Security Codex plugins

Publisher description

…t means every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors in reachability, blast radius, and business impact from the first response. For teams that want the reasoning without writing the prompts, Orca…

Publisher full description

…that inventory to the Anomity console, where policies turn it into findings. This plugin reads that data for your organization. Brief leadership. Get a posture briefing built from live data: devices reporting, open and critical findings, personal AI accounts, unknown MCP servers, plaintext secrets f… …un, what they can reach, and how many devices use them. Work the allowlist. See what is waiting for approval across AI tools, AI sites, model providers, MCP servers, extensions, plugins and skills. Admins can approve the items they confirm, when an owner has turned that on in Anomity Settings. Audit changes and compliance. Ask what ch…

Publisher full description

…json should I fix first?". CVE Risk Check reads two free public sources. The National Vulnerability Database (NVD) gives the description, the CVSS score and severity, the publication date, a link to a patch or vendor advisory when one is tagged, and whether the CISA Known Exploited Vulnerabilities (KEV) catalog lists the CVE, with CISA's due date and required action. FIRST's EPSS gives the modelled probability that the CVE is exploited in the next 30 days. Each CVE gets a priority: "exploited" when CISA lists it, "likely" when its EPSS score is 0.1 or more, otherwise "routine", or "unkn… …ithout a key, so records are cached for a few hours; a recent change to a CVE can take that long to appear, and when NVD asks this service to slow down the answer says so and when to retry. For a dependency list, pass the text of a lockfile (package-lock.json, pnpm-lock.yaml, yarn.lock, poetry.lock,…

Publisher full description

…own hardware, plus answers about ArrowMem's privacy design. You can check whether your self-hosted model server is reachable from outside your machine, check whether it still matches the hardening guide, read the live-tested hardening procedure itself, and list the AI tools configured on your machi… …sk what ArrowMem is and who operates it, how it handles retention, encryption and where processing happens, what ArrowMem's run-it-on-your-own-hardware setup does today and what is planned, which government disability-claim packs run inside ArrowMem, what the open Data Dignity Standard (v0.5 draft for public comment) says, and verified facts about a local business, entered by hand from its own published sources with its consent, each with its source and date. A…

Publisher full description

…ile it is being set up. Lookalike domains, mail servers, staging hosts and their certificates often appear before a phishing campaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enrich and hunt, for any domain - Analyze: live DNS, mail, registr… …enders the page and reports what it asks visitors for, such as passwords, one-time codes or payment data. - Certificate transparency search: find certificate names matching a pattern, such as lookalike spellings of your brand, with the last time each was seen. Answers immediately. - Typosquat scan:… …r your monitored domains, and Email Intelligence and Site Canary events, from the last 30 days. The model reads the field catalog before writing a query, so you can ask in plain language. - Alerts: review the alerts your detection rules raised, the evidence each cites and whether each response reach…

Publisher full description

…s a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the session transcripts that AI coding assistants have already written to disk and… …ction, exfiltration attempts, and the chains that connect them; each finding carries the standards mappings that apply to it, drawn from MITRE ATLAS, the OWASP Top 10 for LLM Applications 2025, the OWASP Agentic Top 10, and CWE. skarn vet reads the assistant configuration files on the same machine a… …ts risky declarations: hooks, MCP servers, and permission grants that could run remote code or send data off the machine. Both passes run entirely on this machine and make no network call. Neither modifies a session transcript or a configuration file, and every credential value in the output is mask…