Developer Tools Codex plugins

Publisher full description

A security review assistant for Cloudflare applications. It helps assess tenant and row-level authorization across Workers, D1, PostgreSQL via Hyperdrive, object and key-value storage, caches, identity… …ound jobs. It distinguishes D1 application-layer authorization from PostgreSQL native RLS, asks for evidence when needed, and provides prioritized findings and negative tests. It cannot guarantee complete security, inspect an account unless connected evidence is supplied, or deploy changes on its ow…

Publisher keywords · listing

code-review release-readiness evidence security ai-governance

Publisher capabilities · listing

…e coding work across 25 canonical lifecycle skills in 8 packs Track mutation-aware verification and evidence freshness Use specialized TDD, review, security, and recovery specialists Run lifecycle hooks across supported Codex and ChatGPT plugin surfaces Predict atomic next moves with Fable Spark situational awareness

Publisher capabilities · listing

Workflow-to-skill design State-aware skill routing Activation and collision evaluation Static security checks ChatGPT and Codex adaptation Evidence-based improvement Portable skill packaging

Publisher capabilities · listing

Frame new product opportunities, user needs and evidence gaps Design lean MVPs and validation experiments Audit existing apps and prioritize evidence-backed improvements Specify scoped features with state and permission handling Define accessible w… …ntracts and integration boundaries Plan bounded, testable AI-powered features when justified Review security, reliability, privacy, accessibility and cost needs Compare build-versus-buy options and technology tradeoffs Create phased engineering plans and handoffs Review launch readiness with explici…

Publisher capabilities · listing

…d their terms Show three vetted engineers, compare them and let the user choose one Give the user a secure Stripe checkout link after they choose, so the job goes to that engineer Track a job's status, weekly evidence and milestone reviews Open a dispute and leave feedback when the job ends

Publisher capabilities · listing

…architecture and existing code contracts Debug failures from error messages, logs, tests, and trace evidence Implement focused changes with regression tests and minimal diffs Review code for correctness, security, concurrency, and compatibility Refactor code while preserving observable behavior Plan tests, reproduce regressions, and evaluate test coverage Plan safe dependency, runtime, API, and databa…

Publisher full description

…scan dates, status, and test counts when available. The plugin provides scan summaries, not finding evidence or a current security guarantee. It reads saved scans and cannot start scans or change your account.

Publisher capabilities · listing

Design RAG architectures with evidence, freshness, authorization, and evaluation boundaries Build or improve RAG pipelines when coding tools and project access are available Diagnose ingestion, chunking, indexing, retrieval, reran…

Publisher full description

…fects and flaky tests, review visual and responsive behavior, assess accessibility, performance and security evidence, and make traceable release decisions. It creates focused Playwright plans and tests when coding tools are available and ties each risk and verdict to observed evidence. It does not claim to…

Publisher description

…t and improve MCP servers and interactive MCP Apps from ideas or existing code, with host-aware UI, secure tool contracts and evidence-based engineering workflows.

Publisher full description

Check a public website's HTTPS encryption and post-quantum TLS with measured evidence. FiraQuantumSafe helps website owners, developers and security teams inspect TLS 1.2 and TLS 1.3, certificate trust and expiry, security-header presence, and hybrid X25519MLKEM768 key exchange. Retrieve reports using their IDs and compare observations fo…

Publisher description

Evidence-first cloud architecture, Kubernetes, infrastructure as code, security, SRE, observability, and developer-platform workflows.

Publisher full description

…agents.md, UCP file, sitemap and AI crawler rules; five AI citation signals of one page, each with evidence and a fix; and a sample of up to 40 sitemap addresses for broken pages and redirects. Landing page check: twelve conversion items such as the h1, the call to action and whether its links work, form fields, trust signals, a price section, viewport and a contact path, each with evidence and a fix. It is a checklist, not a forecast. Exposure check: exposed or clean with the top 3 risks and fixes, from dangling subdomains, leaked…

Publisher keywords · listing

agentic-workflows evidence governance project-review release-readiness

Publisher full description

…n, the result, selected file hashes, Git state, and later drift on those paths. It records observed evidence; it does not prove correctness, security, identity, authorization, or sandboxing.

Publisher keywords · listing

cve vulnerability security dependencies osv

Publisher full description

…websites: check availability across TLDs, inspect WHOIS/RDAP registration, DNS, certificates, email security, hosting, security signals, and on-page SEO. Results include evidence and may be unknown when a source is blocked or incomplete. Valuations are estimates; availability can change and should be confirmed with a registrar. Connect with DomScan OAuth. Checks may u…

Publisher description

Evidence-backed Go language, API, service, testing, performance, security, operations, and engineering-review skills.

