Repository Security Scanner
Audits repository source code to identify, trace, and validate exploitable vulnerabilities, broken access controls, and exposed credentials.
Performs comprehensive, single-pass security audits across entire codebases or targeted directory paths to uncover genuinely exploitable vulnerabilities. By tracing untrusted inputs from entry points directly to execution and access enforcement controls, this skill analyzes real authorization boundaries, verifies threat models, and inspects credential exposures. It coordinates directly with the Codex Security CLI and TypeScript SDK to provide structured findings accompanied by exact source lines, concrete impact analyses, and explicit coverage accounting.
Key Features
01Executes full-repository or targeted path vulnerability audits
02Traces untrusted inputs and authority flows from ingestion to enforcement points
03Evaluates exposed credentials, accessibility paths, and grant permissions
04Validates broken controls to distinguish actionable threats from false positives
05Integrates seamlessly with the Codex Security CLI and TypeScript SDK workflows
0611,789 GitHub stars
Use Cases
01Conducting baseline pre-release security audits across an entire repository
02Investigating sensitive authentication, authorization, or data processing pipelines
03Evaluating the blast radius and exposure risks of leaked credentials and secrets