MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,319 plugins across 14 categories.

Security plugins 27

1–27 of 27

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developerCategoryFollow
AJAXX Data ScrubberFORTRESS APPS LLCAJAXX Data Scrubber in ChatGPT provides read-only information about digital privacy risks and data broker exposure. It explains how perso...

Plugin name

AJAXX Data Scrubber

Show in context →
1 more matching sources

Publisher description

AJAXX Data Scrubber in ChatGPT provides read-only information about digital privacy risks and data broker exposure. It explains how personal data appears online, how removal services work, and answers common que…

Show in context →
SecurityVersion 1.0.0
View details →
CertScore.ai Privacy ScannerCertScore.ai, LLCScan public websites for fast preliminary cookie/tracker evidence, then continue to persisted privacy findings, typed GPC response compar...

Plugin name

CertScore.ai Privacy Scanner

Show in context →
2 more matching sources

Publisher

CertScore.ai, LLC

Show in context →

Publisher description

Scan public websites for fast preliminary cookie/tracker evidence, then continue to persisted privacy findings, typed GPC response comparisons, bounded Accept and Reject observations, policy signals,…

Show in context →
SecurityVersion 2.0.0
View details →
RelayShield Scam ChecksRelayShieldRelayShield Free Scam Checks screens links, crypto wallets, suspicious emails, and email addresses against RelayShield's threat-intellige...

Plugin name

RelayShield Scam Checks

Show in context →
2 more matching sources

Publisher subtitle

Free scam checks for links

Show in context →

Publisher description

RelayShield Free Scam Checks screens links, crypto wallets, suspicious emails, and email addresses against RelayShield's threat-intelligence corpus — 115 monitored Telegram marketplaces, 494K+ indicators, 7.8M+ citati…

Show in context →
SecurityVersion 1.0.0
View details →
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation.

Publisher subtitle

Security scanning for your codebase

Show in context →
2 more matching sources

Publisher description

Codex Security workflows for security scans, analysis, and investigation.

Show in context →

Publisher full description

Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts.

Show in context →
SecurityVersion 0.1.31
View details →
IsThisSpamUltron Developments Pty. Ltd.IsThisSpam checks suspicious phone numbers, messages, links, websites, and email addresses using structured scam signals and cautious saf...

Publisher subtitle

Check scam signals

Show in context →
1 more matching sources

Publisher description

…am checks suspicious phone numbers, messages, links, websites, and email addresses using structured scam signals and cautious safety guidance. Results distinguish likely scams from unverified findings; no result is a guarantee of safety.

Show in context →
SecurityVersion 0.1.0
View details →
SkarnSkarn Software OÜAudit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, r...

Publisher subtitle

AI session security scanner

Show in context →
2 more matching sources

Publisher capabilities · listing

Scan AI coding sessions for leaked credentials Vet assistant hooks, MCP servers and permission grants

Show in context →

Publisher full description

Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the sessi…

Show in context →
SecurityVersion 0.27.0
View details →
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation.

Publisher subtitle

Scan before you install.

Show in context →
4 more matching sources

Publisher capabilities · listing

Scan local skills and plugins before install Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the ta…

Show in context →

Publisher keywords · listing

plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code

Show in context →

Publisher description

Scan agent skills and plugins locally for reviewable risk patterns before installation.

Show in context →

Publisher full description

Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence an…

Show in context →
SecurityVersion 0.1.5
View details →
GuardioGuardioCheck suspicious links, review known data leaks, and understand your Guardio protection.

Publisher capabilities · listing

…links Check links in messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested product feedback

Show in context →
1 more matching sources

Publisher full description

…thout sending the message body to Guardio. Connect your Guardio account to review protection setup, scan activity, recent data leaks, linked-service counts, and security recommendations. You can also check whether an email address or phone number appears in known data breaches. Results describe know…

Show in context →
SecurityVersion 0.2.2
View details →
KeybookailuntzFind configured website logins, macOS passwords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintain...

Publisher capabilities · listing

…PIN,供已授权的网站任务使用 为 npm、Hugging Face、Docker、GitHub/GitLab、Cloudflare 等操作提供已配置的服务令牌 为 OpenRouter、ModelScope 等模型 API 调用提供已配置的密钥 区分 macOS 登录与钥匙串密码,并为 SSH 操作提供私钥文件路径 向可信本地程序注入选定凭据,不在对话中输出明文

Show in context →
1 more matching sources

Publisher full description

…Face 模型或数据集、推送 Docker 镜像、操作 GitHub/GitLab、部署 Cloudflare 时,可按名称查找 services 中对应的令牌。调用 OpenRouter、ModelScope 等模型 API 时,查找 llm 中的密钥;连接已授权的 SSH 主机时,查找 ssh 中的私钥文件路径。实际可用条目取决于你自己的 YAML,Keybook 不会假定某个服务已配置。 Keybook 先搜索条目名称,再用随包脚本把选定值注入可信目标程序的环境变量,并继续任务。list/search 只返回名称,get 始终遮盖值,run 隐藏子进程输出并只报告状态;不会在对话中展示明…

Show in context →
SecurityVersion 0.6.1
View details →
NightVisionNightVision Security, Inc.NightVision application security workflows for local development and CI/CD.

