Form Validation
thedaviddias/Front-End-Checklist
A skill your agent uses when reviewing templates, rendered HTML, or shared components related to Validate forms accessibly.
Review an authorized security issue for validity, severity, and a remediation plan.
OfficialApache-2.0Auto-check passed
Install Review Security Issue
$ npx skills add NVIDIA/OpenShell --skill review-security-issue -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install NVIDIA/OpenShell review-security-issue --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/NVIDIA/OpenShell.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/review-security-issue .claude/skills/review-security-issue && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "review-security-issue" agent skill from https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/review-security-issue into .claude/skills/review-security-issue/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-security-issue", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/review-security-issueType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add NVIDIA/OpenShell --skill review-security-issue -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install NVIDIA/OpenShell review-security-issue --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/NVIDIA/OpenShell.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/review-security-issue .agents/skills/review-security-issue && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "review-security-issue" agent skill from https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/review-security-issue into .agents/skills/review-security-issue/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-security-issue", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add NVIDIA/OpenShell --skill review-security-issue -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install NVIDIA/OpenShell review-security-issue --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/NVIDIA/OpenShell.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/review-security-issue .cursor/skills/review-security-issue && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "review-security-issue" agent skill from https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/review-security-issue into .cursor/skills/review-security-issue/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-security-issue", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/NVIDIA/OpenShell.git --path .agents/skills/review-security-issue--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add NVIDIA/OpenShell --skill review-security-issue -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install NVIDIA/OpenShell review-security-issue --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/NVIDIA/OpenShell.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/review-security-issue .gemini/skills/review-security-issue && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "review-security-issue" agent skill from https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/review-security-issue into .gemini/skills/review-security-issue/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-security-issue", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install NVIDIA/OpenShell review-security-issueInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add NVIDIA/OpenShell --skill review-security-issue -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/NVIDIA/OpenShell.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/review-security-issue .github/skills/review-security-issue && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "review-security-issue" agent skill from https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/review-security-issue into .github/skills/review-security-issue/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-security-issue", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add NVIDIA/OpenShell --skill review-security-issue -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install NVIDIA/OpenShell review-security-issue --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/NVIDIA/OpenShell.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/review-security-issue .opencode/skills/review-security-issue && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "review-security-issue" agent skill from https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/review-security-issue into .opencode/skills/review-security-issue/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "review-security-issue", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
review-security-issue- GitHub stars
- 15k
- Token cost
- ~425 tokens
- SKILL.md length
- 214 words
- Files
- 1
- Skills in repo
- 23
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Review an authorized security issue for validity, severity, and a remediation plan.
- Works in 4 steps: Fetch the issue and comments with gh… → Inspect affected code and verify the… → If actionable, propose a remediation… → …
- Calls gh
What it does
Review Security Issue is an agent skill from NVIDIA/OpenShell, published by the product's own GitHub organization. Review an authorized security issue for validity, severity, and a remediation plan.
Its SKILL.md is about 430 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
The repository describes itself as: OpenShell is the safe, private runtime for autonomous AI agents. The licence is Apache-2.0.
Example prompts
- “/review-security-issue”
Workflow steps
4 steps, taken from the first numbered list in SKILL.md.
- Fetch the issue and comments with gh issue view --json title,body,state,labels,comments. Follow Label Discovery in CONTRIBUTING.md rather…
- Inspect affected code and verify the claim. Assess impact, exploitability, prerequisites, affected surface, and a concrete attack…
- If actionable, propose a remediation plan with code areas, safe rollout, and focused tests. If not actionable, explain the evidence and…
- Post the review only when the request authorizes posting. Begin the comment with > 🔒 security-review-agent so later reviews can detect…
What it can do on your machine
Read from SKILL.md and the folder at commit 277f922. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
gh
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use gh, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Review Security Issue loads about 425 tokens when it runs. Until then it costs about 26 tokens; SKILL.md has 214 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from NVIDIA/OpenShell at commit 277f922, republished under its Apache-2.0 licence (© NVIDIA). 214 words, ~425 tokens.
Download SKILL.mdSave it as
.claude/skills/review-security-issue/SKILL.md (or your agent's skills folder).- name
- review-security-issue
- description
- Review an authorized security issue for validity, severity, and a remediation plan.
- metadata.internal
- true
Review Security Issue
Review a security concern through its authorized private workflow. Do not file or expand a vulnerability in a public issue; follow SECURITY.md. A direct request to review authorizes review only, not remediation. For unattended review, inspect current state:* label descriptions, maintainer assignments, and comments to verify that review is authorized.
Assess
- Fetch the issue and comments with
gh issue view <id> --json title,body,state,labels,comments. Follow Label Discovery inCONTRIBUTING.mdrather than assuming exact label names; resolve unclear meanings before interpreting authorization. Verify that this is an authorized security issue and that a prior review does not already answer the request. - Inspect affected code and verify the claim. Assess impact, exploitability, prerequisites, affected surface, and a concrete attack scenario. Separate evidence from assumptions and give a severity with rationale.
- If actionable, propose a remediation plan with code areas, safe rollout, and focused tests. If not actionable, explain the evidence and recommended disposition. Do not decide product acceptance or silently close the issue.
