Security Codex plugins

Package name

persprotect

Publisher capabilities · listing

Interactive

Publisher description

Check known email breaches and read your existing PersProtect account’s protection and removal progress.

Publisher full description

Check whether your email appears in known data breaches, see the affected services and exposed data categories, and understand practical next steps. The email check is free and does not require a PersProtect account. Customers with an active subscription or active tria…

Package name

injection-checker

Publisher subtitle

Assess prompt injection risks

Publisher description

Assess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations.

Publisher full description

…rompts, AI application designs, retrieved documents, web content, and tool workflows for prompt-injection risks. Get evidence-linked attack-path analysis, calibrated severity and confidence, layered mitigations, and safe regression tests. Results are advisory and cannot guarantee prevention. Custome…

Publisher capabilities · listing

Interactive Read Write

Publisher description

Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy.

Publisher full description

Connect an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private…

Publisher description

Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance.

Publisher full description

…nly account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security.

Publisher keywords · listing

deepfake ai detection voice cloning image forensics security

Publisher full description

…by AI. Upload a file in chat or share a link, and Diopter runs it through its trained deepfake detection models, then returns a verdict (for example: no AI detected, AI-generated, or inconclusive) with a confidence level and a link to the full report on diopter.ai. Use it to sanity-check a suspicio…

Publisher capabilities · listing

Analyze any domain live: DNS, registration, hosting, HTTP, classification and a verdict, with a screenshot view Search certificate transparency logs for certificate names matching a pattern Scan a domain for registered and live typosquats, ranked by evidence Find unregistered lookalik…

Publisher keywords · listing

security typosquatting lookalike-domains certificate-transparency brand-protection takedowns threat-intelligence mcp

Publisher description

…nalyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to its connected tools, and manage its domains, rules and takedowns.

Publisher full description

Have I Been Squatted finds attacker infrastructure while it is being set up. Lookalike domains, mail servers, staging hosts and their certificates often appear before a phishing campaign launches. This plugin brings detection, investigation and…

Publisher capabilities · listing

…ol is safe to use, with the review's link Gives the setup steps a review recommends before you connect a tool to your code or accounts Checks a statement about AI agents against 564 claims, each with a citation and its basis Answers how and why questions about AI agents from the books' free chapters…

Publisher keywords · listing

ai-agents mcp safety verdicts claim-checking glossary books

Publisher description

Ask whether an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that make it safer. Also answers how and why questions about AI agents from the books' free chapters and concepts, with links to the passages, checks state…

Publisher full description

Ask whether an AI agent, MCP server, coding assistant or AI product is safe to use, and get a straight verdict from Greenlit Books, with the setup steps that make it safer and a link to the full review. Each verdict comes from reading the product's own code, docs a…

Publisher description

Neura Relay MCP helps ChatGPT-connected workflows review proposed agent actions before execution. It returns Decision Receipts, trace refs, and Registry context without executing downstream actions or exposing private payloads.

Publisher description

…ousands of businesses. PrivacyHawk helps you reduce your digital footprint, decrease spam, and protect yourself from identity theft, scams, and hacks.

Publisher full description

…personal information. PrivacyHawk helps you reduce your digital footprint, decrease spam, and protect yourself from identity theft, scams, and hacks. Key Features: - Delete your data from unwanted databases by automatically finding and removing your private information from companies that expose or…

Publisher description

ProofX protects your digital content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and text with tamper-proof cryptographic proof - Verify if content is registered…

Publisher description

…a GitHub URL or npm package name and it returns an independent trust score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code analysis, runtime behavioral observation in a sandbox, CVE scanning, and a semantic check comparing the tool's declared behavior against what it…

Publisher keywords · listing

security prompt-injection jailbreak secrets guardrails

Publisher description

Security scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardcoded secrets.

Publisher full description

…n. - Scan untrusted text (web pages, emails, documents, issues, other tools' output) for prompt injection, jailbreak attempts, leaked secrets and personal data before acting on it. - Check a shell command before running it: destructive deletes, credential reads, data exfiltration, force pushes and i…

Publisher description

Guided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API.

Publisher full description

…er requests into transparent KQL and executes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution.

Publisher full description

…nds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and…

Publisher description

…ecurity reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools.

Publisher full description

An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend.

Publisher full description

…s for security scans, analysis, validation, and investigation across code, diffs, and related artifacts.

