Code Security Skills v1.0.1

Patch release clarifying that the standalone code-security canonical artifact contract is independent rather than upstream-derived at runtime.

Also updates marketplace and plugin versions to 1.0.1.

Code Security Skills v1.0.0

Code Security Skills is now a provider-neutral collection of 13 evidence-driven code-security workflows, packaged as a Claude Code marketplace plugin.

Breaking changes

• Marketplace identifier: code-security
• Plugin and slash-command namespace: code-security-skills
• Install command: claude plugin install code-security-skills@code-security
• Artifact, schema, fingerprint, snapshot-digest, and SARIF identities now use code-security terminology.

Highlights

• Standalone deterministic report and SARIF finalization
• Provider-neutral workflow procedures with source-host orchestration removed
• All 13 workflows retained in one self-contained plugin
• Explicit Apache-2.0 provenance and modification notices for the OpenAI Codex Security derivative work

See CHANGELOG.md for the full migration notes.

v0.1.1 - Marketplace rename

Renames the marketplace to the clearer, maintainer-neutral ID codex-security-for-claude.

Install

/plugin marketplace add barvhaim/codex-security-claude-marketplace
/plugin install codex-security-skills@codex-security-for-claude
/reload-plugins

Changes

• Marketplace ID is now codex-security-for-claude.
• Public installation and local-development instructions use the new ID.
• Marketplace and plugin maintainer metadata now points to barvhaim.
• Marketplace and plugin versions are now 0.1.1.

Existing users should remove the previous marketplace entry and add the repository again before installing this version.

v0.1.0 - Initial public release

First public release of the unofficial Claude Code adaptation of OpenAI's open-source Codex Security skills.

Included

• All thirteen security skills in one Claude Code plugin.
• Claude-native repository, deep, and diff scan workflows.
• Threat modeling, finding discovery and validation, attack-path analysis, remediation, triage, tracking, and policy workflows.
• Canonical JSON artifacts, deterministic Markdown reporting, and SARIF export.
• Public marketplace installation, loader validation, portability checks, and CI.

Install

/plugin marketplace add barvhaim/codex-security-claude-marketplace
/plugin install codex-security-skills@njs-security-skills
/reload-plugins

Important boundary

This is an unofficial Apache-2.0 adaptation. It does not install the Codex Security product, SDK, authentication, desktop application, or MCP coordinator. Review model-generated findings before consequential use.