Skip to content

codex-security-claude-skills-v0.1.0

Latest
Latest

Choose a tag to compare

View all tags
@kall kall released this 02 Aug 07:01
v0.1.0
fb8e523

codex-security-claude-skills v0.1.0

(한국어 버전은 아래로 스크롤 / Korean version below)

First release of 6 Claude Code skills that run the codex-security security scan
workflow using only a Claude Code subscription login — no OpenAI/Codex authentication.

Quick install: paste this into a Claude Code session:

Install https://github.com/kall/codex-security-claude-skills/releases/tag/v0.1.0

It will run the curl/sha256sum/tar/install.sh steps below on its own.

6 skills

  • codex-security-scan — One-shot full-repo standard scan → sealed contract artifacts + report.md + SARIF
  • codex-security-diff-scan — Scans only a diff (refs or working-tree)
  • codex-security-validate — Judges a candidate finding's disposition
  • codex-security-patch — Minimal fix for a security issue (two-stage approval)
  • codex-security-scan-match — Matches findings with the same root cause across two completed scans
  • codex-security-deep-scan — Reduced multi-pass deep scan (deep-lite — not equivalent to the official deep scan)

Verified combination

  • Bundled plugin: @openai/codex-security@0.1.3 (plugin manifest 0.1.14)
  • Python 3.10+ / git / Node 22+ (only for the plugin's npm install)
  • Linux · macOS (Windows via WSL)

Good to know

  • Working-tree gate handling differs between plugin copies even at the same manifest
    version (hard failure vs. warning). --check tells you which one you have. See
    manual §3.4
    for details.
  • The plugin is never installed automatically. If it's missing, you'll see a prompt
    for npm install -g @openai/codex-security.
  • This is a non-Codex execution path and is not supported by upstream OpenAI.

Install

BASE=https://github.com/kall/codex-security-claude-skills/releases/download/v0.1.0
PKG=codex-security-claude-skills-v0.1.0

curl -fsSLO "$BASE/$PKG.tar.gz"
curl -fsSL  "$BASE/SHA256SUMS" | sha256sum -c -
tar xzf "$PKG.tar.gz"
bash "$PKG/skills/install.sh" --copy --check

한국어

(English version above)

OpenAI/Codex 인증 없이 Claude Code 구독 로그인만으로 codex-security 보안 스캔
워크플로를 실행하는 Claude Code 스킬 6종의 첫 릴리즈다.

빠른 설치: Claude Code 세션에 이 문구를 그대로 복사/붙여넣기:

https://github.com/kall/codex-security-claude-skills/releases/tag/v0.1.0 이거 설치해줘

아래 curl/sha256sum/tar/install.sh 과정을 알아서 실행한다.

스킬 6종

  • codex-security-scan — 저장소 전체 1회 표준 스캔 → 봉인 계약 산출물 + report.md + SARIF
  • codex-security-diff-scan — 변경분(refs 또는 working-tree)만 스캔
  • codex-security-validate — 후보 finding 진위 판정(disposition)
  • codex-security-patch — 보안 이슈 최소 수정(2단 승인)
  • codex-security-scan-match — 완료된 스캔 2개 사이 동일 근본 원인 finding 매칭
  • codex-security-deep-scan — 다중 패스 심층 스캔의 축소판(deep-lite — 공식 deep과 비동등)

검증된 조합

  • 번들 플러그인: @openai/codex-security@0.1.3 (플러그인 매니페스트 0.1.14)
  • Python 3.10+ / git / Node 22+(플러그인 npm 설치 시)
  • Linux · macOS(Windows는 WSL)

알아둘 것

  • 같은 플러그인 매니페스트 버전에서도 사본에 따라 워킹트리 게이트 처리가 다르다
    (하드 실패 vs 경고). --check가 어느 쪽인지 판별해준다. 자세한 내용은
    매뉴얼 3.4절.
  • 플러그인은 자동 설치하지 않는다. 없으면 npm install -g @openai/codex-security
    안내가 출력된다.
  • 이 실행 경로는 비(非) Codex 경로이며 업스트림 OpenAI 지원 대상이 아니다.

설치

BASE=https://github.com/kall/codex-security-claude-skills/releases/download/v0.1.0
PKG=codex-security-claude-skills-v0.1.0

curl -fsSLO "$BASE/$PKG.tar.gz"
curl -fsSL  "$BASE/SHA256SUMS" | sha256sum -c -
tar xzf "$PKG.tar.gz"
bash "$PKG/skills/install.sh" --copy --check
Assets 4
Loading