Publisher full description

…s Token mode in three steps: Add document, Check & share, Use answer. It automatically replaces detected private details with tokens on your device. Review the exact text, approve it, then send it to ChatGPT. Paste the reply into the same open workspace to restore the real details locally. Review pr…

Publisher full description

…ISA Known Exploited Vulnerabilities (KEV) catalog lists the CVE, with CISA's due date and required action. FIRST's EPSS gives the modelled probability that the CVE is exploited in the next 30 days. Each CVE gets a priority: "exploited" when CISA lists it, "likely" when its EPSS score is 0.1 or more,…

Publisher keywords · listing

threat intelligence threat hunting cti ioc enrichment c2 malware infrastructure whois mitre att&ck soc

Publisher description

Investigate malicious infrastructure, threat indicators, WHOIS records and ATT&CK techniques with Etugen.

Publisher full description

Etugen keeps track of malicious infrastructure on the internet, like command-and-control servers, malware hosts, phishing kits and attacker directories left open to the web. Connect your Etugen account and you can look all of this up right f…

Publisher full description

Verify suspicious customer, lead, and signup email addresses directly in ChatGPT with Fraud Blocker. Fraud Blocker Email Verification helps you investigate individual email addresses before deciding how to handle an order, signup, or lead. - **Instant Email Verific…

Publisher description

Check suspicious links, review known data leaks, and understand your Guardio protection.

Publisher full description

Guardio helps you check suspicious links and understand your online protection from ChatGPT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect your Guardio account to review…

Publisher description

…r next steps. Look up a company or website to see known breaches, the types of data exposed, and practical first steps. Browse recent breaches in LeakData's public catalog without connecting an account. Connect your LeakData account to check its verified email address, review existing monitoring res…

Publisher description

Check MCP servers against the PolicyLayer registry before connecting to them.

Publisher full description

…public exposure through authorized, passive sources. Intended for security, compliance and risk practitioners. It preserves uncertainty and does not replace professional review, an audit, or legal advice.

Publisher full description

…nization's PasskeyBridge security data. It cannot change anything: all 10 tools are read-only. Connecting: an administrator of your PasskeyBridge organization signs in and approves the connection on PasskeyBridge's consent page. The page shows the client's name, the host it returns to and what it ma…

Publisher description

…et safety tips and official reporting resources. An analysis of risk signals, not a guaranteed verdict; read-only, stateless, no account.

Publisher full description

…omain, or a sender (email address or number) and returns the fraud and phishing risk signals it detects — for example urgency and pressure, a request to pay or to click, a shortened link, a raw IP address, a missing HTTPS, a look-alike or free-address domain. It uses a deterministic heuristic model:…

Publisher keywords · listing

…audit soc-2 iso-27001 iso-42001 audit-readiness compliance-tools security-assessment evidence-collection policy-drafting cloud-security startups

Publisher description

Screenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001 audits. Assess infrastructure, investigate failing compliance checks, review proposed fixes, ve…

Publisher full description

…2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001, investigate failing security checks and collect evidence linked to the relevant tests. Review a proposed fix before applying it, then re-run the check to verify the result. Draft security policies from your recorded answers and open direct brows…

Publisher keywords · listing

plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code

Publisher full description

…his before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as a s…

Publisher full description

…each company's privacy email or form taken from its own privacy page, and a UK GDPR erasure and objection letter to send from your own email. It also covers opting out of the open electoral register, the Telephone and Mailing Preference Services, a one-month chase-up letter and how to complain to th…

Publisher description

Read-only repository governance and GitHub Actions risk audits with reviewable patches.

Publisher full description

Inspect repository policy, GitHub Actions trust boundaries, and moderation automation without network access or repository mutation; generate reviewable remediation patches on request.

Publisher full description

…gets the dangerous ones taken down with registrars, hosting providers and platforms. With this connector, your brand protection is one question away. Ask which lookalike domains pose the highest risk right now, which fake Instagram, Facebook or LinkedIn profiles and Meta ads were found, and how your…

Publisher translations · package

…d lässt gefährliche Fälschungen bei Registraren, Hostern und Plattformen entfernen. Mit diesem Connector ist Ihre Brand Protection nur eine Frage entfernt. Fragen Sie, welche Lookalike-Domains gerade das höchste Risiko haben, welche gefälschten Instagram-, Facebook- oder LinkedIn-Profile und Meta-An…