MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,295 plugins across 14 categories.

Security plugins 28

1–28 of 28

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developerCategoryFollow
Aivana Security InvestigatorAivanaGuided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API.

Publisher subtitle

Run safe KQL investigations

Show in context →
1 more matching sources

Publisher full description

Translates user requests into transparent KQL and executes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution.

Show in context →
SecurityVersion 1.1.1
View details →
GuardioGuardioCheck suspicious links, review known data leaks, and understand your Guardio protection.

Publisher capabilities · listing

Check suspicious links Check links in messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested product feedback

Show in context →
2 more matching sources

Publisher description

Check suspicious links, review known data leaks, and understand your Guardio protection.

Show in context →

Publisher full description

Guardio helps you check suspicious links and understand your online protection from ChatGPT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect you…

Show in context →
SecurityVersion 0.2.2
View details →
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation.

Publisher capabilities · listing

…, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target

Show in context →
1 more matching sources

Publisher full description

…ngs with file-and-line evidence and remediation. Do not use it as a safety certification; it never runs, installs, enables, or uploads the target.

Show in context →
SecurityVersion 0.1.5
View details →
KeybookailuntzFind configured website logins, macOS passwords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintain...

Publisher

ailuntz

Show in context →
1 more matching sources

Publisher full description

…AML,Keybook 不会假定某个服务已配置。 Keybook 先搜索条目名称,再用随包脚本把选定值注入可信目标程序的环境变量,并继续任务。list/search 只返回名称,get 始终遮盖值,run 隐藏子进程输出并只报告状态;不会在对话中展示明文。SSH 条目是文件路径,由目标程序传给 SSH 客户端。你自行维护本地 YAML;插件不会创建、加密或同步它,也不提供浏览器自动填充。需要本机终端与 Node.js 22+。

Show in context →
SecurityVersion 0.6.1
View details →
Above SecurityAbove Security

Publisher description

…nt timelines, evidence, and insights; look up devices, monitored applications, and audit logs; and run investigative searches across your tenant. You can also triage from chat — set incident status, verdict, and resolution notes, or add an identity to the watch list. Access requires an Above Securit…

Show in context →
SecurityVersion 1.0.0
View details →
AJAXX Data ScrubberFORTRESS APPS LLC

Publisher description

…nswers common questions about scans, monitoring, and protection options. This ChatGPT app does not run scans, show personal scan results, perform removals, or manage accounts. For secure account access, scans, removals, billing, or support, users are directed to the official AJAXX website.

Show in context →
SecurityVersion 1.0.0
View details →
Ansvar GatewayAnsvar AI

Publisher description

…dy use (Claude, Microsoft Copilot, ChatGPT or any MCP-compatible client) to the Ansvar Gateway and run compliance work directly in that assistant: regulatory gap analyses, threat models (STRIDE/LINDDUN, TARA), DPIAs and audit preparation, grounded in more than 300 curated corpora of EU and internati…

Show in context →
SecurityVersion 1.0.0
View details →
Atbash SafetyAtbash AI

Publisher full description

…r Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it does not use an MCP server. Requires a supported local Codex environment, Node.js 22.13 or newer, an Atbash account with a regis…

Show in context →
SecurityVersion 0.3.3
View details →
Authorised OSINT ToolkitRobert Lane

Publisher full description

…reporting. The replacement planning, identity and exposure-analysis skills exclude credentials, account enumeration, authentication testing, exploitation, access-control bypass and surveillance.

Show in context →
SecurityVersion 1.1.0
View details →
Authorized Security ReviewIssam Chaaban

Publisher full description

…s source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend.

Show in context →
SecurityVersion 1.0.1
View details →
Awesome Maintainer DefenseDUC THANG LUU

Publisher full description

Inspect repository policy, GitHub Actions trust boundaries, and moderation automation without network access or repository mutation; generate reviewable remediation patches on request.

Show in context →
SecurityVersion 1.1.1
View details →
BastionBastion Technologies

Publisher description

…dence, and submit controls for review. Ask your knowledge base security and compliance questions grounded in your own policies and documentation. Monitor code security findings and GitHub configuration status. All data is scoped to your authenticated account - you only ever see your own tenant.

