Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 11,121 plugins across 14 categories.
Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 11
1–11 of 11All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Plugin name Skill Risk Check Show in context →5 more matching sourcesPublisher capabilities · listing Scan local skills and plugins before install Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target Show in context →Publisher keywords · listing plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code Show in context →Publisher description Scan agent skills and plugins locally for reviewable risk patterns before installation. Show in context →Publisher full description Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findi… Show in context → |
SecurityVersion 0.1.5 | View details → |
AnomityAnomity Publisher description …devices, MCP servers, shadow AI accounts, exposed secrets, compliance readiness and the allowlist. Skills turn the answers into posture briefings, finding triage, device investigations and allowlist reviews. Show in context →1 more matching sourcesPublisher full description …ity shows a security team every AI tool running on its managed devices: coding agents, MCP servers, skills and instruction files, browser AI use, personal versus corporate AI accounts, and the credentials those tools can reach. Sensors deployed through your device management report that inventory to… Show in context → |
SecurityVersion 0.1.0 | View details → |
Atbash SafetyAtbash AI Publisher full description …in local configuration and uses them locally for signing. Safety policy enforcement applies to the skill's decision to proceed with an explicitly checked action: HOLD, BLOCK, and errors stop that workflow. This package does not automatically intercept other tool calls or execute submitted commands.… Show in context → |
SecurityVersion 0.3.4 | View details → |
Authorised OSINT ToolkitRobert Lane Publisher description Nine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Show in context →1 more matching sourcesPublisher full description A nine-skill toolkit for authorised organisational OSINT, attack-surface analysis, email and cloud exposure review, identity-security assurance, monitoring design, risk quantification and evidence-led report… Show in context → |
SecurityVersion 1.1.0 | View details → |
Authorized Security ReviewIssam Chaaban Publisher full description An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting.… Show in context → |
SecurityVersion 1.0.1 | View details → |
CIMTKAG Cyber Ltd Publisher full description …gence requirements, supply-chain incidents, staff-message review and tabletop exercise design. This skills-only plugin works with information supplied by the user and does not connect to external systems or perform technical response actions. Show in context → |
SecurityVersion 1.0.5 | View details → |
MinimusMinimus
|
SecurityVersion 1.0.4 | View details → |
Orca SecurityOrca Security Publisher description …irst response. For teams that want the reasoning without writing the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills. Type "triage alert orca-9012345" and the orca-alert-triage skill handles retrieval, analysis, and formatting. Teams can fork it, modify it, and… Show in context → |
SecurityVersion 1.0.0 | View details → |
ScanMalwareTriop AB Publisher description …te phishing and malicious URLs with the ScanMalware scan archive: the ScanMalware MCP server plus a skill for pivoting from one phishing URL to the rest of its campaign. Show in context →1 more matching sourcesPublisher full description …hether the result is public or unlisted, and read the verdict when the scan completes. The included skill walks through pivoting from one phishing URL to its sibling hosts, and avoids two common mistakes: giving a domain a verdict that belongs to a page that only redirected to it, or to another tena… Show in context → |
SecurityVersion 1.0.0 | View details → |
SkarnSkarn Software OÜ Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the session transcripts that AI coding assistants h… Show in context → |
SecurityVersion 0.27.0 | View details → |
VIDOC Security ReviewVidoc Security Lab Publisher description …sues, validate suspected findings, and prepare reports with supporting evidence using three defined skills. Show in context →1 more matching sourcesPublisher full description …Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diffs, validate suspected vulnerabilities, and prepare reports with evidence, impact, and proposed fixes. Findings distinguish supported issues from concerns that need m… Show in context → |
SecurityVersion 0.1.1 | View details → |