Publisher capabilities · listing

API discovery DAST scan configuration CI/CD security guidance Finding triage

Show in context →
1 more matching sources

Publisher full description

Guide NightVision API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI.

Show in context →
SecurityVersion 0.2.0
View details →
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex.

Publisher keywords · listing

endor-labs security sca sast codex

Show in context →
1 more matching sources

Publisher full description

Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more.

Show in context →
SecurityVersion 2.2.2
View details →
Above SecurityAbove Security

Publisher description

…ution notes, or add an identity to the watch list. Access requires an Above Security account and is scoped to your role and company; read and write are governed by explicit OAuth consent.

Show in context →
SecurityVersion 1.0.0
View details →
Ansvar GatewayAnsvar AI

Publisher description

…returns an error instead of guessing, accuracy over availability is an architectural rule, not a disclaimer. All content is ingested from the original publisher under verified licensing, so results can be relied on and redistributed. Ansvar serves legal insurers, compliance teams, security consulta…

Show in context →
SecurityVersion 1.0.0
View details →
Authorized Security ReviewIssam Chaaban

Publisher full description

…horized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend.

Show in context →
SecurityVersion 1.0.1
View details →
BastionBastion Technologies

Publisher description

…cies and documentation. Monitor code security findings and GitHub configuration status. All data is scoped to your authenticated account - you only ever see your own tenant.

Show in context →
SecurityVersion 1.0.0
View details →
BreezeBreeze Security

Publisher description

…ze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity risk data through ChatGPT and Codex.

Show in context →
SecurityVersion 1.0.0
View details →
CalmidoCalmido

Publisher description

…who is behind a phone number in the Netherlands, Belgium or Luxembourg: community reports, spam and scam categories, a trust verdict and the registered business, from Calmido's phone directory. Use it when someone asks who called them, whether a number is safe, spam or a scam, or which company a num…

Show in context →
SecurityVersion 1.0.0
View details →
Codex Security CloudOpenAI

Publisher description

Cloud security scans, findings, and continuous repository monitoring.

Show in context →
1 more matching sources

Publisher full description

Codex Security Cloud brings cloud security scans, findings, and continuous repository monitoring into your workspace.

Show in context →
SecurityVersion 0.1.1
View details →
CookieYesCookieYes Limited

Publisher description

…es. This connector puts it inside your chat. Check whether your cookie banner is live. Run a cookie scan to find every cookie and tracker on your site. Review your GDPR and CCPA compliance settings. Update your cookie banner in seconds. Typical requests: "Audit my site for GDPR compliance", "Is my c…

Show in context →
SecurityVersion 1.0.0
View details →
Is It Legit by M8venM8ven Inc.

Publisher description

…ngs. Designed for "is this site real?" / "should I buy from this brand?" / "is this an Instagram-ad scam?" type questions.

Show in context →
SecurityVersion 1.0.0
View details →
MalwarebytesMalwarebytes Inc.

Publisher description

Protect yourself from phishing and scams by verifying links, domains, emails, and phone numbers before you click, call, or reply. Get instant reputation insights, ownership details, and risk levels for unknown numbers, suspicious email…

Show in context →
SecurityVersion 1.0.0
View details →
PrivacyHawkPrivacyHawk, Inc

Publisher description

…k helps you reduce your digital footprint, decrease spam, and protect yourself from identity theft, scams, and hacks. Key Features: - Delete your data from unwanted databases by automatically finding and removing your private information from companies that expose or sell it. - Stop companies from s…

Show in context →
SecurityVersion 1.0.0
View details →
ProofXCyberSec AI Ltd

Publisher description

…our digital content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and text with tamper-proof cryptographic proof - Verify if content is registered with ProofX using a content ID or hash - Look up creator profiles and their protection history - Get dig…

Show in context →
SecurityVersion 1.0.0
View details →
Radar LiteRed Sift

Publisher description

Analyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores on a radar chart, and generates a summary with prioritized findings and remediation guidance. Try prompts like: - Radar Lite Evaluate the DNS security of…

Show in context →
SecurityVersion 2.0.0
View details →
SafeguardSafeguard

Publisher description

…SBOMs, findings, projects, components, policies, guardrails, compliance reports, remediation plans, SCM integrations, notifications, and organization workflows.

Show in context →
SecurityVersion 1.0.0
View details →
SoluverySoluvery Inc.

Publisher description

Soluvery scans your Google Drive in real time and shows you exactly which files are publicly shared or accessible by specific people. No setup needed — just ask.

Show in context →
SecurityVersion 1.0.0
View details →
ToolCheck by M8venM8ven Inc.

Publisher description

…for the MCP ecosystem. Give it a GitHub URL or npm package name and it returns an independent trust score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code analysis, runtime behavioral observation in a sandbox, CVE scanning, and a semantic check comparing the tool's de…

Show in context →
SecurityVersion 1.0.0
View details →