Agent Native

propose-security-hardening

This skill analyzes security evidence from vulnerability disclosures, Codex Security scans, incident reports, or source code to develop evidence-backed…

by OpenAIOfficial publisherNot reviewed

Identity proven by GitHub's verified organisation badge (openai)

Agents
Codex
License
No license stated
Pin
0722921pinned Oct 9, 2026
Context cost
about 5,500 tokenswhen the skill loads
GitHub stars
7,355on openai/plugins
Scripts
None found

What it does

“Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment documents, source code, or a completed Codex Security scan. Use when a user asks for systemic improvements, alternatives beyond per-finding patches, before-and-after security architecture views, engineering tradeoff analysis, or an implementation-ready plan for a selected hardening option. Also use automatically after a Codex Security scan with reportable findings when the top-level scan workflow requests final-report hardening guidance.”
The author's description, from SKILL.md

Generated summary from the skill's own text

This skill analyzes security evidence from vulnerability disclosures, Codex Security scans, incident reports, or source code to develop evidence-backed architectural hardening proposals with multiple options, tradeoffs, and implementation plans. It clusters findings by root causes and trust boundaries rather than severity, then produces a decision-ready portfolio with diagrams and before-and-after comparisons for review by security engineers.

When to use it

  • User requests systemic improvements beyond per-finding patches
  • After Codex Security scan with findings needing architectural guidance
  • Analyzing vulnerability disclosures for structural design alternatives
  • Planning implementation-ready hardening options with engineering tradeoffs

When not to

  • Individual findings require only tactical local remediation
  • User asks for simple patching without architectural review
  • No security findings or evidence documents are available

Install

No license stated: install from the publisher's repository, and ask the author before you reuse or share it.

These commands install from the publisher's repository and need no account.

skills CLI

npx skills add openai/plugins --skill propose-security-hardening

Installs from the repository's default branch, which may have changed since the commit we checked.

GitHub CLI 2.90 or later

gh skill install openai/plugins propose-security-hardening@0722921d5542fc593105c27bd52630babd8b8c2a

Installs the commit we checked (0722921).

Copy by hand

Download the folder at 0722921 and put it in .claude/skills/propose-security-hardening for Claude Code and in .agents/skills/propose-security-hardening for Codex, Cursor, Gemini CLI, GitHub Copilot and OpenCode.

Skill folder on GitHub at 0722921

Copy for your agent

A prompt for any coding agent. It installs this skill from GitHub at the pinned commit, copies the files as they are, and runs nothing unless you ask.

Prompt

Install the agent skill "propose-security-hardening" by OpenAI.

Source, pinned to commit 0722921d5542fc593105c27bd52630babd8b8c2a:
https://github.com/openai/plugins/tree/0722921d5542fc593105c27bd52630babd8b8c2a/plugins/codex-security/skills/propose-security-hardening

1. Download that folder at exactly this commit. Do not use the default branch.
2. Copy every file unchanged, keeping the folder structure, into .claude/skills/propose-security-hardening/ for Claude Code and .agents/skills/propose-security-hardening/ for Codex, Cursor, Gemini CLI, GitHub Copilot and OpenCode. Create the folders if they do not exist.
3. Do not edit the files, and do not run any script in the folder unless I ask you to.
4. When you are done, list the files you copied and where you put them.

Its license is restricted or not stated. Show me the license terms from the repository before you copy anything.

Listing and checks: https://www.agentnative.dev/skills/openai/propose-security-hardening

SKILL.md at the pin

The license of this skill does not let us show its files here.

View SKILL.md on GitHub at 0722921

Files

3 files, 49 KB in total. Each file has a sha256 in the pin's manifest; the first 12 characters are shown.

Skill folder on GitHub at 0722921
All 50 skills from OpenAI

More from OpenAI

  • code-change-verification

    Runs formatting, linting, type checking, and test verification for SDK code changes after review.

    Contains scripts

    Codex · about 1.3K tokens · pinned 6 days ago

  • docs-sync

    This skill audits English SDK documentation by comparing features and configuration options in the codebase against the current docs, then proposes or…

    Claude Code, Codex, Cursor +4 · about 1.2K tokens · pinned 6 days ago

  • examples-run-analysis

    Analyzes logs and artifacts from manual examples runs to validate example behaviors, identify failures, and classify issues.

    Claude Code, Codex, Cursor +4 · about 1K tokens · pinned 6 days ago

  • final-release-review

    Audits Python SDK release candidates or plans against the previous release, comparing diffs for regressions, API changes, and version compatibility.

    Contains scripts

    Claude Code, Codex, Cursor +3 · about 5.4K tokens · pinned 6 days ago

  • implementation-final-review

    This skill guides agents through a structured review process for completed implementation changes before final verification.

    Contains scripts

    Claude Code, Codex, Cursor +3 · about 1.9K tokens · pinned 6 days ago

  • implementation-kickoff

    This skill manages an isolated implementation workflow using a dedicated git worktree, keeping the user's original checkout unchanged while building a…

    Contains scripts

    Codex · about 2.9K tokens · pinned 6 days ago

All Security skills

Related in Security

  • claude-security

    Scans your repository for security issues using Claude, examines code changes or commits for vulnerabilities, and generates patch files to fix findings.

    by AnthropicOfficial publisher

    Claude Code · about 1K tokens · pinned 6 days ago

  • sensitive-logging-audit

    The skill helps audit and fix sensitive data leaks in Python SDK logging, exceptions, and telemetry by collecting candidate sinks, manually tracing values…

    by OpenAIOfficial publisher

    Contains scripts

    Claude Code, Codex, Cursor +3 · about 970 tokens · pinned 6 days ago

  • security-audit

    This skill guides security audits of codebases, APIs, and services by finding vulnerabilities that cross real trust boundaries.

    by CloudflareOfficial publisher

    Contains scripts

    Claude Code · about 5.4K tokens · pinned 6 days ago

  • assess-patch-risk

    This skill analyzes patch artifacts to assess their program impact, regression risk, and suitability for automated merging.

    by OpenAIOfficial publisher

    Codex · about 2.3K tokens · pinned 6 days ago

  • attack-path-analysis

    This skill analyzes security findings to build explicit attack paths from source to sink, calibrates severity, and decides whether each finding is reportable.

    by OpenAIOfficial publisher

    Codex · about 2.1K tokens · pinned 6 days ago

  • deep-security-scan

    Performs exhaustive, multi-pass security analysis across a repository or scoped directory by running repeated independent security scans and aggregating…

    by OpenAIOfficial publisher

    Codex · about 3.4K tokens · pinned 6 days ago

Open roles at OpenAI

5 of 242 open roles on the jobs board

See all 242 roles at OpenAI on the jobs board

The skills listed here are third-party software, collected from public GitHub repositories as a catalog of recent skills and provided as is. Agent Native does not write or control them and is not responsible for any harm, loss or damage caused by installing or using them. Labels and checks describe what we saw at one commit and are not a guarantee. Read a skill's files before you run it. Terms of use