- Post the review only when the request authorizes posting. Begin the comment with
> **🔒 security-review-agent**so later reviews can detect it. Keep sensitive details in the authorized private venue.
A human decides whether to authorize remediation. Route an authorized fix to fix-security-issue. Do not introduce agent:* workflow labels.
© NVIDIA, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .agents/skills/review-security-issue of NVIDIA/OpenShell.
Open the folder on GitHubat commit 277f922
Compare with similar skills
Review Security Issue next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Review Security Issue this skillNVIDIA/OpenShell | 15k | — | ~425 | Automated safety check: Pass | Apache-2.0 | |
| Form Validationthedaviddias/Front-End-Checklist | 74k | — | ~633 | Automated safety check: Pass | MIT | |
| Hermes Agent Skill AuthoringNousResearch/hermes-agent | 252k | — | ~3.6k | Automated safety check: Pass | MIT | |
| Configuring Oauth2 Authorization Flowmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | |
| Authoring Skillsvercel/next.js | 143k | — | ~1k | Automated safety check: Pass | MIT | |
| Validateagenticnotetaking/arscontexta | 3.5k | — | ~3k | Automated safety check: Pass | MIT |
Similar skills
Hermes Agent Skill Authoring
NousResearch/hermes-agent
Author in-repo SKILL.md files: frontmatter and structure. An agent skill from NousResearch/hermes-agent.
Configuring Oauth2 Authorization Flow
mukul975/Anthropic-Cybersecurity-Skills
Configures secure OAuth 2.0 authorization flows, including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant, covering flow selection, PKCE implementation, token…
- Official
Authoring Skills
vercel/next.js
How to create and maintain agent skills in .agents/skills/. An agent skill from vercel/next.js.
Validate
agenticnotetaking/arscontexta
Schema validation for notes. An agent skill from agenticnotetaking/arscontexta.
Abp Authorization
abpframework/abp
ABP permission system - PermissionDefinitionProvider, [Authorize] attribute, CheckPolicyAsync, IsGrantedAsync, ICurrentUser, IPermissionManager, multi-tenancy side.
More from NVIDIA/OpenShell
All 23 skills in this repo- Official
Build Openshell Mxc Windows
NVIDIA/OpenShell
Maintain and validate OpenShell's build-only Windows MSVC lane for x64 and ARM64.
- Official
Create GitHub Issue
NVIDIA/OpenShell
Create GitHub issues using the gh CLI. An agent skill from NVIDIA/OpenShell.
- Official
Create GitHub PR
NVIDIA/OpenShell
Create GitHub pull requests using the gh CLI. An agent skill from NVIDIA/OpenShell.
- Official
Debug Inference
NVIDIA/OpenShell
Debug inference clients that use an attached provider and its native endpoint, including hosted APIs and host-local Ollama, vLLM, SGLang, TRT-LLM, LM Studio, or NIM.
- Official
Debug Openshell Cluster
NVIDIA/OpenShell
Debug why an OpenShell gateway deployment is unhealthy, unreachable, or unable to create sandboxes.
- Official
Gator Gate
NVIDIA/OpenShell
Validate and monitor OpenShell GitHub issues and PRs using the gator: state machine.
Questions about Review Security Issue
What does Review Security Issue do?
Review an authorized security issue for validity, severity, and a remediation plan. Review Security Issue is an agent skill from NVIDIA/OpenShell, published by the product's own GitHub organization. Review an authorized security issue for validity, severity, and a remediation plan.
How do I install Review Security Issue in Claude Code?
Run `npx skills add NVIDIA/OpenShell --skill review-security-issue -a claude-code`. Or copy the skill folder (.agents/skills/review-security-issue in NVIDIA/OpenShell) into .claude/skills/review-security-issue in your project. Claude Code loads it when a task matches its description.
How do I install Review Security Issue in Codex?
Run `npx skills add NVIDIA/OpenShell --skill review-security-issue -a codex`. Or copy the skill folder (.agents/skills/review-security-issue in NVIDIA/OpenShell) into .agents/skills/review-security-issue in your project. Codex loads it when a task matches its description.
Can I use Review Security Issue in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add NVIDIA/OpenShell --skill review-security-issue -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/review-security-issue, .gemini/skills/review-security-issue, .github/skills/review-security-issue and .opencode/skills/review-security-issue in your project.
What does Review Security Issue need to run?
Going by SKILL.md and its folder, Review Security Issue needs the command-line tools its instructions call (gh).
Does Review Security Issue access the network?
SKILL.md contains no URLs. Its commands use gh, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Is Review Security Issue safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Review Security Issue use?
Review Security Issue is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Review Security Issue use?
About 425 tokens (SKILL.md is roughly 1.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Review Security Issue?
Skills that share tags, products or a category with Review Security Issue: Form Validation (thedaviddias/Front-End-Checklist, 74k stars), Hermes Agent Skill Authoring (NousResearch/hermes-agent, 252k stars), Configuring Oauth2 Authorization Flow (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Authoring Skills (vercel/next.js, 143k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Review Security Issue?
NVIDIA (a GitHub organization, an official publisher) maintains it in NVIDIA/OpenShell, which has 15,338 GitHub stars. The repository holds 23 skills in this directory. The repository was last updated on October 8, 2026.
Source: NVIDIA/OpenShell on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.