Update to Atbash Safety
Snapshot Nov 2, 2026 · 12:47 UTC · version 0.3.4
Declared capabilities changed
Full description — Now says: Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy.
Observed in instructions or declared skills. Runtime behavior has not been tested.
Up to 10 plugins free · no card required.
All fields and original values.
Full description
Oct 27, 2026 · 00:39 UTC
Automatically guards supported Codex tool calls with Atbash safety judgments and provides secure local setup guidance.
Nov 2, 2026 · 12:47 UTC
Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy.
Long description
Oct 27, 2026 · 00:39 UTC
Atbash Safety checks supported Codex tool calls against your Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it does n...
Nov 2, 2026 · 12:47 UTC
Connect an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private keys in local configuration and...
Short description
Oct 27, 2026 · 00:39 UTC
Guard tool calls with Atbash
Nov 2, 2026 · 12:47 UTC
Check actions with Atbash
Declared skills
Oct 27, 2026 · 00:39 UTC
[{"description":"Configure, activate, verify, troubleshoot, or rotate credentials for the Atbash Safety Codex plugin. Use when a user asks how to set up Atbash, enable or disable its hook, configure an organization or private key, check ...
Nov 2, 2026 · 12:47 UTC
[{"description":"Prepare and obtain browser approval for a change to an existing Atbash agent's name, purpose, risk, or active state.","interface":{"brand_color":null,"default_prompt":"Use $atbash-manage to prepare an exact agent change ...
Compare saved observations
Download comparison JSONFull technical diff · 13 changed fields
changed /release/description
"Automatically guards supported Codex tool calls with Atbash safety judgments and provides secure local setup guidance."
"Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy."
changed /release/id
"pluginrel_6625cf4c7cd8819188ffac83fb21ae30"
"pluginrel_bbef7ff210b88191837cfa78ba9eae88"
changed /release/interface/composer_icon_url
"https://files.openai.com/content?id=file_00000000723481f4a34f970df471aa98"
"https://files.openai.com/content?id=file_0000000037a081f48dac440c282cbb54"
changed /release/interface/default_prompt
"Use $atbash-setup to configure Atbash without sharing my private key."
"Set up Atbash without sharing my private key."
changed /release/interface/default_prompts
[ "Use $atbash-setup to configure Atbash without sharing my private key.", "Verify that Atbash safety is active for this task.", "Explain why Atbash blocked or held the last tool call." ]
[ "Set up Atbash without sharing my private key.", "Check a proposed action against my Atbash safety policy.", "Help me review and authorize a change to my Atbash agent." ]
changed /release/interface/logo_url
"https://files.openai.com/content?id=file_0000000025ec82469f0176c7ea92615f"
"https://files.openai.com/content?id=file_00000000c4f481f4bc5747f0c9beb1d3"
changed /release/interface/long_description
"Atbash Safety checks supported Codex tool calls against your Atbash agent's safety policy before execution. The package includes a local PreToolUse hook, the bundled production Atbash SDK, and a setup and troubleshooting skill; it does not use an MCP server.\n\nRequires a supported local Codex environment, Node.js 22.13 or newer, an Atbash account with a registered agent, and network access to Atbash services. Configure your agent private key and exact organization name in the local Atbash configuration file, then explicitly review and trust the hook in Codex. Never paste private keys into chat.\n\nOnce configured, enabled, and trusted, the hook sends tool-call details through the SDK to Atbash for a judgment. ALLOW permits the pending call; HOLD, BLOCK, and handled configuration or service errors deny that attempt. Coverage is limited to tool calls exposed to Codex's PreToolUse lifecycle; ordinary Chat, plain-text replies, and tools outside that lifecycle are not protected.\n\nSource and setup instructions: https://github.com/Atbash-Ai/atbash-chatgpt-plugin"
"Connect an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private keys in local configuration and uses them locally for signing. Safety policy enforcement applies to the skill's decision to proceed with an explicitly checked action: HOLD, BLOCK, and errors stop that workflow. This package does not automatically intercept other tool calls or execute submitted commands. Requires Node.js 22.13.0 or newer on macOS arm64, Linux x64/arm64 (glibc), or Windows x64."
