Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 11,707 plugins across 14 categories.
Follow up to 3 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 13
Plugin growth →All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
Is This AI Agent Safe?Greenlit BooksAsk whether an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that ... Plugin name Is This AI Agent Safe? Show in context →5 more matching sourcesPublisher capabilities · listing Tells you whether a named AI agent, MCP server or coding tool is safe to use, with the review's link Gives the setup steps a review recommends before you connect a tool to your code or accounts Checks a statement about AI agents… Show in context →Publisher keywords · listing ai-agents mcp safety verdicts claim-checking glossary books Show in context →Publisher description Ask whether an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that make it safer. Also answers how and why questions about AI agents from the books'… Show in context →Publisher full description Ask whether an AI agent, MCP server, coding assistant or AI product is safe to use, and get a straight verdict from Greenlit Books, with the setup steps that make it safer and a link to the full review. Each verdict co… Show in context → |
SecurityVersion 1.0.2 | View details → |
AgentGuardsAgentGuardsSecurity scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell comman... Publisher subtitle Security scans for AI agents Show in context →6 more matching sourcesPublisher description Security scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardcoded secrets. Show in context →Publisher full description AgentGuards checks the things an AI agent is about to trust or run. - Scan untrusted text (web pages, emails, documents, issues, other tools' output) for prompt injection, jailbreak attempts, leaked secrets and personal data before a… Show in context →Publisher capabilities · listing Scan text for prompt injection and jailbreaks Detect leaked secrets and personal data Check shell commands before running them Scan code for vulnerabilities and secrets Show in context → |
SecurityVersion 1.0.4 | View details → |
BlindOracle Agent TrustCraig M. BrownTrust badge, reputation history and service list for AI agents, plus your own agent account: a passport, starter credit, jobs you can do ... Publisher subtitle Check an AI agent's record Show in context →7 more matching sourcesPublisher capabilities · listing Look up an AI agent's trust badge by name or wallet Read an agent's completed, failed and disputed job history List BlindOracle services and which ones work here Show in context →Publisher keywords · listing ai agents trust reputation counterparty agent marketplace verification Show in context →Publisher description Trust badge, reputation history and service list for AI agents, plus your own agent account: a passport, starter credit, jobs you can do to build reputation, and jobs you can post. Every result carries a signed content credential. Show in context →Publisher full description BlindOracle Agent Trust answers one question before you work with or hire an AI agent: what is its record? What it does - Trust badge: a one-line badge for an agent name or wallet, built from BlindOracle's audit registry and settlement history. An agent BlindOracle has never s… Show in context → |
SecurityVersion 1.1.1 | View details → |
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Plugin name Endor Labs Agent Kit Show in context →3 more matching sourcesPublisher capabilities · listing Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec Show in context →Publisher full description Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more. Show in context → |
SecurityVersion 2.2.4 | View details → |
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher keywords · listing plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code Show in context →3 more matching sourcesPublisher description Scan agent skills and plugins locally for reviewable risk patterns before installation. Show in context →Publisher full description Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked… Show in context → |
SecurityVersion 0.1.5 | View details → |
AnomityAnomity Publisher full description Anomity shows a security team every AI tool running on its managed devices: coding agents, MCP servers, skills and instruction files, browser AI use, personal versus corporate AI accounts, and the credentials those tools can reach. Sensors deployed through your device management rep… Show in context →4 more matching sourcesPublisher capabilities · listing Read your organization's AI security posture Triage policy findings Investigate a managed device Review MCP servers and AI accounts Review the audit trail and compliance readiness Approve allowlist items you confirm (admins,… Show in context →Publisher description Ask about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, compliance readiness and the allowlist. Skills turn the answers into posture briefings, findin… Show in context → |
SecurityVersion 0.1.0 | View details → |
Orca SecurityOrca Security Publisher description …mpact from the first response. For teams that want the reasoning without writing the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills. Type "triage alert orca-9012345" and the orca-alert-triage skill handles retrieval, analysis, and formatting. Teams can fork it, modify it, and extend it to their own use cases. The resu… Show in context →1 more matching sources |
SecurityVersion 1.0.0 | View details → |
SkarnSkarn Software OÜ Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the session transcrip… …ngs that apply to it, drawn from MITRE ATLAS, the OWASP Top 10 for LLM Applications 2025, the OWASP Agentic Top 10, and CWE. skarn vet reads the assistant configuration files on the same machine and reports risky declarations: hooks, MCP servers, and permission grants that could run remote code or s… Show in context →4 more matching sourcesPublisher capabilities · listing Scan AI coding sessions for leaked credentials Vet assistant hooks, MCP servers and permission grants Show in context →Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context →Publisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context → |
SecurityVersion 0.27.0 | View details → |
SupedSupedAnalyze DMARC reports, investigate SPF and DKIM issues, and manage domains and MSP clients with Suped. Publisher subtitle DMARC, SPF & DKIM Agent Show in context →2 more matching sourcesPublisher description Analyze DMARC reports, investigate SPF and DKIM issues, and manage domains and MSP clients with Suped. Show in context →Publisher full description Understand your DMARC reports, protect your domains, and improve email deliverability with Suped in ChatGPT. Connect your Suped account to: • See which services send email for your domains. • Investigate SPF and DKIM failures and find out what to… Show in context → |
SecurityVersion 1.0.3 | View details → |
Atbash SafetyAtbash AI Publisher description Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy. Show in context →3 more matching sourcesPublisher full description Connect an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private keys in local configuration and uses them locally for signing. Safety policy enforcement applies to the skill's decision to proceed… Show in context → |
SecurityVersion 0.3.4 | View details → |
Ansvar GatewayAnsvar AI Publisher description Ansvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. Customers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-compatible client) to the Ansvar… Show in context →1 more matching sources |
SecurityVersion 1.0.0 | View details → |
CVE Risk CheckAgent ToolsTriage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole d... Publisher Agent Tools Show in context →1 more matching sourcesPublisher full description …s the GitHub Advisory Database and other open databases. The advisories' CVE ids are then checked against the CISA exploited list and EPSS. The answer is the few packages to fix first, each with a priority (malicious, exploited, likely, routine or unknown), a one-line reason and the version to upgra… Show in context → |
SecurityVersion 1.2.0 | View details → |
DecionisBinaries Publisher description Decionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed action against organization policy and determines whether it may proceed, must be held, or requires additional aut… Show in context → |
SecurityVersion 1.0.1 | View details → |
Catalog results: live query. The homepage cache is not used for this view.