deep-security-scan Skill
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan. Run repeated complete independent Standard scans with the Codex Security deep-scan tool, which aggregates their validated findings and prepares the canonical artifacts; then complete the s Published by openai in plugins.
Decision snapshot
Is this a fit?
Security review, Includes SKILL.md, Reusable instructions
Compatibility not yet detected.
Permission behavior not yet detected.
Copy skill directory
22 days ago
No specific cautions were detected. Review the source and requested permissions before installing.
What is deep-security-scan Skill?
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan. Run repeated complete independent Standard scans with the Codex Security deep-scan tool, which aggregates their validated findings and prepares the canonical artifacts; then complete the s Published by openai in plugins. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Security review use cases
Declared skill metadata
- Source file: plugins/codex-security/skills/deep-security-scan/SKILL.md
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
When to use deep-security-scan Skill
- Use it for security review.
Built with
Editorial notes
Source
- Creator: openai
- Repository: openai/plugins
- Skill file: plugins/codex-security/skills/deep-security-scan/SKILL.md
What it does
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan. Run repeated complete independent Standard scans with the Codex Security deep-scan tool, which aggregates their validated findings and prepares the canonical artifacts; then complete the s
Skill instructions
Deep Security Scan Use startcodexsecuritydeepscan to run repeated independent workers against the exact requested target and scope. Each worker reads ../../references/core-scan.md directly and completes the ordinary Standard audit, saving checkpoints as results arrive and a final scan draft when the audit finishes. The coordinator combines the finished findings and writes the parent scan's unsealed scan-manifest.json, findings.json, and coverage.json before returning { manifestPath }. The final report identifies the configured directories and exclusions alongside the findings. Phase Ownership The coordinator owns the independent complete Standard scans, aggregation, and canonical parent artifact construction. This thread owns setup, user context, and exactly one final completecodexsecurityscan call. Do not rerun worker phases, list candidates, aggregate findings, submit another semantic draft, or start another scan. The returned manifestPath identifies the already-authored canonical pa
Verified compatibility and discovery
Frequently asked questions
What is deep-security-scan?
deep-security-scan is a open-source AI agent skill with Copy skill directory. Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide or scoped-path Codex Security scan.
Who is deep-security-scan best for?
deep-security-scan is best for reusing agent instructions, scripts, and references, security review workflows.
How do I install deep-security-scan?
Install or run deep-security-scan using Copy skill directory. Check deep-security-scan for the latest setup command.
Is deep-security-scan actively maintained?
deep-security-scan may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
