← Codex SecuritySOURCE FILE ARCHIVE

Inside the package

Codex Security · 143 files · 2.14 MB · Oct 7, 2026 · 06:02 UTC

↓ Download original archive

Changes in this package →

FileSize
.app.json
SHA-256a7bbe314059c7311e169474823e3978f267e560c3e961ba49fb94032da9843fe
479 Bytes
.codex-plugin/plugin.json
SHA-256527d1a0db286884729572d400b0ad9b0ff852d4a12b36228ff5fbef180f7de9d
1.54 KB
.mcp.json
SHA-2567c5968060f6e848859ce02450d6e02e67029d8d39011bbda1059b19de6309ebf
1.64 KB
OWNERS
SHA-25649be76d15302e4f158b3ef907e9802a955ab9c0a59a039827eab4cb6221f0e5f
41 Bytes
assets/logo.png
SHA-2569b9c2b09b2fa064611fb62307d321d5c2ea70cf0789f7ce34cdb0fc0d9190b3a
97.2 KB
examples/completed-scan/coverage.json
SHA-256d55b9b98d48323b4659dfee6531ec83ec538f2084325412b7188bf85ad68b01b
467 Bytes
examples/completed-scan/findings.json
SHA-256a6dc4521d6478828224fbafc33585401a47bfeb0e56e07b5d2886e8a29937f2f
1.8 KB
examples/completed-scan/report.md
SHA-25683b7c709c0b49d1500b52e61a88ea70b8423ebebec38308b1294cf094838b66f
4.02 KB
examples/completed-scan/scan-manifest.json
SHA-256d245ae9fc62a676293c6821e562d1a2d7d59db12d5b8dc99b85f7c5f1462fe00
1.22 KB
integrity.json
SHA-2566b342df66fb9b5ce7fc8c9de0e974b59d21340cdc06167df46d1a19bd4ea9441
17.1 KB
mcp/helpers.mjs
SHA-256c272f3761e5c405619b26e4d0fd621df5ac189f2ee1bb32b975480e9835f9ca8
1.07 KB
mcp/helpers.mjs.br.part-000
SHA-2566299f73c92c4f924bffc6b1bed001480603473967006b3e75941bc49a21f18d5
61.9 KB
mcp/native/COPYRIGHT-library.html
SHA-2560a65bb747c49c7bb816cbc7188319bd6e4e8d08091c1190b8a3c0971c47968ed
273 KB
mcp/native/THIRD_PARTY_NOTICES.txt
SHA-25616ac63908855f5bb7eab864923cc1855b406bd7051dfcd70d7e69684f6c69955
301 KB
mcp/native/darwin-arm64/unix.node
SHA-256093e87d8de3d2676fc9a2a1430f571bf4fc970b2bbef4c7ded0bf8924e45f473
346 KB
mcp/native/darwin-x64/unix.node
SHA-25657c45d212d35ce7599afc7b9b21693e18443753231bad1fb5146a4e224db68ec
335 KB
mcp/native/licenses/Apache-2.0.txt
SHA-256074e6e32c86a4c0ef8b3ed25b721ca23aca83df277cd88106ef7177c354615ff
10 KB
mcp/native/licenses/BSD-2-Clause.txt
SHA-256f32fb3b417a194167cfad068223fc975ba96c5960513a10f66a3c28720aec1df
1.24 KB
mcp/native/licenses/MIT.txt
SHA-256b85dcd3e453d05982552c52b5fc9e0bdd6d23c6f8e844b984a88af32570b0cc0
1.05 KB
mcp/native/licenses/Unicode-3.0.txt
SHA-256f5062c9a188d81dfe66b56db4182dcf9e4b17c0d9b0d311a8e20b3a1b075c443
1.95 KB
mcp/native/linux-arm64-gnu/unix.node
SHA-2566b352aaaac21f9ad9b772481429ba7bc8433a0e44ca5ffe433ad47289c3007f6
454 KB
mcp/native/linux-arm64-musl/unix.node
SHA-2563a55ec4f42202c58a29654701c31a8deab386969d14e2ab85f23e81345b4fedb
325 KB
mcp/native/linux-x64-gnu/unix.node
SHA-256ed2061078400010852a9f8d3ecdf7bc0a008d13adc9e9d5c6954f5cb686a2a2a
357 KB
mcp/native/linux-x64-musl/unix.node
SHA-256c2e4c07ac6dde175464c6315937652465b200e5f28590898663523beaf4e9ab6
361 KB
