Plugin / OpenAI

Codex Security Codex Plugin

Security scanning for your codebase.

Docs reviewedChecked 2026-09-20Runtime not tested

What it adds

Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts.

securitycode-reviewdiff-reviewappsecthreat-modeling

Get set up

  1. Open Plugins in Codex and search for this plugin.
  2. Install it and complete any account authorization it asks for.
  3. Start a new thread to use it.
/plugins
Review before running
Read the installation source

Before you install

    Compatibility & limitations

    Documented for ChatGPT desktop app, Codex CLI, ChatGPT web

    Cursor: Not confirmed for Cursor.

      This listing is based on source documentation. We have not installed or runtime-tested this asset.

      How it fits together

      Security Best Practices · SkillPerform language and framework specific security best-practice reviews and suggest improvements.Security Ownership Map · SkillAnalyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export...Security Threat Model · SkillRepository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a...

      Sources & provenance

      Reviewed 2026-09-20. Source revision: main (mutable; commit not pinned).