How-To Guides

appsec-static-audit: Source-Code Security Audit Skill for Codex

Install appsec-static-audit for Codex to run source-code-only security audits with findings mapped to NIST 800-53, IRS Pub 1075, and EOTSS controls.

  • Source-code-only security audit workflow
  • Maps findings to NIST 800-53, IRS Pub 1075, and EOTSS
  • Produces a timestamped report and SBOM output
By Rejith Krishnan1 min read
appsec-static-audit: Source-Code Security Audit Skill for Codex

What it is

appsec-static-audit performs a source-code-only security audit and produces a structured report plus SBOM output. It is designed for static review only, with findings mapped to NIST 800-53, IRS Publication 1075, and Massachusetts EOTSS standards. It does not do live testing or network checks, so runtime controls still need separate validation.

Install and usage

Codex CLI prerequisite: PowerShell setup or WSL setup.

Install, then restart Codex:

$skill-installer install https://github.com/lowtouch-ai/krithi-skills/tree/main/skills/appsec-static-audit

Usage example from the repository README:

$appsec-static-audit audit this repository for security

For update and uninstall steps, see the krithi-skills README.

About the Author

Rejith Krishnan

Rejith Krishnan

Founder and CEO

Rejith Krishnan is the Founder and CEO of lowtouch.ai, a platform dedicated to empowering enterprises with private, no-code AI agents. With expertise in Site Reliability Engineering (SRE), Kubernetes, and AI systems architecture, he is passionate about simplifying the adoption of AI-driven automation to transform business operations.

Rejith specializes in deploying Large Language Models (LLMs) and building intelligent agents that automate workflows, enhance customer experiences, and optimize IT processes, all while ensuring data privacy and security. His mission is to help businesses unlock the full potential of enterprise AI with seamless, scalable, and secure solutions that fit their unique needs.

LinkedIn →