Security Codex plugins

Publisher full description

…h dependencies in this package-lock.json should I fix first?". CVE Risk Check reads two free public sources. The National Vulnerability Database (NVD) gives the description, the CVSS score and severity, the publication date, a link to a patch or vendor advisory when one is tagged, and whether the CI… …s matched to its known advisories in OSV.dev, which collects the GitHub Advisory Database and other open databases. The advisories' CVE ids are then checked against the CISA exploited list and EPSS. The answer is the few packages to fix first, each with a priority (malicious, exploited, likely, rout…

Publisher full description

…not prove a message is safe. ScamCheck also returns practical safety tips and official reporting resources (the Canadian Anti-Fraud Centre). It is an information and prevention tool; it does not contact anyone, does not report on your behalf and does not open attachments.

Publisher full description

…es today and what is planned, which government disability-claim packs run inside ArrowMem, what the open Data Dignity Standard (v0.5 draft for public comment) says, and verified facts about a local business, entered by hand from its own published sources with its consent, each with its source and date. A security alert relay can also send a push notice to you or your family. The check tools work only from diagnostic output you paste; they do n…

Publisher description

Guides a step-by-step security scan of Python code with the open-source Frame command-line tool.

Publisher description

…For teams that want the reasoning without writing the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills. Type "triage alert orca-9012345" and the orca-alert-triage skill handles retrieval, analysis, and formatting. Teams can fork it, modify it, and extend it to their o…

Publisher full description

…then re-run the check to verify the result. Draft security policies from your recorded answers and open direct browser links to review controls, tests, policies, risks and evidence. After signing in to Screenata and selecting a workspace, assess selected cloud accounts, identity services, code repo… …account-specific consent; provider credentials stay out of chat and tool arguments, and repository source stays local. Fix availability depends on the check and permissions, policies need human approval, and baseline scores are separate from audit readiness. Your auditor issues the report or certif…