Security Codex plugins

Plugin name

Minimus

Publisher subtitle

Audit repository trust safely

Publisher capabilities · listing

Check suspicious links Check links in messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested prod…

Publisher description

…and run investigative searches across your tenant. You can also triage from chat — set incident status, verdict, and resolution notes, or add an identity to the watch list. Access requires an Above Security account and is scoped to your role and company; read and write are governed by explicit OAuth…

Publisher description

AccessOwl lets organizations manage access to SaaS apps. Users can browse available apps and request access as needed.

Publisher description

Guided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API.

Publisher description

…form removals, or manage accounts. For secure account access, scans, removals, billing, or support, users are directed to the official AJAXX website.

Publisher description

…security company that gives AI agents verifiable access to law, regulation and security standards. Customers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-compatible client) to the Ansvar Gateway and run compliance work directly in that assistant: regulator…

Publisher full description

…lls against your Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it does not use an MCP server. Requires a supported local Codex environment, Node.js 22.13 or newer, an Atbash accou…

Publisher description

Evidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools.

Publisher description

…your security and compliance posture through natural conversation. Review framework compliance status across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and submit controls for review. Ask your knowledge base security and compliance questions grounded in your own p…

Publisher description

Bitdefender Plugin has a collection of free tools which help users avoid malware, phishing attempts, and counterfeit websites which includes: - Link Checker - Phone Number - Password Generator - Digital Footprint Checker - Product Recommendations

Publisher description

Breeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity risk data through ChatGPT and Codex.

Publisher description

…number in the Netherlands, Belgium or Luxembourg: community reports, spam and scam categories, a trust verdict and the registered business, from Calmido's phone directory. Use it when someone asks who called them, whether a number is safe, spam or a scam, or which company a number belongs to.

Publisher full description

…figuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.co…

Publisher full description

Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts.

Publisher description

Cloud security scans, findings, and continuous repository monitoring.

Publisher description

…out leaving ChatGPT. Privacy laws like GDPR and CCPA require websites to get visitor consent before using cookies. CookieYes is the consent management platform (CMP) that handles this for 1.5M+ websites. This connector puts it inside your chat. Check whether your cookie banner is live. Run a cookie…

Publisher description

…s evaluates the proposed action against organization policy and determines whether it may proceed, must be held, or requires additional authority. When human approval is required, Decionis can request verified approval through Presence and re-evaluate the action using the resulting signed evidence.…

Publisher description

Is It Legit is the consumer brand-trust tool from M8ven. Given a brand name or URL, it analyzes 100+ trust signals and returns a verdict (safe / caution / avoid) with key findings. Designed for "is this site real?" / "should I buy from…

Publisher description

IsThisSpam checks suspicious phone numbers, messages, links, websites, and email addresses using structured scam signals and cautious safety guidance. Results distinguish likely scams from unverified findings; no result…

Publisher description

…logins, macOS passwords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintained local YAML file; inject only the selected value into an authorized trusted process without printing secrets.

Publisher description

…or reply. Get instant reputation insights, ownership details, and risk levels for unknown numbers, suspicious emails, shortened URLs, and unfamiliar links - right inside ChatGPT.

Publisher full description

…NightVision API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI.

Publisher description

…t, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors in reachability, blast radius, and business impact from the first response. For teams that want the reasoning without writing the prompts, Orca maintains the…

Publisher description

…ding sources, inspect DNS and SPF records, and retrieve remediation tasks with supporting evidence. Use the results to prioritize fixes and prepare DNS change plans. This plugin provides read-only access to your Palisade account: it does not publish DNS records, modify domains, send email, or manage…

Publisher description

Use PrivacyHawk with ChatGPT to Take Control of Your Personal Data -- Manage, control, and delete your data from thousands of businesses exploiting your personal information. PrivacyHawk helps you red…

Publisher full description

…ered mitigations, and safe regression tests. Results are advisory and cannot guarantee prevention. Customer support: https://thedoersfirm.com/support.

Publisher description

…code, and text with tamper-proof cryptographic proof - Verify if content is registered with ProofX using a content ID or hash - Look up creator profiles and their protection history - Get digital fingerprints of your content How it works: 1. Connect your ProofX account (free signup at proofx.co.uk)…

Publisher description

RelayShield Free Scam Checks screens links, crypto wallets, suspicious emails, and email addresses against RelayShield's threat-intelligence corpus — 115 monitored Telegram marketplaces, 494K+ indicators, 7.8M+ citations — before you click, pay, or reply. Four…

Publisher description

Safeguard helps users inspect software supply chain risk from ChatGPT, including vulnerabilities, SBOMs, findings, projects, components, policies, guardrails, compliance reports, remediation plans, SCM integrations,…

Publisher full description

…gs and does not rotate a credential or edit a configuration on its own: the skill proposes, and the user decides. The one thing the skill can write is a baseline entry recording a finding the user has explicitly confirmed as a false positive. The skill runs a local shell command, so it is offered in…

Publisher full description

Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret…

Publisher description

…ws you exactly which files are publicly shared or accessible by specific people. No setup needed — just ask.

Publisher full description

…ecurity workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes.

Publisher description

ToolCheck is M8ven's trust layer for the MCP ecosystem. Give it a GitHub URL or npm package name and it returns an independent trust score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code ana…