MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,331 plugins across 14 categories.

Security plugins 6

1–6 of 6

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developer	Category	Follow
Atbash SafetyAtbash AIAutomatically guards supported Codex tool calls with Atbash safety judgments and provides secure local setup guidance. Publisher capabilities · listing Safety policy enforcement Local credential setup Show in context → 2 more matching sources Publisher description Automatically guards supported Codex tool calls with Atbash safety judgments and provides secure local setup guidance. Show in context → Publisher full description …Codex tool calls against your Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it does not use an MCP server. Requires a supported local Codex environment, Node.js 22.13 or newer, an… Show in context →	SecurityVersion 0.3.3	View details →
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher capabilities · listing Scan local skills and plugins before install Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target Show in context → 2 more matching sources Publisher description Scan agent skills and plugins locally for reviewable risk patterns before installation. Show in context → Publisher full description Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence and reme… Show in context →	SecurityVersion 0.1.5	View details →
GuardioGuardio Publisher full description …the check. It is not a guarantee that a site or an entire message is safe. The plugin does not scan local executable files or provide continuous browser protection merely by being connected. Show in context →	SecurityVersion 0.2.2	View details →
Keybookailuntz Publisher description …sswords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintained local YAML file; inject only the selected value into an authorized trusted process without printing secrets. Show in context →	SecurityVersion 0.6.1	View details →
NightVisionNightVision Security, Inc. Publisher description NightVision application security workflows for local development and CI/CD. Show in context → 1 more matching sources Publisher full description …on API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI. Show in context →	SecurityVersion 0.2.0	View details →
SkarnSkarn Software OÜ Publisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context → 1 more matching sources Publisher full description …e entry recording a finding the user has explicitly confirmed as a false positive. The skill runs a local shell command, so it is offered in Codex. It does not carry the skarn binary, which is installed separately: brew install skarn-security/tap/skarn npm install -g @skarn-security/skarn Release bi… Show in context →	SecurityVersion 0.27.0	View details →