Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 11,464 plugins across 14 categories.
Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 13
Plugin growth →All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
CVE Risk CheckAgent ToolsTriage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole d... Publisher capabilities · listing …Vulnerabilities catalog lists a CVE, with its due date and required action Adds the EPSS score: the modelled chance of exploitation in the next 30 days Gives each CVE a priority: exploited, likely or routine Ranks a batch of up to 10 CVEs with the most urgent first Reads an npm, pnpm, yarn, Poetry,… Show in context →1 more matching sourcesPublisher full description …ities (KEV) catalog lists the CVE, with CISA's due date and required action. FIRST's EPSS gives the modelled probability that the CVE is exploited in the next 30 days. Each CVE gets a priority: "exploited" when CISA lists it, "likely" when its EPSS score is 0.1 or more, otherwise "routine", or "unkn… Show in context → |
SecurityVersion 1.2.0 | View details → |
KeybookailuntzFind configured website logins, macOS passwords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintain... Publisher capabilities · listing …密码变体和 PIN，供已授权的网站任务使用 为 npm、Hugging Face、Docker、GitHub/GitLab、Cloudflare 等操作提供已配置的服务令牌 为 OpenRouter、ModelScope 等模型 API 调用提供已配置的密钥 区分 macOS 登录与钥匙串密码，并为 SSH 操作提供私钥文件路径 向可信本地程序注入选定凭据，不在对话中输出明文 Show in context →2 more matching sourcesPublisher description Find configured website logins, macOS passwords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintained local YAML file; inject only the selected value into an authorized trusted process without printing secrets. Show in context →Publisher full description …ging Face 模型或数据集、推送 Docker 镜像、操作 GitHub/GitLab、部署 Cloudflare 时，可按名称查找 services 中对应的令牌。调用 OpenRouter、ModelScope 等模型 API 时，查找 llm 中的密钥；连接已授权的 SSH 主机时，查找 ssh 中的私钥文件路径。实际可用条目取决于你自己的 YAML，Keybook 不会假定某个服务已配置。 Keybook 先搜索条目名称，再用随包脚本把选定值注入可信目标程序的环境变量，并继续任务。list/search 只返回名称，get 始终遮盖值，run 隐藏子进程输出并只报告状态；不会在对… Show in context → |
SecurityVersion 0.6.1 | View details → |
ScamCheckmmccoAnalyze a message, a link or a sender for fraud/phishing risk signals with a deterministic heuristic model, and get safety tips and offic... Publisher capabilities · listing …yzes a message, link or sender and flags fraud/phishing risk signals with a deterministic heuristic model. Returns an analysis of risk signals, not a guaranteed verdict; absence of a signal does not prove a message safe. Also gives fraud safety tips and official reporting resources. Read-only, state… Show in context →2 more matching sourcesPublisher description …nalyze a message, a link or a sender for fraud/phishing risk signals with a deterministic heuristic model, and get safety tips and official reporting resources. An analysis of risk signals, not a guaranteed verdict; read-only, stateless, no account. Show in context →Publisher full description …IP address, a missing HTTPS, a look-alike or free-address domain. It uses a deterministic heuristic model: the same input always gives the same signals, nothing is generated by a language model, no account is needed, nothing is stored and no file is read. The result is an ANALYSIS of risk signals, n… Show in context → |
SecurityVersion 0.1.0 | View details → |
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Publisher keywords · listing security code-review diff-review appsec threat-modeling Show in context → |
SecurityVersion 0.1.32 | View details → |
AnomityAnomity Publisher full description …y devices use them. Work the allowlist. See what is waiting for approval across AI tools, AI sites, model providers, MCP servers, extensions, plugins and skills. Admins can approve the items they confirm, when an owner has turned that on in Anomity Settings. Audit changes and compliance. Ask what ch… Show in context → |
SecurityVersion 0.1.0 | View details → |
Ansvar GatewayAnsvar AI Publisher description …Ansvar Gateway and run compliance work directly in that assistant: regulatory gap analyses, threat models (STRIDE/LINDDUN, TARA), DPIAs and audit preparation, grounded in more than 300 curated corpora of EU and international legislation, case law, preparatory works, regulator guidance and security… Show in context → |
SecurityVersion 1.0.0 | View details → |
ArrowMemArrowMem Publisher full description …own hardware, plus answers about ArrowMem's privacy design. You can check whether your self-hosted model server is reachable from outside your machine, check whether it still matches the hardening guide, read the live-tested hardening procedure itself, and list the AI tools configured on your machi… Show in context → |
SecurityVersion 1.0.1 | View details → |
Diopter AIDiopter AI Inc Publisher full description …. Upload a file in chat or share a link, and Diopter runs it through its trained deepfake detection models, then returns a verdict (for example: no AI detected, AI-generated, or inconclusive) with a confidence level and a link to the full report on diopter.ai. Use it to sanity-check a suspicious ima… Show in context → |
SecurityVersion 1.0.0 | View details → |
Frame Security ScanFrame (lambdasec) Publisher full description …fidence. It separates symbolic findings, which the Frame README describes as proven reachable, from model-only findings that are leads to check. It then triages false positives, proposes fixes with frame fix as a diff for you to review, changes files only after you agree, and re-scans to confirm. Be… Show in context → |
SecurityVersion 0.1.2 | View details → |
Have I Been SquattedHave I Been Squatted Publisher full description …r your monitored domains, and Email Intelligence and Site Canary events, from the last 30 days. The model reads the field catalog before writing a query, so you can ask in plain language. - Alerts: review the alerts your detection rules raised, the evidence each cites and whether each response reach… Show in context → |
SecurityVersion 1.1.2 | View details → |
Orca SecurityOrca Security Publisher description …ns every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors in reachability, blast radius, and business impact from the first response. For teams that want the reasoning without writing the prompts, Orca… Show in context → |
SecurityVersion 1.0.0 | View details → |
SkarnSkarn Software OÜ Publisher full description …s a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the session transcripts that AI coding assistants have already written to disk and… Show in context → |
SecurityVersion 0.27.0 | View details → |
Tahr SecurityTahr Security Inc Publisher full description …kflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context → |
SecurityVersion 0.3.3 | View details → |
Catalog results: live query. The homepage cache is not used for this view.