MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,337 plugins across 14 categories.

Security plugins 11

1–11 of 11

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developer	Category	Follow
Vibe Code Security ReviewerThe Doers FirmAdvanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Plugin name Vibe Code Security Reviewer Show in context → 3 more matching sources Package name vibe-code-security-reviewer Show in context → Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse… Show in context → Publisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context →	SecurityVersion 0.1.0	View details →
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Publisher keywords · listing security code-review diff-review appsec threat-modeling Show in context → 5 more matching sources Plugin name Codex Security Show in context → Package name codex-security Show in context → Publisher subtitle Security scanning for your codebase Show in context → Publisher description Codex Security workflows for security scans, analysis, and investigation. Show in context → Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context →	SecurityVersion 0.1.31	View details →
Authorized Security ReviewIssam Chaaban Publisher full description …for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend. Show in context → 3 more matching sources Plugin name Authorized Security Review Show in context → Package name authorized-security-review Show in context → Publisher description Evidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools. Show in context →	SecurityVersion 1.0.1	View details →
Tahr SecurityTahr Security IncEvidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Package name tahr-codex-plugin Show in context → 1 more matching sources Publisher full description Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context →	SecurityVersion 0.3.3	View details →
GuardioGuardio Publisher full description Guardio helps you check suspicious links and understand your online protection from ChatGPT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect your Guardio account to review protection setup, scan activity, recent data leaks, linked-service counts, and security recommendations. You can also check whether an email address or phone number appears in known data breach… Show in context → 2 more matching sources Publisher capabilities · listing Check suspicious links Check links in messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested product feedback Show in context → Publisher description Check suspicious links, review known data leaks, and understand your Guardio protection. Show in context →	SecurityVersion 0.2.2	View details →
Atbash SafetyAtbash AI Publisher full description Atbash Safety checks supported Codex tool calls against your Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it… …ent private key and exact organization name in the local Atbash configuration file, then explicitly review and trust the hook in Codex. Never paste private keys into chat. Once configured, enabled, and trusted, the hook sends tool-call details through the SDK to Atbash for a judgment. ALLOW permits… Show in context → 2 more matching sources Publisher keywords · listing atbash codex safety policy guardrails Show in context → Publisher description Automatically guards supported Codex tool calls with Atbash safety judgments and provides secure local setup guidance. Show in context →	SecurityVersion 0.3.3	View details →
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Publisher keywords · listing endor-labs security sca sast codex Show in context → 2 more matching sources Publisher description Endor Labs security workflows and setup for Codex. Show in context → Publisher full description …ged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more. Show in context →	SecurityVersion 2.2.2	View details →
SkarnSkarn Software OÜ Publisher full description …ine and reports risky declarations: hooks, MCP servers, and permission grants that could run remote code or send data off the machine. Both passes run entirely on this machine and make no network call. Neither modifies a session transcript or a configuration file, and every credential value in the output is masked, so a finding names a rule and a masked preview and never the credential itself. Skarn surfaces findings and does not rotate a credential or edit a configuration on its own: the skill proposes, and the user decides. The one thing the skill c… Show in context → 1 more matching sources Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context →	SecurityVersion 0.27.0	View details →
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher keywords · listing plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code Show in context → 1 more matching sources Publisher description Scan agent skills and plugins locally for reviewable risk patterns before installation. Show in context →	SecurityVersion 0.1.5	View details →
BastionBastion Technologies Publisher description …ect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance status across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and submit controls for review. Ask your knowledge base security and compliance questions grounded in your own policies and documentation. Monitor code security findings and GitHub configuration status. All data is scoped to your authenticated account - you only ever see your own tenant. Show in context →	SecurityVersion 1.0.0	View details →
Cloudflare SecurityThe Doers Firm Publisher full description Cloudflare Security reviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security. Show in context →	SecurityVersion 0.1.0	View details →