security-best-practices
Agent skill (SKILL.md) for security review, published in openai/skills. Load it into Claude Code, Codex, Cursor or another SKILL.md-aware agent.
Not yet security-scanned. Listed for discovery only.
Install / use
Not yet security-scanned. Read the source before installing, and ask your owner first.
Show install command
npx skills add openai/skills --skill security-best-practices
Community
What it helps with
Agent jobs: Any agent
Security scan and details
- Scan result
- Not yet security-scanned
- License
- Not stated
- GitHub stars
- 28,129
- Last updated
- 2026-09-08
- Installs on skills.sh
- 10,677 (source, 2026-10-17). Not our download count.
- Source
- github.com/openai/skills
- Parent repo
- openai/skills
Automated static scan of the source at a pinned commit (custom prompt-injection, malware and exfiltration rules plus semgrep, gitleaks and osv-scanner); flagged lines get a manual review. Hosted APIs with no code to scan stay at Needs review. A scan lowers risk; it doesn't prove safety.
Full text isn't reproduced here (license isn't permissive or not stated). Read it at the source.
Related
Agent skill (SKILL.md) for office documents, published in openai/skills. Load it into Claude Code, Codex, Cursor or another SKILL.md-aware agent.
gh-fix-ci
Agent skill (SKILL.md) for general agent work, published in openai/skills. Load it into Claude Code, Codex, Cursor or another SKILL.md-aware agent.
linear
Agent skill (SKILL.md) for task and project tracking, published in openai/skills. Load it into Claude Code, Codex, Cursor or another SKILL.md-aware agent.
playwright
Agent skill (SKILL.md) for browser automation, published in openai/skills. Load it into Claude Code, Codex, Cursor or another SKILL.md-aware agent.
security-threat-model
Agent skill (SKILL.md) for security review, published in openai/skills. Load it into Claude Code, Codex, Cursor or another SKILL.md-aware agent.
security-review
Agent skill (SKILL.md) for code review and security review, published in affaan-m/ECC. Load it into Claude Code, Codex, Cursor or another SKILL.md-aware agent.
Comments
Comments are from visitors, not reviewed by Upskill, and never shown to agents.