mcp/native/win32-arm64/windows.node
SHA-25619f78e88fd8934038201c26b044123bc05db74f5d7065df10a32583ccbcf7a55
410 KB
mcp/native/win32-x64/windows.node
SHA-2565aed21edb5fe06efac49d9bd3899d6242f60b1bfac2b710b967a76c924d98298
443 KB
mcp/server.mjs
SHA-256c58624aa4c4bd3efbb67601c9c2e98759f167f608320a6cd342814b2f2e6a636
1.07 KB
mcp/server.mjs.br.part-000
SHA-2567ef9c7387b405b51e2aec793a86696bf793506a8f34155199035aa515b3a415a
137 KB
mcp/server.mjs.br.part-001
SHA-25694d6412009e284ecbc17bd14d07e0116d8e74e572a62198912ac5a03f95a50c2
123 KB
preflight/capability-profiles.toml
SHA-256543a0f6a0e81cbbac1fe43e2e3d44d6163a6792384ab9c768ac519295d9ec8a1
2.29 KB
references/artifact-storage.md
SHA-256ccce9c76f5d044fbce333d6129fbb55eb63f512c15c2ebeeca405e296f38325b
7.45 KB
references/config-preflight.md
SHA-2565894f9fd7efcae7034404a2c062ee3d7417520753be16ddcdb3acf5b884f048d
18.7 KB
references/core-scan.md
SHA-2569c0eca53147383a89cd345eac7791ea75b954f7f083448ef25019d8f9ba30afe
22.4 KB
references/desktop-config-preflight.md
SHA-256d03e7c604a0459509a4a3238289c3ad0725811e8b11fb7d0044ce8bcee6a7a26
1.55 KB
references/final-report.md
SHA-2569c34375584c8ae76959b0eae038b86b2b8ed7874517c249fcae8715314c76298
29.2 KB
references/finding-detail-fields.md
SHA-2569e4dcc5633ca1f31291688606e4ec0d56067ed485e748ac9e7d433984f9ab451
11.6 KB
references/sarif-adapter.md
SHA-25632725cc851d998c9b33f0232c435d720383c86bc13526b04d356b85d08101cc5
2.29 KB
references/scan-artifacts.md
SHA-256eecdccac30b8ad65bb702dc9ac8d9718dcb0b95532a94a61195268d22bdf504b
11 KB
references/scan-contract.md
SHA-256b362636c29d1e8b18053481abe2f97d7bb099a97040f5b63aa2702a41c1d62c8
14.2 KB
references/scan-prologue.md
SHA-2561d23ab6db651134b54307cdea873ffa711a83458bda563f1e126f35e83b278e9
4.7 KB
references/security-guidance.md
SHA-256a0f49ad3bd09fa6180a100d81326b75bf87a2d49893ca9e37b64ab151c759a80
1.76 KB
references/static-finding-assessment.md
SHA-25678de933caef1c8d971dab83fbb71877602a1197a52eaa7a59d6ff7bc399d0bc7
3.86 KB
references/threat-model.md
SHA-256f3dd2d05d7f0c61b13d29a78e810b367772fe22d5ac58adbbc00080a9495706e
14.8 KB
schemas/coverage.schema.json
SHA-2566ac14e659e884e9582d8bd9ba480f6364ca17309e1a3dee9469ab025a3380b11
5.08 KB
schemas/definitions/artifact-common.schema.json
SHA-2568187236867a2397515571d937deac92dcbf23d3db5e330d32b1f24aced4b9abc
1.04 KB
schemas/definitions/discovery-candidate.schema.json
SHA-256b0cf54fc1ae1947db0f6a6f73e17d1124d528226de763fb89489d05fd612331b
2.88 KB
schemas/findings.schema.json
SHA-256a480337cc0fa4c48c44fc7be17c6c4348767815570775cda80f2aaf797b8e56c
18.7 KB
schemas/patch-risk-assessment.schema.json
SHA-256536492481c5b67910ce8d3754d61c7d5a44c5cb78fe3f081e8f5d1620d6ae9c9
6.69 KB
schemas/scan-manifest.schema.json
SHA-256c621d4136ac81741ac8da1960c7f5e92ade22c0b5490e378ea4339b09e45b6f3
9.29 KB
