FreeSkills
Commits, branches and sync with the but CLI
- 361361 downloads
- 198198 likes
- 103103 saves
Works with
- Claude Code
- Codex
- Cursor
- and 3 more
Find candidate security flaws in code v1.0.0
Use this resource to find candidate security flaws in a repository or a code change
New
- 483 downloads
- 202 likes
- 183 saves
Free
Install with the CLI
In a terminal, from the folder you want:
npx --yes palatekit@latest install security-vulnerability-discoveryWith no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.
First time: connect the CLI with
npx --yes palatekit@latest loginThe agent reviews authorized code against the threat model and security policy, then lists candidate findings with their evidence. It does not decide the final severity: that belongs to the validation phase.
Mostly picked by
Updated November 2, 2026
Previews
Details
- Install guides
- Generates with
- Your agent's model
- Licence
- Apache-2.0
Similar resources
View all- Free
FreeSkills
Sentry CLI guide
- 525525 downloads
- 117117 likes
- 128128 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Drizzle ORM best practices with PostgreSQL
- 407407 downloads
- 194194 likes
- 151151 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
SLO design wizard
- 537537 downloads
- 105105 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
User stories and sprint fit
- 451451 downloads
- 150150 likes
- 132132 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Capacity-based sprint plan
- 423423 downloads
- 192192 likes
- 102102 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Startup CTO advisor
- 580580 downloads
- 201201 likes
- 242242 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
FreeSkills
Creating GitHub pull requests with quality checks
- 427427 downloads
- 230230 likes
- 196196 saves
Works with- Claude Code
- Codex
- Cursor
- and 3 more
What you get
- SKILL.md: workflow choice and evidence criteria
- agents/openai.yaml: agent metadata
Good fit for
- You want a first list of potential flaws in a module
- A code change touches authentication and needs a review
Not for
Tags
- discovery
- flaws
- candidates
- security
About
You say
“Look for candidate flaws in the password reset module.”
Skill published by openai under the Apache-2.0 license, delivered in its original version.
Show moreShow less
How to use it
- Install the skill in your agent's skills folder
- Ask your agent to find candidate security flaws in a repository or a code change
- Review and adjust the result
Content preview
Files
- agents/openai.yaml0.2 KB
- LICENSE10.7 KB
- NOTICE-PALATEKIT.md0.5 KB
- SKILL.md5 KB
Origin and licence
Listed unmodified
- Author
- openai
- Source
- github.com/openai/codex-security/tree/11a45947c7dcd257fcc3e5755d0a7fe5af8b359b/plugins/codex-security/skills/finding-discovery
- Licence
- Apache-2.0
Notice
« finding-discovery » (openai, Apache-2.0) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.
User reviews
–
No ratings yet
Loading reviews…