MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,324 plugins across 14 categories.

Security plugins 7

1–7 of 7

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developer	Category	Follow
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Plugin name Skill Risk Check Show in context → 5 more matching sources Package name agent-skillguard Show in context → Publisher capabilities · listing Scan local skills and plugins before install Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target Show in context → Publisher keywords · listing plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code Show in context → Publisher description Scan agent skills and plugins locally for reviewable risk patterns before installation. Show in context → Publisher full description Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findi… Show in context →	SecurityVersion 0.1.5	View details →
Atbash SafetyAtbash AI Publisher full description …ncludes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it does not use an MCP server. Requires a supported local Codex environment, Node.js 22.13 or newer, an Atbash account with a registered agent, and network access to Atbash services. Configure… Show in context →	SecurityVersion 0.3.3	View details →
Authorised OSINT ToolkitRobert Lane Publisher description Nine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Show in context → 1 more matching sources Publisher full description A nine-skill toolkit for authorised organisational OSINT, attack-surface analysis, email and cloud exposure review, identity-security assurance, monitoring design, risk quantification and evidence-led report… Show in context →	SecurityVersion 1.1.0	View details →
Authorized Security ReviewIssam Chaaban Publisher full description An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting.… Show in context →	SecurityVersion 1.0.1	View details →
MinimusMinimus Publisher description Minimus hardened-image skills (Dockerfile & Kubernetes) Show in context →	SecurityVersion 1.0.4	View details →
Orca SecurityOrca Security Publisher description …irst response. For teams that want the reasoning without writing the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills. Type "triage alert orca-9012345" and the orca-alert-triage skill handles retrieval, analysis, and formatting. Teams can fork it, modify it, and… Show in context →	SecurityVersion 1.0.0	View details →
SkarnSkarn Software OÜ Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the session transcripts that AI coding assistants h… Show in context →	SecurityVersion 0.27.0	View details →