schemas/tools/candidate-attack-paths.schema.json
SHA-256f6fcb643b4b975466c4717356a0768b0572812cd832578d8714557f5e3d16935
5.91 KB
schemas/tools/candidate-validations.schema.json
SHA-256c871eb3462b7873c1774e6aade62acdd570636e43c0ac3c7b41b7041ca5627e9
4.8 KB
schemas/tools/deep-reducer.schema.json
SHA-2565f0c25f826445251415986097c41127018d19b6c690cd99720fd9365893b0028
2.17 KB
schemas/tools/discovery-candidates.schema.json
SHA-256dcd2031d64015c69b415c66e57d6e90cbdef91152a445a6f409c14d80153afa6
2.42 KB
schemas/tools/review-items.schema.json
SHA-256acc4f4909446a62811728dd1d6581456053da8d26f774b7af208a1856f86ac5b
2.2 KB
schemas/tools/scan-draft.schema.json
SHA-256151f9dffc83e1c5b4f0a7fba20b90fb3196fdaa9719180eb0009ba2b50f75d48
22.9 KB
schemas/tools/worker-threat-model.schema.json
SHA-256a00f875918794661316a033bd2d03426d61ab1e41d4a36c548c07525dcfde478
435 Bytes
scripts/config_preflight.py
SHA-256f4d4103650977d078b71f49da6b1e287b6db2f2b7b5fb08e943722a6d869354e
34.4 KB
scripts/deep_scan_config.py
SHA-25644229bc7b2e7f4c7654e2e9ed91650a28630eeb00fcc38358f19d69739771f8c
4.92 KB
scripts/deep_scan_defaults.json
SHA-25689bdb96ff721f0f1d509f3c5c83f5fc89022f14406d0a84df781b7e0e42cde66
143 Bytes
scripts/deep_scan_workbench.py
SHA-2565012b337503f44e086fbf021be9db8340f8ba992fe5169c5534752e900947cf5
82.7 KB
scripts/filesystem_identity.py
SHA-2565298f2012b6e48ab1106837a5440ef2b3966383e2321507a47593010bb4dd01f
893 Bytes
scripts/finalize_scan_contract.py
SHA-2563fa92d8e2ccadb032cf458f0fde444785e8ee5ced0abe6346c285b07ef153e27
131 KB
scripts/finding_preview.py
SHA-256ebdf8e7b7e465c0937e73e945e3593d659b2f15ff1db08d0b4a2d3b106174c4d
15.7 KB
scripts/generate_in_scope_files.py
SHA-2560b420d786b17e4f91451b5b686fdb4d6beee3913eebb952f8fcbf220aec6230e
11.4 KB
scripts/generate_rank_input.py
SHA-256e7c0bddbdb7e9236f7431d84b86be4c3fc202daa8d1306d6baa930110635b671
17.5 KB
scripts/launch_codex_security_mcp
SHA-25656794e736a1e8f588f9959a2e707ea3ed9bc7d4d2b796c132e91d5fbed59e600
1.75 KB
scripts/launch_codex_security_mcp.cmd
SHA-2562539c0914bb130d76629e8176ac93762cd0051677ac2c525e7ba524b0b828f80
2.52 KB
scripts/rank_preview.py
SHA-256627d0b89c9d4436162ab9bcb80f7aa562605695e784dc612307c7eda6fef3a7f
33.9 KB
scripts/report_projection.py
SHA-2561b24978a3cdb3c336ac27a2b39fb35457bade13a4aad0782710fe38ac39965cf
40.1 KB
scripts/reserved_artifact_paths.json
SHA-25658ba1cf42437ac3af65c85a66eeff46f22572e45081fa2620f4b241173efcc50
186 Bytes
scripts/snapshot_sqlite.py
SHA-2569e0be851702f0962070ece6e0e2959e3955fc99126f68452d175fc22bc38423b
1.06 KB
scripts/threat_model_projection.py
SHA-25632e4d5cd370a49cdc5658c3ded3d4d63ba7f41a44b34b67da87321048d088111
6.55 KB
scripts/validate_scan_contract.py
SHA-25638a5eb0126ea06b22eb82c5829e4ffcbebd2c1e55f99634454622fedd7b9e1a0
3.71 KB
scripts/validate_tracking_source.py
