From codex-next
Reviews software security across auth, permissions, input validation, secrets, dependencies, CI/CD workflows, and config.
How this skill is triggered — by the user, by Claude, or both
Slash command
/codex-next:dev-security-reviewThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Use this workflow when reviewing software for security risk.
Use this workflow when reviewing software for security risk.
Scope the review.
Inspect high-risk surfaces.
Separate findings.
Provide evidence.
Recommend fixes.
Return:
npx claudepluginhub blueskyxn/codex-is-all-you-need --plugin codex-nextAudits code for security vulnerabilities including OWASP Top 10, auth flaws, injection, data exposure, and dependency risks using STRIDE threat modeling and phased reviews.
Scans codebases for OWASP Top 10 vulnerabilities via static analysis: secret exposure, injection flaws, auth/authz gaps, supply-chain risks, misconfigurations, logging failures. Use before deployments, PR merges, auth/payment changes.
Performs systematic security code review for vulnerabilities including injection, XSS, authentication, authorization, and cryptography issues. Reports only high-confidence exploitable findings after tracing data flow and checking framework protections.