changed /release/interface/short_description
"Guard tool calls with Atbash"
"Check actions with Atbash"
changed /release/interface/website_url
"https://www.atbash.ai/risk_engine"
"https://www.atbash.ai/risk-engine"
changed /release/keywords
[ "atbash", "codex", "safety", "policy", "guardrails" ]
[ "atbash", "safety", "policy", "guardrails" ]
changed /release/requires_local_executor
false
true
changed /release/skills
[
{
"description": "Configure, activate, verify, troubleshoot, or rotate credentials for the Atbash Safety Codex plugin. Use when a user asks how to set up Atbash, enable or disable its hook, configure an organization or private key, check agent status, understand ALLOW/HOLD/BLOCK behavior, or fix configuration, registration, jailed-agent, endpoint, or service errors.",
"interface": {
"brand_color": null,
"default_prompt": "Use $atbash-setup to configure or verify Atbash safely.",
"display_name": "Set Up Atbash",
"icon_large_url": null,
"icon_small_url": null,
"iconography": "code",
"short_description": "Configure and verify local Atbash safety"
},
"name": "atbash-setup",
"plugin_release_skill_id": "pluginrsk_6aa7cffe0af08191aca02f2d894a2257"
}
][
{
"description": "Prepare and obtain browser approval for a change to an existing Atbash agent's name, purpose, risk, or active state.",
"interface": {
"brand_color": null,
"default_prompt": "Use $atbash-manage to prepare an exact agent change for my browser approval.",
"display_name": "Manage Atbash",
"icon_large_url": null,
"icon_small_url": null,
"iconography": "hierarchy",
"short_description": "Prepare and authorize an Atbash agent change"
},
"name": "atbash-manage",
"plugin_release_skill_id": "pluginrsk_6ad4946cc3c08191aca32f4214f7981a"
},
{
"description": "Check a specific proposed command or tool action against the selected local Atbash agent's safety policy, or inspect that agent's readiness and policy.",
"interface": {
"brand_color": null,
"default_prompt": "Use $atbash-safety to check my proposed action against my Atbash policy.",
"display_name": "Check With Atbash",
"icon_large_url": null,
"icon_small_url": null,
"iconography": "radar",
"short_description": "Check a proposed action against Atbash policy"
},
"name": "atbash-safety",
"plugin_release_skill_id": "pluginrsk_6ad4946cf0a08191bfd2d869a6186f16"
},
{
"description": "Set up, connect, verify, or switch the local Atbash agent used for explicit safety checks. Use for Atbash signup, existing-agent connection, setup progress, or local profile troubleshooting.",
"interface": {
"brand_color": null,
"default_prompt": "Use $atbash-setup to connect my Atbash agent without sharing my private key.",
"display_name": "Set Up Atbash",
"icon_large_url": null,
"icon_small_url": null,
"iconography": "bolt",
"short_description": "Connect an agent for explicit safety checks"
},
"name": "atbash-setup",
"plugin_release_skill_id": "pluginrsk_6ad4946cdce08191927814c7bc7138b6"
}
]changed /release/version
"0.3.3"
"0.3.4"
Full snapshot data
{
"canonical_app_id": null,
"connector_id": null,
"created_at": "2026-09-14T11:25:12.950062Z",
"discoverability": "LISTED",
"id": "plugins_6a96a8b59214819188451ec756357614",
"is_template": false,
"is_template_instance": false,
"is_v2_template": false,
"name": "atbash",
"release": {
"app_ids": [],
"app_manifest": null,
"app_templates": [],
"description": "Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy.",
"display_name": "Atbash Safety",
"id": "pluginrel_bbef7ff210b88191837cfa78ba9eae88",
"interface": {
"brand_color": null,
"capabilities": [
"Safety policy enforcement",
"Local credential setup"
],
"category": "Security",
"composer_icon_dark_url": null,
"composer_icon_url": "https://files.openai.com/content?id=file_0000000037a081f48dac440c282cbb54",
"default_prompt": "Set up Atbash without sharing my private key.",
"default_prompts": [
"Set up Atbash without sharing my private key.",
"Check a proposed action against my Atbash safety policy.",
"Help me review and authorize a change to my Atbash agent."
],
"developer_name": "Atbash AI",
"logo_url": "https://files.openai.com/content?id=file_00000000c4f481f4bc5747f0c9beb1d3",
"logo_url_dark": null,
"long_description": "Connect an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private keys in local configuration and uses them locally for signing. Safety policy enforcement applies to the skill's decision to proceed with an explicitly checked action: HOLD, BLOCK, and errors stop that workflow. This package does not automatically intercept other tool calls or execute submitted commands. Requires Node.js 22.13.0 or newer on macOS arm64, Linux x64/arm64 (glibc), or Windows x64.",
"plugin_category_id": "security",
"privacy_policy_url": "https://www.atbash.ai/privacy",
"screenshot_urls": [],
"short_description": "Check actions with Atbash",
"terms_of_service_url": "https://www.atbash.ai/terms",
"website_url": "https://www.atbash.ai/risk-engine"
},
"keywords": [
"atbash",
"safety",
"policy",
"guardrails"
],
"mcp_servers": [],
"onboarding_skill_name": null,
"requires_local_executor": true,
"skills": [
{
"description": "Prepare and obtain browser approval for a change to an existing Atbash agent's name, purpose, risk, or active state.",
"interface": {
"brand_color": null,
"default_prompt": "Use $atbash-manage to prepare an exact agent change for my browser approval.",
"display_name": "Manage Atbash",
"icon_large_url": null,
"icon_small_url": null,
"iconography": "hierarchy",
"short_description": "Prepare and authorize an Atbash agent change"
},
"name": "atbash-manage",
"plugin_release_skill_id": "pluginrsk_6ad4946cc3c08191aca32f4214f7981a"
},
{
"description": "Check a specific proposed command or tool action against the selected local Atbash agent's safety policy, or inspect that agent's readiness and policy.",
"interface": {
"brand_color": null,
"default_prompt": "Use $atbash-safety to check my proposed action against my Atbash policy.",
"display_name": "Check With Atbash",
"icon_large_url": null,
"icon_small_url": null,
"iconography": "radar",
"short_description": "Check a proposed action against Atbash policy"
},
"name": "atbash-safety",
"plugin_release_skill_id": "pluginrsk_6ad4946cf0a08191bfd2d869a6186f16"
},
{
"description": "Set up, connect, verify, or switch the local Atbash agent used for explicit safety checks. Use for Atbash signup, existing-agent connection, setup progress, or local profile troubleshooting.",
"interface": {
"brand_color": null,
"default_prompt": "Use $atbash-setup to connect my Atbash agent without sharing my private key.",
"display_name": "Set Up Atbash",
"icon_large_url": null,
"icon_small_url": null,
"iconography": "bolt",
"short_description": "Connect an agent for explicit safety checks"
},
"name": "atbash-setup",
"plugin_release_skill_id": "pluginrsk_6ad4946cdce08191927814c7bc7138b6"
}
],
"version": "0.3.4"
},
"scope": "GLOBAL",
"share_url": "https://chatgpt.com/plugins/plugins_6a96a8b59214819188451ec756357614?open_in_app",
"status": "ENABLED"
}SHA-256 of public snapshot: a1356882ac894082853bfbf59df68abcb0cb37e61a1ba12c4b0dbde2e8a036cb