Home / Skills / propose-security-hardening

propose-security-hardening From the maker

Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment documents, source code, or a completed Codex Security scan. Use when a user asks for systemic improvements, alternatives beyond per-finding patches, before-and-after security architecture views, engineering tradeoff analysis, or an implementation-ready plan for a selected hardening option. Also use automatically after a Codex Security scan with reportable findings when the top-level scan workflow requests final-report hardening guidance.

ScannedSkillSource: GitHub

11,139 stars +65 this week Updated 16d ago License Apache-2.0 Context ≈156 tokens always loaded

80popular

Why this score

Stars

21/35

Usage (forks)

9/15

Upkeep

25/25

License

15/15

Owner history

10/10

This repo hosts 10 skills, so its 11,139 stars are split between them (about 1,114 each) for scoring.

Popularity score: 80/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit 29ec9114367f, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

Name	Score	Stars	Context	Updated
This onepropose-security-hardening openai/codex-security · Skill	80	★ 11k	≈156 always	16d ago
agent-security-hardening affaan-m/ECC · Skill Both about hardening and security	96	★ 284k	≈100 always	16d ago
openspec-propose monid-ai/monid · Skill Same job: proposals & decks	76	★ 5.3k	≈58 always	19d ago
ai-mcp-security Netw0rkNoob/VulnClaw · Skill Both about security	71	★ 3.8k	≈20 always	23d ago
09-web-security Masriyan/Claude-Code-CyberSecurity-Skill · Skill Both about security and top	66	★ 490	≈21 always	19d ago
roblox-security TabooHarmony/roblox-brain · Skill Both about hardening and security	59	★ 114	≈34 always	20d ago

Install

mkdir -p .claude/skills/propose-security-hardening

curl -sL https://codeload.github.com/openai/codex-security/tar.gz/29ec9114367f428b089aa0798a61993c7027425f | tar -xz -C .claude/skills/propose-security-hardening --strip-components=5 "codex-security-29ec9114367f428b089aa0798a61993c7027425f/plugins/codex-security/skills/propose-security-hardening"

To remove it later:

rm -rf .claude/skills/propose-security-hardening

npx skills add openai/codex-security --skill propose-security-hardening

Pinned to commit 29ec9114367f as listed by GitHub.

Context cost: ≈156 tokens loaded every session (name and description), plus ≈5.7k tokens when the skill is used.

The Claude Code command downloads this skill folder at the pinned commit into .claude/skills/. The Skills CLI (npx skills) works with many agents but can't pin a version, so it installs whatever is current.

Used for

Security › Security review Sales › Proposals & decks

Facts

Repo: openai/codex-security
Stars: 11,139
Forks: 978
Last push: 2026-10-19 (16d ago)
License: Apache-2.0
Owner: openai · since 2015
Language: TypeScript
Works with: Claude Code, Skills CLI