Publisher full description

…f the site, then returns a launch-readiness score with prioritized findings. Each finding shows the evidence Afterward observed and a suggested next step. What it checks: availability and status codes, HTTPS and redirects, titles and meta descriptions, canonical tags, viewport and Open Graph tags, robots.txt and sitemaps, broken links, image alt text, form security, analytics tags, leftover starter content, and common security headers such as HSTS and Content-Security-Policy. How it works: Afterward makes read-only requests to public pages, like a brows…

Publisher full description

…architectural options and design patterns, and explaining trade-offs before implementation. Guides evidence-based decisions with guardrails, validated Architecture Decision Records (ADRs), coding handoffs, and conformance reviews using the user's selected AI model. ⚠️ IMPORTANT: BEFORE FIRST USE, ACTIVATE ALL FIVE BUNDLED HOOKS IN THE HOOKS SECTION BELOW. All five are required for reliable routing, continuation, safety checks, artifact validation, and complete responses.

Publisher full description

Audit a public website from its URL and get an evidence-based report covering technical SEO, on-page SEO, performance and Core Web Vitals, accessibility, mobile usability, conversion journeys, security hygiene, and content quality. Review category scores alongside test coverage, inspect the evidence behind each finding, and follow prioritized fixes with severity, impact, effort estimates, a…

Publisher full description

…tallation and IDE plugin discovery remain unverified. See the project's support matrix for recorded evidence. ChatGPT web is not a supported execution surface. Runs locally with your user privileges; slices use Git worktrees, which are not a security sandbox. The selected provider may receive prompts and repository content under your account terms, and usage is billed to your plan or provider account. Read the bundled PRIVACY.md and SECUR…

Publisher full description

…in to check DNS records, inbound email routing, SPF, DMARC and HTTPS certificate configuration. Get evidence-backed findings with importance, explanations and practical next steps. Known DKIM selectors can be checked when you supply them. Use it to investigate email setup problems, spam symptoms or… …ad-only public checks, does not change records or send emails, and cannot guarantee email delivery, security or business legitimacy. DNS query names are sent to Google Public DNS; website checks send bounded HEAD requests to public servers. No account is required.

Publisher description

…lared Kubernetes workload, Service, Ingress and resource-reference relationships with deterministic evidence and explicit unknowns.

Publisher full description

…eering workspace for writing, explaining, debugging, reviewing, refactoring, architecting, testing, securing, optimizing, deploying, documenting, and learning software. It supports frontend, backend, databases, APIs, Cloudflare, Git, migrations, and coding-agent handoffs while keeping evidence and verification explicit.

Publisher description

Sitelemetry audits websites across security, technical SEO, AI visibility, analytics and tracking integrations, accessibility, and performance. It returns prioritized findings with evidence, impact, and concrete remediation guidance. Public, non-intrusive checks can assess public websites; protected security modules and full audits require a verified Sitelemetry project. Connect…

Publisher full description

…as behavior before publishing. Skill Craft audits triggers, workflow safety, context cost, testing evidence, and approval readiness through a fixed ten-dimension report. It also provides a separate five-part walkthrough in the reader's language, and an approval gate that reads the review, tests, an… …roving: none, a few pointed lines, or a deep read. Results support a human decision; they are not a security certification.

Publisher description

…ity management into ChatGPT. Review recent tests, prioritize open findings by severity, and inspect evidence and remediation steps. Start tests against your authorized web applications, APIs, and repositories; retest findings; and open fix pull requests or tickets through connected integrations. Check pull request security reviews and supply-chain findings, manage recurring schedules and assets, and summarize your workspace's security activity. Sign in with your Strix account using OAuth. Access follows your St…

Publisher full description

Review web-app security findings without leaving your conversation. Connect an eligible Vibe App Scanner account to see recent scans, check progress and read available reports with remediation guidance. You can also… …ept login credentials for target sites or run recurring scans through this plugin. Reports omit raw evidence and source files. Findings are observations, not a guarantee of security; failed or incomplete checks remain unknown. A VAS account with plugin access is required.

Publisher description

…from VTAI at any time. Standard submissions are shared with VirusTotal and may be available to its security community and partners. Ask before sharing personal documents, internal code, credentials or personal data. Complete URLs, including query strings and fragments, are disclosed. The remote connector cannot read local filesystem paths. Report evidence does not guarantee safety.

Publisher full description

…th its own tools, rules and permissions. Relevant verification and repeated Patch Checking preserve evidence between stages. The two read-only tools require no publisher account or API key and do not inspect or modify a repository. Technical instructions are English.