·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 5. Classified findings closed: 0. Classified findings remaining: 5. Unclassified scanner findings remaining: 0. Review findings closed: 0. Review findings remaining: 28.
5
5
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
scripts/github_utils.py | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
SKILL.md | Tool & MCP Manipulation | MCP over-permissioning | Medium | Open | |
scripts/install-skill-from-github.py | Malicious Code & Command Execution | Dynamic code execution | Medium | Open | |
SKILL.md | Sensitive Data & Secret Exposure | Agent snooping | Medium | Open | |
SKILL.md | Excessive Agency & Rogue Autonomy | — | Medium | Open |
5 findings
Helps install skills. By default these are from https://github.com/openai/skills/tree/main/skills/.curated, but users can also provide other locations.
Use the helper scripts based on the task:
.curated, but you can pass --path skills/.experimental when they ask about experimental skills.Install skills with the helper scripts.
When listing skills, output approximately as follows, depending on the context of the user's request. If they ask about experimental skills, list from .experimental instead of .curated and label the source accordingly:
"""
Skills from {repo}:
After installing a skill, tell the user it will be available on their next turn.
All of these scripts use network, so when running in the sandbox, request escalation when running them.
scripts/list-skills.py (prints skills list with installed annotations)scripts/list-skills.py --format jsonscripts/list-skills.py --path skills/.experimentalscripts/install-skill-from-github.py --repo <owner>/<repo> --path <path/to/skill> [<path/to/skill> ...]scripts/install-skill-from-github.py --url https://github.com/<owner>/<repo>/tree/<ref>/<path>scripts/install-skill-from-github.py --repo openai/skills --path skills/.experimental/<skill-name>$CODEX_HOME/skills/<skill-name> (defaults to ~/.codex/skills).--path values install multiple skills in one run, each named from the path basename unless --name is supplied.--ref <ref> (default main), --dest <path>, --method auto|download|git.https://github.com/openai/skills/tree/main/skills/.curated via the GitHub API. If it is unavailable, explain the error and exit.GITHUB_TOKEN/GH_TOKEN for download.$CODEX_HOME/skills.Get started with chainctlchainctl skill install public/openai/skill-installer:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/openai/skills/.system/skill-installer:latest
Apache-2.0
HARDENING.md
LICENSE
SKILL.md
agents/openai.yaml
assets/skill-installer-small.svg
assets/skill-installer.png
scripts/github_utils.py
scripts/install-skill-from-github.py
scripts/list-skills.py