MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,346 plugins across 14 categories.

Security plugins 2

1–2 of 2

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developer	Category	Follow
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher subtitle Scan before you install. Show in context → 4 more matching sources Publisher capabilities · listing Scan local skills and plugins before install Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target Show in context → Publisher keywords · listing plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code Show in context → Publisher description Scan agent skills and plugins locally for reviewable risk patterns before installation. Show in context → Publisher full description Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then… Show in context →	SecurityVersion 0.1.5	View details →
SkarnSkarn Software OÜ Publisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context → 1 more matching sources Publisher full description …runs a local shell command, so it is offered in Codex. It does not carry the skarn binary, which is installed separately: brew install skarn-security/tap/skarn npm install -g @skarn-security/skarn Release binaries: https://github.com/skarn-security/skarn-dist/releases/latest When the binary is not i… Show in context →	SecurityVersion 0.27.0	View details →