deep-security-scan
97 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan. Run repeated independent discovery passes over one resolved scope with worker-specific threat models, semantically merge candidates, synthesize one canonical validation threat model, then run validation, attack-path analysis, canonical JSON completion, and generated reporting once. Do not use for PRs, commits, branch diffs, or working-tree diffs.
What this skill can do
Runs commands on your computer
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'deep-security-scan' ] || [ -L ~/.agents/skills/'deep-security-scan' ]; then echo 'A skill folder named deep-security-scan already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/zhongjingyun/codex-plugins' "$d" && git -C "$d" checkout --quiet '67f0a2a774e0e57d841a7f3372c48e257f64c481' -- 'plugins/codex-security/skills/deep-security-scan' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/codex-security/skills/deep-security-scan' ~/.agents/skills/'deep-security-scan' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'deep-security-scan' ~/.claude/skills/'deep-security-scan' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/zhongjingyun/codex-plugins/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-07 | 67f0a2a | 97 |