SHA-256802fb3062456128c7adceb6048183811120255b222018e123e10c5ba0caa4bdc
2.75 KB
scripts/windows_scan_local_files.py
SHA-256c26276695435d134c1354048c3c74c3c6b0ed203158a93b63b67ef0b6bfab843
24.3 KB
scripts/workbench/__init__.py
SHA-2563635fffd60f51d5a5d889e20c91df803c667f8b1b29cbcf68c96cb2e0a9c33ed
58 Bytes
scripts/workbench/handoff.py
SHA-25683606054cc47064514a612d8ce16353cce669fe07b61852d73bc0c94b75c8ee5
8.71 KB
scripts/workbench/storage.py
SHA-2565e389073520fb7668defd433228befd9e7b9c8309c1b6024bffd6213d59f1d88
973 Bytes
scripts/workbench_cli.py
SHA-256959e951fa5daf326049ee61bd0773999be92600b65a9062e56b4f62fc4e2aa55
20.8 KB
scripts/workbench_constants.py
SHA-2560ff12b11b2ae9f71c1de6cff0afc234b035379bb1193f1ca9a56ddeb7aa32cf7
2.14 KB
scripts/workbench_dashboard.py
SHA-2565770b77ff551cde46c22fae9239ef8ce28254320da77876e0b936dc35b829967
5.85 KB
scripts/workbench_db.py
SHA-25694bf11d7d74202ae7efbdd4f70a036393d4ba013ffc2ada44172a59be41f97f2
143 KB
scripts/workbench_feedback.py
SHA-256675bc5897444a39950297f74353fa6fd296f73d3a5ac87d294647ae8425151dd
4.02 KB
scripts/workbench_finding_index.py
SHA-2564618f994786fa2300e78592fa2868bc0a585368127027c1940a0e504b0254265
3.85 KB
scripts/workbench_finding_workflows.py
SHA-256de44bfc28c0a4d2021643a50d5a42408f4853bb4a21cf9d1f4ffb43a695b06ce
8.55 KB
scripts/workbench_findings.py
SHA-256b78e2ca68f29cf002b6215985225e1b3996c8edd08601569945405d42c33b301
8.67 KB
scripts/workbench_native_indexes.py
SHA-256114dbf1e4050302948c4b8f24d69454f127d128e3bc35e34a5f3ec9dd3b187cd
9.64 KB
scripts/workbench_progress.py
SHA-25642c7d0b8b4d253095e1062922cd9e59b10b966ac314bef092cb78cad2217b967
13 KB
scripts/workbench_publication.py
SHA-2569312a2962b797ed355d6b05fb375da6325aeb5c5ead5d52f2fb7114ef3ad9635
19.9 KB
scripts/workbench_remediation.py
SHA-25696585805c4956917bb473c3b60493a3c15daa2028b074b756e36358a9ac76525
7.11 KB
scripts/workbench_saved_results.py
SHA-256436b23a4d169006437985bb352bfd792da9e465c4c7506dce31bfd5e78524c6d
116 KB
scripts/workbench_scan_history.py
SHA-256920a4c6448c4ee87500e4488fdfa5a294dfa0696f94f55f2e2cbe544e5acf60f
47 KB
scripts/workbench_scan_start.py
SHA-256647e54ce40a7dc5b17d6abe547406f22ca0cb4eee628938b4c21629eb8e73c35
7.78 KB
scripts/workbench_scan_usage.py
SHA-25621d845f8967c9206351e54f94fd2b4bbfe834434e35b642992d7a829b76cd94e
21.6 KB
scripts/workbench_schema.py
SHA-25625ef8550ded14785fa47b19f1fa358422d8883affc94641c84e68c172e800cc0
50.6 KB
scripts/workbench_severity.py
SHA-256ec74f540595e8052e295846303f31988329e0dc68fcebdd92572673555b1c99d
4.52 KB
scripts/workbench_source_excerpt.py
SHA-2565681d4a5c547404f687c644f54432c10e0770b6ba4c1e6be321664579a252a24
3.13 KB
scripts/workbench_target.py
SHA-25608ed149295b9347ac37f2b8523c822a35f165283422c7644dabecfa236b81b72
31.7 KB
scripts/workbench_target_state.py
