Security best practices
Reviews Python, JavaScript, TypeScript or Go code for security issues and writes secure-by-default code when you ask for it.
When to use it
- You want a security review of specific code.
- New code should be secure by default from the start.
- You are working in Python, JavaScript, TypeScript or Go.
It only runs for explicit security review or secure-coding requests.
A practical example
You ask
“Do a security review of the file-upload handler.”
Your agent does
It checks validation, storage, paths and permissions, and reports issues with fixes and references.
What gets installed
The whole folder is copied, so scripts, references and any license notices stay together.
- agents/openai.yaml237 bytes
- LICENSE.txt10,776 bytes
- references/golang-general-backend-security.md38,659 bytes
- references/javascript-express-web-server-security.md49,357 bytes
- references/javascript-general-web-frontend-security.md38,638 bytes
- references/javascript-jquery-web-frontend-security.md33,581 bytes
- references/javascript-typescript-nextjs-web-server-security.md43,423 bytes
- references/javascript-typescript-react-web-frontend-security.md41,686 bytes
- references/javascript-typescript-vue-web-frontend-security.md31,445 bytes
- references/modern-security-baseline.md3,916 bytes
- references/python-django-web-server-security.md38,661 bytes
- references/python-fastapi-web-server-security.md44,926 bytes
- references/python-flask-web-server-security.md31,748 bytes
- SKILL.md6,832 bytes
Credit and license
An original workflow that incorporates OpenAI’s security review material. It’s shared under the Apache License 2.0, and the license file is installed with it however you choose to install.