quoted only (quotation right). For the full text, see the source.
Comments.
A field note, a question, a precision on this skill? Comments are reviewed before publication.
Published comments
Loading comments…
Leave a comment
Moderation charter. Every comment is reviewed before publication. We refuse hate speech, insulting or discriminatory language, advertising, spam and promotional links, off-topic posts and other people’s personal data.