openai logo
#232 by installsSecurity & complianceopenai/skills

security-best-practices

Review code for language-specific security vulnerabilities and suggest hardening fixes

Installs
10.0K
all time
This week
500
installs
Repo stars
27.9K
GitHub
First seen
Feb 2, 2026
on skills.sh
Install
npx skills add https://github.com/openai/skills --skill security-best-practices
Works with Claude Code, Cursor, Codex, GitHub Copilot, Windsurf, Gemini CLI and other agents that read SKILL.md.
What it does

Analyzes Python, JavaScript/TypeScript, and Go codebases against framework-specific security best practices. Use it when you need a vulnerability report, want to build secure-by-default code, or require a security review. Reads from a curated reference library of security patterns and known vulnerabilities for each language and framework.

  • Identifies languages and frameworks in your project scope, then loads relevant security guidelines
  • Detects major security issues passively or generates detailed vulnerability reports on demand
  • Covers frontend and backend security for full-stack web applications
  • Provides actionable fix suggestions aligned with language and framework best practices