MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,323 plugins across 14 categories.

Security plugins 21

1–21 of 21

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developerCategoryFollow
Atbash SafetyAtbash AIAutomatically guards supported Codex tool calls with Atbash safety judgments and provides secure local setup guidance.

Plugin name

Atbash Safety

Show in context →
4 more matching sources

Publisher capabilities · listing

Safety policy enforcement Local credential setup

Show in context →

Publisher keywords · listing

atbash codex safety policy guardrails

Show in context →

Publisher description

Automatically guards supported Codex tool calls with Atbash safety judgments and provides secure local setup guidance.

Show in context →

Publisher full description

Atbash Safety checks supported Codex tool calls against your Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and trou…

Show in context →
SecurityVersion 0.3.3
View details →
Awesome Maintainer DefenseDUC THANG LUURead-only repository governance and GitHub Actions risk audits with reviewable patches.

Plugin name

Awesome Maintainer Defense

Show in context →
2 more matching sources

Package name

awesome-maintainer-defense

Show in context →

Publisher subtitle

Audit repository trust safely

Show in context →
SecurityVersion 1.1.1
View details →
BitdefenderBitdefenderBitdefender Plugin has a collection of free tools which help users avoid malware, phishing attempts, and counterfeit websites which inclu...

Plugin name

Bitdefender

Show in context →
2 more matching sources

Package name

app-6a9fda75d4188191a6e27100ffefd446

Show in context →

Publisher description

Bitdefender Plugin has a collection of free tools which help users avoid malware, phishing attempts, and counterfeit websites which includes: - Link Checker - Phone Number - Password Generator - Digital Fo…

Show in context →
SecurityVersion 1.0.0
View details →
SafeguardSafeguardSafeguard helps users inspect software supply chain risk from ChatGPT, including vulnerabilities, SBOMs, findings, projects, components, ...

Plugin name

Safeguard

Show in context →
1 more matching sources

Publisher description

Safeguard helps users inspect software supply chain risk from ChatGPT, including vulnerabilities, SBOMs, findings, projects, components, policies, guardrails, compliance reports, remediation plans, SCM…

Show in context →
SecurityVersion 1.0.0
View details →
Codex Security CloudOpenAICloud security scans, findings, and continuous repository monitoring.

Package name

defense-factory

Show in context →
SecurityVersion 0.1.1
View details →
Aivana Security InvestigatorAivanaGuided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API.

Publisher subtitle

Run safe KQL investigations

Show in context →
3 more matching sources

Publisher capabilities · listing

Direct OAuth/OBO Defender XDR KQL API Read-only cross-domain investigations Evidence packages and analyst review

Show in context →

Publisher keywords · listing

defender-xdr soc security-investigation kql microsoft-graph sentinel

Show in context →

Publisher full description

Translates user requests into transparent KQL and executes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution.

Show in context →
SecurityVersion 1.1.1
View details →
ToolCheck by M8venM8ven Inc.ToolCheck is M8ven's trust layer for the MCP ecosystem. Give it a GitHub URL or npm package name and it returns an independent trust scor...

Publisher subtitle

Is this MCP safe to connect?

Show in context →
SecurityVersion 1.0.0
View details →
Authorised OSINT ToolkitRobert LaneNine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting.

Publisher capabilities · listing

Plan lawful defensive OSINT reviews Assess organisational attack surfaces Review email and cloud exposure Analyse identity security architecture Design exposure monitoring processes Quantify and prioritise security…

Show in context →
1 more matching sources

Publisher keywords · listing

defensive-osint attack-surface exposure-analysis security risk

Show in context →
SecurityVersion 1.1.0
View details →
GuardioGuardioCheck suspicious links, review known data leaks, and understand your Guardio protection.

Publisher capabilities · listing

…and scan activity Review security recommendations Set up browser protection Send requested product feedback

Show in context →
1 more matching sources

Publisher full description

…ds. When you ask, Guardio can guide setup of its protection in a supported browser and receive your feedback about these tools. Setup depends on browser support and available permissions. Account features depend on your access and plan. Guardio records each link check on your account, and a dangerou…

Show in context →
SecurityVersion 0.2.2
View details →
CalmidoCalmido

Publisher description

…ss, from Calmido's phone directory. Use it when someone asks who called them, whether a number is safe, spam or a scam, or which company a number belongs to.

Show in context →
SecurityVersion 1.0.0
View details →
Cloudflare SecurityThe Doers Firm

Publisher full description

…-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security.

Show in context →
SecurityVersion 0.1.0
View details →
DecionisBinaries

Publisher description

…t actions. Decionis authorizes execution; it does not perform the downstream action. Payments, transfers, trades, orders, and system changes remain the responsibility of the connected executor.

Show in context →
SecurityVersion 1.0.1
View details →
Is It Legit by M8venM8ven Inc.

Publisher description

…tool from M8ven. Given a brand name or URL, it analyzes 100+ trust signals and returns a verdict (safe / caution / avoid) with key findings. Designed for "is this site real?" / "should I buy from this brand?" / "is this an Instagram-ad scam?" type questions.

Show in context →
SecurityVersion 1.0.0
View details →
IsThisSpamUltron Developments Pty. Ltd.

Publisher description

…umbers, messages, links, websites, and email addresses using structured scam signals and cautious safety guidance. Results distinguish likely scams from unverified findings; no result is a guarantee of safety.

Show in context →
SecurityVersion 0.1.0
View details →
MinimusMinimus

Publisher full description

Minimus plugin that teaches AI coding tools to build Dockerfiles and Kubernetes manifests with hardened near-zero-CVE images

Show in context →
SecurityVersion 1.0.4
View details →
PrivacyHawkPrivacyHawk, Inc

Publisher description

…r digital footprint, decrease spam, and protect yourself from identity theft, scams, and hacks. Key Features: - Delete your data from unwanted databases by automatically finding and removing your private information from companies that expose or sell it. - Stop companies from selling your data by ea…

Show in context →
SecurityVersion 1.0.0
View details →
Prompt Injection SecurityThe Doers Firm

Publisher full description

…vidence-linked attack-path analysis, calibrated severity and confidence, layered mitigations, and safe regression tests. Results are advisory and cannot guarantee prevention. Customer support: https://thedoersfirm.com/support.

Show in context →
SecurityVersion 0.1.0
View details →
RelayShield Scam ChecksRelayShield

Publisher description

…Free, no signup, no API key. Verdicts are FLAGGED or unknown — the tools never report anything as safe, because absence of evidence is not evidence of absence.

Show in context →
SecurityVersion 1.0.0
View details →
SkarnSkarn Software OÜ

Publisher full description

…user has explicitly confirmed as a false positive. The skill runs a local shell command, so it is offered in Codex. It does not carry the skarn binary, which is installed separately: brew install skarn-security/tap/skarn npm install -g @skarn-security/skarn Release binaries: https://github.com/skarn…

Show in context →
SecurityVersion 0.27.0
View details →
Skill Risk CheckOrbral

Publisher full description

…ure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as a safety certification; it never runs, installs, enables, or uploads the target.

Show in context →
SecurityVersion 0.1.5
View details →
SmartphoneKeySmartphoneKey

Publisher description

…actions are secured through your SmartphoneKey account, so you can only manage locks you own. More features coming soon — including door access control and key management.

Show in context →
SecurityVersion 1.0.0
View details →