SHA-2569c133f67397ab4b90ce1275edc09a7e6d05900236209bc72e8f113b9f0cde287
1.88 KB
scripts/workbench_validation.py
SHA-25611259b8ce1e135c5a86677964f29e6331e65e5fd80a1931c80f7fac507cccb13
6.39 KB
skills/assess-patch-risk/SKILL.md
SHA-256c3b62a8c1d6135945a055134f50329047bb908972fc7b320a592edbc3d38b419
9.29 KB
skills/assess-patch-risk/agents/openai.yaml
SHA-256fec61f321e18022579cac25ffb33286f48cc316172a0b8d502f2bf4faecba025
274 Bytes
skills/assess-patch-risk/references/risk-rubric.md
SHA-256078a71175191580791685808980cb1815dc97265cfee8c0ddad1f4d3b8203b4a
4.93 KB
skills/attack-path-analysis/SKILL.md
SHA-2569465d2750182acbf6dd8f61e60bb47dc1ca502be5cc3f4a71da7ad39935d1eb1
8.37 KB
skills/attack-path-analysis/agents/openai.yaml
SHA-256d9355cbcf0bc81098c9e837d9d4e8644e598410d052a862ab11cf91ef9ccb633
261 Bytes
skills/attack-path-analysis/references/attack-path-facts.md
SHA-2568c8f1abb46ddf045d76908df78e3a273da8d61aaa0f37fc992534a3ddfe42430
2.81 KB
skills/attack-path-analysis/references/severity-policy.md
SHA-25644719bb96a1065df7683a4f7968145efd3b3f365ec95c22a4bed5b20b5d8a0a1
14.9 KB
skills/deep-security-scan/SKILL.md
SHA-256d6aed0d9b47065a1384a96d0a45c843b0cda8ba48e3d2cbe96c65357c6e55ee3
13.8 KB
skills/deep-security-scan/agents/openai.yaml
SHA-2563f8d781bf372b0d053a017eabaebf947d5d48d9be2b82cb67da211128924c3f1
192 Bytes
skills/define-security-policy/SKILL.md
SHA-2562817e1a03980a7ebea478c8d9e6c622e3c6205123e767a1e32f0204c06729cc7
6.11 KB
skills/define-security-policy/agents/openai.yaml
SHA-2568c40b0f8bd1eb7feabdcea69f12c2a7d18e492e96893c0702507ffd808b8e2b4
210 Bytes
skills/finding-discovery/SKILL.md
SHA-25614cc797e750ca4bdd8b060c4cf96d7d32f25b132aa8f80d0a0837683fe010790
25 KB
skills/finding-discovery/agents/openai.yaml
SHA-256c044dd83a7624b90ed19f11adc899202685ce64e32502f1d46225f69f9a2c962
220 Bytes
skills/fix-finding/SKILL.md
SHA-256ba7311f43b2c0742da0d5c6bdb2f0b26601c09cc59747cf8c62a09f8d0bb86d2
9.25 KB
skills/fix-finding/agents/openai.yaml
SHA-2565dac397bf3a17e45283691b656179eb56d19e34881af380f098d7c455bce52d7
225 Bytes
skills/propose-security-hardening/SKILL.md
SHA-256ad07d88da7c2bc9e551849cdde686b0daad380ed0aac798e6c06444681d75959
22.3 KB
skills/propose-security-hardening/agents/openai.yaml
SHA-2561bcab19d48eb4b768c0dc435bd2e738f1471c2345cce5865bb31bdca5be0b134
293 Bytes
skills/propose-security-hardening/references/proposal-format.md
SHA-25672b93c32f1cbe7d25a3d347d0894e7b642942e68f2d8a3c0409bc398a41b06e7
25.3 KB
skills/security-diff-scan/SKILL.md
SHA-256f85962d46f141227d794a25253a39232bc4e1ad756509ecd3d8769b85b735136
5.96 KB
skills/security-diff-scan/agents/openai.yaml
SHA-256f3d31e09befbb8532b53fdccb63a34c0b894a7fb96215b40e84647cd9f8e1b50
284 Bytes
skills/security-scan/SKILL.md
SHA-256104e2f93fc965c34e91970f517a89e330d5b29dbb243dcea5d95d83f14d135cf
8.8 KB
skills/security-scan/agents/openai.yaml