Show in context →
SecurityVersion 1.0.0
View details →
BitdefenderBitdefender

Publisher description

…nder Plugin has a collection of free tools which help users avoid malware, phishing attempts, and counterfeit websites which includes: - Link Checker - Phone Number - Password Generator - Digital Footprint Checker - Product Recommendations

Show in context →
SecurityVersion 1.0.0
View details →
CalmidoCalmido

Publisher description

Look up who is behind a phone number in the Netherlands, Belgium or Luxembourg: community reports, spam and scam categories, a trust verdict and the registered business, from Calmido's phone directory. Use it when someone asks who called them, whether a number is safe, spam or a scam…

Show in context →
SecurityVersion 1.0.0
View details →
CertScore.ai Privacy ScannerCertScore.ai, LLC

Publisher description

…ie/tracker evidence, then continue to persisted privacy findings, typed GPC response comparisons, bounded Accept and Reject observations, policy signals, and HTTPS/TLS. Results preserve provenance and explicit coverage limitations for human review; they are not legal advice, certification, or a comp…

Show in context →
SecurityVersion 2.0.0
View details →
Cloudflare SecurityThe Doers Firm

Publisher description

Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance.

Show in context →
1 more matching sources

Publisher full description

Cloudflare Security reviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings,…

Show in context →
SecurityVersion 0.1.0
View details →
CookieYesCookieYes Limited

Publisher description

…1.5M+ websites. This connector puts it inside your chat. Check whether your cookie banner is live. Run a cookie scan to find every cookie and tracker on your site. Review your GDPR and CCPA compliance settings. Update your cookie banner in seconds. Typical requests: "Audit my site for GDPR complianc…

Show in context →
SecurityVersion 1.0.0
View details →
DecionisBinaries

Publisher description

…very evaluation produces a verifiable Decision Dossier and cryptographic evidence for audit and accountability. Use Decionis to govern agent-initiated payments, refunds, commerce operations, enterprise workflows, infrastructure changes, and other high-impact actions. Decionis authorizes execution; i…

Show in context →
SecurityVersion 1.0.1
View details →
IsThisSpamUltron Developments Pty. Ltd.

Publisher description

…s using structured scam signals and cautious safety guidance. Results distinguish likely scams from unverified findings; no result is a guarantee of safety.

Show in context →
SecurityVersion 0.1.0
View details →
MalwarebytesMalwarebytes Inc.

Publisher description

…you click, call, or reply. Get instant reputation insights, ownership details, and risk levels for unknown numbers, suspicious emails, shortened URLs, and unfamiliar links - right inside ChatGPT.

Show in context →
SecurityVersion 1.0.0
View details →
Orca SecurityOrca Security

Publisher description

…GPT. That means every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors in reachability, blast radius, and business impact from the first response. For teams that want the reasoning without writing the p…

Show in context →
SecurityVersion 1.0.0
View details →
PalisadeSamuel Chenard

Publisher description

…tize fixes and prepare DNS change plans. This plugin provides read-only access to your Palisade account: it does not publish DNS records, modify domains, send email, or manage billing. A Palisade account is required.

Show in context →
SecurityVersion 1.0.0
View details →
PrivacyHawkPrivacyHawk, Inc

Publisher description

…, and protect yourself from identity theft, scams, and hacks. Key Features: - Delete your data from unwanted databases by automatically finding and removing your private information from companies that expose or sell it. - Stop companies from selling your data by easily sending "Do Not Sell" request…

Show in context →
SecurityVersion 1.0.0
View details →
ProofXCyberSec AI Ltd

Publisher description

…tection history - Get digital fingerprints of your content How it works: 1. Connect your ProofX account (free signup at proofx.co.uk) 2. Ask ChatGPT to protect your content 3. Get a verification link anyone can use to prove you created it Used by 300+ creators including photographers, writers, journ…

Show in context →
SecurityVersion 1.0.0
View details →
RelayShield Scam ChecksRelayShield

Publisher description

…ether an email appears in known data breaches. Free, no signup, no API key. Verdicts are FLAGGED or unknown — the tools never report anything as safe, because absence of evidence is not evidence of absence.

Show in context →
SecurityVersion 1.0.0
View details →
SkarnSkarn Software OÜ

Publisher full description

…d-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the session transcripts that AI coding assistants have already written to disk and reports le…

Show in context →
SecurityVersion 0.27.0
View details →
SmartphoneKeySmartphoneKey

Publisher description

…ications • Remove residents by name or email All actions are secured through your SmartphoneKey account, so you can only manage locks you own. More features coming soon — including door access control and key management.

Show in context →
SecurityVersion 1.0.0
View details →
ToolCheck by M8venM8ven Inc.

Publisher description

…t score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code analysis, runtime behavioral observation in a sandbox, CVE scanning, and a semantic check comparing the tool's declared behavior against what its code actually does — catching the gap between "read-only market d…

Show in context →
SecurityVersion 1.0.0
View details →