Codex Security Codex Plugin
Security scanning for your codebase.
What it adds
Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts.
securitycode-reviewdiff-reviewappsecthreat-modeling
Get set up
- Open Plugins in Codex and search for this plugin.
- Install it and complete any account authorization it asks for.
- Start a new thread to use it.
/pluginsReview before running
Before you install
Compatibility & limitations
Documented for ChatGPT desktop app, Codex CLI, ChatGPT web
Cursor: Not confirmed for Cursor.
This listing is based on source documentation. We have not installed or runtime-tested this asset.
How it fits together
Security Best Practices · SkillPerform language and framework specific security best-practice reviews and suggest improvements.Security Ownership Map · SkillAnalyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export...Security Threat Model · SkillRepository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a...Sources & provenance
Reviewed 2026-09-20. Source revision: main (mutable; commit not pinned).