Security Codex plugins

Plugin name

Vibe Code Security Reviewer

Package name

haveibeensquatted

Publisher full description

…cutes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution.

Publisher description

…mers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-compatible client) to the Ansvar Gateway and run compliance work directly in that assistant: regulatory gap analyses, threat models (STRIDE/LINDDUN, TARA), DPIAs and audit preparation, grounded in more than…

Publisher full description

…or execute submitted commands. Requires Node.js 22.13.0 or newer on macOS arm64, Linux x64/arm64 (glibc), or Windows x64.

Publisher description

…rm the downstream action. Payments, transfers, trades, orders, and system changes remain the responsibility of the connected executor.

Publisher full description

…WE ID, location, source and confidence. It separates symbolic findings, which the Frame README describes as proven reachable, from model-only findings that are leads to check. It then triages false positives, proposes fixes with frame fix as a diff for you to review, changes files only after you agr…

Publisher full description

…an also check whether an email address or phone number appears in known data breaches. Results describe known exposure; they do not reveal leaked passwords. When you ask, Guardio can guide setup of its protection in a supported browser and receive your feedback about these tools. Setup depends on br…

Publisher full description

…om selling your data by easily sending "Do Not Sell" requests to thousands of businesses. - Unsubscribe from spam emails and clean up your inbox. Now supporting Gmail, Yahoo, and Microsoft accounts—including Hotmail, MSN, Live, and Outlook. - Use advanced data broker tools to opt out of data brokers…

Publisher full description

…ontent, and tool workflows for prompt-injection risks. Get evidence-linked attack-path analysis, calibrated severity and confidence, layered mitigations, and safe regression tests. Results are advisory and cannot guarantee prevention. Customer support: https://thedoersfirm.com/support.

Publisher description

…ervations, and export a plain-text evidence report. Incomplete phases stay unresolved. Results describe observed request attempts and supplied evidence, not legal compliance or proof that a fix is complete.

Publisher full description

…ct when the scan completes. The included skill walks through pivoting from one phishing URL to its sibling hosts, and avoids two common mistakes: giving a domain a verdict that belongs to a page that only redirected to it, or to another tenant on a shared hosting platform; and blocking on shared IP…

Publisher full description

…before Codex runs it, and a skill that reconstructs recent work from session history. Both are distributed through the plugin marketplace at https://github.com/skarn-security/agent-guard. Documentation: https://getskarn.com/integrations/ Support: hello@getskarn.com

Publisher full description

…or hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as a safety certification; it never runs, installs, enables, or uploads the target.

Publisher description

…scans your Google Drive in real time and shows you exactly which files are publicly shared or accessible by specific people. No setup needed — just ask.

Publisher full description

…IDOC platform, provide a repository connection, or run the VIDOC scanning service. Each review describes its scope and missing evidence. Learn more about Vidoc Security Lab at vidocsecurity.com.