SHA-2565952ae0b0f7d378b7e6ab3fe793335a0e26e5d15bd2d7fdd14ecdd795607ceb6
271 Bytes
skills/security-scan/references/desktop-scan.md
SHA-25662a3b3baac5773c36eb291c74c0304dd97157aff5b89dd56fa8b0fed08803389
4.64 KB
skills/security-scan/references/scan-artifacts-and-ledger.md
SHA-256c95780a7af36fd42716f4c909bb57e68b438769b13f8d6f02ac06ffa73c838ff
14.4 KB
skills/threat-model/SKILL.md
SHA-25642568e50c787c4c0bfb9495ad67e72ab6c1a951bb910ecba2c67cff8961c4d56
3.52 KB
skills/threat-model/agents/openai.yaml
SHA-256a3533478c2548248ef07c9afbbe0a7451f1fa1882883b4def0906d8113b7dd6c
171 Bytes
skills/track-findings/SKILL.md
SHA-256a6d2f30e6d5ca7bd9d74d83017f2f5481c5829585941208a1673b82c683d292b
11.1 KB
skills/track-findings/agents/openai.yaml
SHA-25639e73c0003afc8bd9d3cf53c027d8274e724dc41f46e3cd6863ad34bb4de4200
279 Bytes
skills/track-findings/references/github-security-advisories.md
SHA-2565e583aa2f77db32e4983b8b4bb857b1c7eaebfa1f43fc833b551c96acab70d4e
3.21 KB
skills/track-findings/references/jira.md
SHA-256bb1f7bb6fa638f20f1caad35b04482ae33f0cdbf2ab9c617e7805575dff457a0
2.96 KB
skills/triage-finding/SKILL.md
SHA-25683081950bd4b29ff37cf82d137aec164532ae56b03dbaad3f4dd1d5423e758a7
9.77 KB
skills/triage-finding/agents/openai.yaml
SHA-2564a4094210aa6360cf503f5adf7be1e590e27898f3163da1b713632d2828e8563
400 Bytes
skills/triage-finding/references/github-rest-intake.md
SHA-256f026bef041ca92f3d9b47a131794aa54e98cf8d7716fae3f71ab53e8ab09c79f
9.1 KB
skills/triage-finding/references/ticket-intake.md
SHA-256693b415fdfcdcf8e6d5539677ff89c79bb36995ae22916d87866ce2c25113439
3.56 KB
skills/triage-finding/references/triage-result-contract.md
SHA-256709c1d803c001a47c884ba10ac97f8c1434c3ce06a75033778343a662b25729b
4.34 KB
skills/validation/SKILL.md
SHA-2563c4660f79b12a92728e6bb25027064c3a911d0960d39aeafc8fda9e42ce517a5
12.5 KB
skills/validation/agents/openai.yaml
SHA-2567516bcd4748b55566694284d7d953a7db0c94d5a2123895fabb36d7d9d7d74e4
183 Bytes
skills/validation/references/validation-guidance.md
SHA-25642f7a9d85b78d0deb5e6eda82b8c59ed101c40d36065833b9cf39fe50699e255
26.2 KB
skills/verify-fix/SKILL.md
SHA-2563d4530484c7e4c18b6afe7c6527247e96517dce1ebd1bda9d349cd367ecb0ae3
2.95 KB
skills/verify-fix/agents/openai.yaml
SHA-256ac35fc4704cde35b6bf103e16a16d0a44f2b9c2671e1634292cf285905cf40f3
235 Bytes
skills/vulnerability-writeup/SKILL.md
SHA-256d08582d9963ce3bfbc3fe81b6e85a01e6fe306713d7951bfd8dd2fbc3df75de4
27 KB
skills/vulnerability-writeup/agents/openai.yaml
SHA-2567987566daac59e3dd6c5211fe020f71fc4c862843c231d10c28a45697d680f9e
290 Bytes
skills/vulnerability-writeup/references/report-format.md
SHA-25660568466f7057562d7359dc3a396632c760c147582603896d7e569a77487d0b1
14.3 KB

Files are archived as data; their code has not been executed. The package does not include private remote service code.