Security Codex plugins

Publisher full description

…, force pushes and infrastructure changes are flagged with a risk level and a reason. - Scan source code for security issues and hardcoded secrets before committing or running it. Who it's for: developers using ChatGPT or Codex with untrusted inputs or shell access. Requires an AgentGuards account (… …ards dashboard. Limitations: the tools scan only what they are given, when they are called. They do not intercept anything automatically, and they never run, change or delete anything themselves.

Publisher full description

…he publication date, a link to a patch or vendor advisory when one is tagged, and whether the CISA Known Exploited Vulnerabilities (KEV) catalog lists the CVE, with CISA's due date and required action. FIRST's EPSS gives the modelled probability that the CVE is exploited in the next 30 days. Each CV… …lowed by a short list of the rest. A match is by exact name and version: it does not show that your code reaches the vulnerable code. It does not scan your systems, read your source code, confirm that you are vulnerable, or tell you how to exploit anything. The CVE ids and dependency lists you send…

Publisher full description

Guardio helps you check suspicious links and understand your online protection from ChatGPT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect your Guardio account to review protection setup, scan… …d security recommendations. You can also check whether an email address or phone number appears in known data breaches. Results describe known exposure; they do not reveal leaked passwords. When you ask, Guardio can guide setup of its protection in a supported browser and receive your feedback about…

Publisher full description

…mpaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enrich and hunt, for any domain - Analyze: live DNS, mail, registration, hosting, HTTP and classification for one domain, with a verdict profile and an interactive view with a screenshot and ho… …raised, the evidence each cites and whether each response reached its destination, then resolve, ignore or mark them false positive. - Results: tag a result as owned, ignored, false positive or malicious; the tag carries over to later results for the same domain. Add a domain you analyzed to a moni…

Publisher full description

…that make it safer and a link to the full review. Each verdict comes from reading the product's own code, docs and settings, and says which version it read and when. There are more than 800 of them, covering coding assistants, automation tools and hundreds of MCP servers. It also checks statements a… …citation. Where a claim rests on an outside source, the result says what that source does and does not establish. Ask it how or why about working with AI agents and it answers from Greenlit's books: it finds the passage in the free first chapters, the concept pages, the glossary and the claim ledge…

Publisher full description

VIDOC Security Review brings security code review workflows from Vidoc Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diffs, validate suspected vulnerabil… …t. Reviews use supplied code and the host's existing read-only access. This skills-only plugin does not connect to the VIDOC platform, provide a repository connection, or run the VIDOC scanning service. Each review describes its scope and missing evidence. Learn more about Vidoc Security Lab at vido…

Publisher full description

Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. The workflow checks that the Frame CLI is installed (and points you to the README install steps if it is not, without installing anything itself), runs frame scan, optionally adds the AI layer through a chat-completions endpoint you choose after warning that code snippets are sent to that endpoint, and r…

Publisher full description

…ine and reports risky declarations: hooks, MCP servers, and permission grants that could run remote code or send data off the machine. Both passes run entirely on this machine and make no network call. Neither modifies a session transcript or a configuration file, and every credential value in the output is masked, so a finding names a rule and a masked preview and never the credent…

Publisher keywords · listing

plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code

Publisher description

…PAA, and GDPR. Drill into failing tests, upload evidence, and submit controls for review. Ask your knowledge base security and compliance questions grounded in your own policies and documentation. Monitor code security findings and GitHub configuration status. All data is scoped to your authenticated account - you only ever see your own tenant.

Publisher full description

…pports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend.

Publisher full description

…TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security.