Tools

From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.

Removes backgrounds from images and videos with one AI command: batch whole folders, use a portrait model, refine edges or swap in a solid color, and output transparent MOV or composite video onto a new background. Runs locally; install PyTorch and ffmpeg first. Models download on first run.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.

Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.

Cuts long videos like podcasts, webinars, livestreams and interviews into captioned vertical shorts, with optional dubbing and publishing to TikTok, YouTube and more. Hosted version needs an API key (free tier is watermarked and time-limited), or self-host with Docker and your own keys.

Reproduces issues on the Android emulator: installs builds, drives the UI with adb, dumps the UI tree, takes screenshots, captures logcat, and gathers performance evidence with Simpleperf and Perfetto. OpenAI's official Codex plugin; needs the Android SDK.

OpenAI's official Codex plugin that starts from a brief, product shots or references to generate marketing concepts, mood boards, product scenes, ad directions and social assets, compared and iterated on a reviewable board. Works with Figma and Canva.

Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.

Linear's official plugin in OpenAI's Codex marketplace: search, create and update Linear issues, projects and initiatives from Codex, and draft PRDs, status updates and customer request summaries. Codex only; needs a Linear account and authorization.

OpenAI's official Codex plugin for adding the OpenAI Ads measurement pixel and optional Conversions API (CAPI) to a website, with local validation scripts plus key and deduplication guidance. Needs the site's source and an OpenAI Ads account; review manually before launch.

MagicPath's official Codex plugin from OpenAI's plugin marketplace: search and install UI components from MagicPath canvases, apply team themes, and move interfaces from local code onto the canvas to keep iterating. Needs a MagicPath account and Node.js.

Figma's Codex plugin in OpenAI's official marketplace: implements UI from designs, generates Code Connect mappings, and creates or updates pages, component libraries, FigJam diagrams and slides in Figma. Needs a connected Figma account.

OpenAI's official Codex plugin that makes Google Drive the single entry point to search, organize, share and export files, handing Docs, Sheets, Slides and comments to dedicated sub-skills for summaries, edits and new files. Authorize your Google account in Codex.

Security scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.

OpenAI's official Codex plugin for building frontend apps and generating visual assets, testing and debugging in a browser, plus best-practice skills for React, shadcn/ui, Stripe payments and Supabase databases. Codex only.

Turns a Notion PRD or feature spec into an implementation plan page and tasks, flagging open questions and linking spec, plan and tasks while tracking progress. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP connected.

OpenAI's official set of 18 web data visualization skills: chart selection and critique, D3, Canvas, Three.js, maps, statistical uncertainty, live dashboards, Gantt charts, UML and scrollytelling. Ships with a Codex plugin; installed alone, the plugin-level references are missing.

Remotion's official Codex plugin (OpenAI marketplace) for making videos in React code: 12 skills covering project setup, animation and effects, captions, maps, preview and rendering. Free for individuals, nonprofits and companies up to 3 people; bigger companies need a license.

OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues.

OpenAI's official Codex plugin marketplace (openai-curated) with 60+ plugins such as Figma, Notion, GitHub, Stripe and Vercel, each bundling skills, MCP servers and app connections into one install.

ClickUp's official plugin in OpenAI's Codex marketplace: search your whole ClickUp workspace in natural language, find, create, update and manage tasks, and check whether a project or sprint is at risk of slipping. Codex only; needs a ClickUp account and authorization.

Tests and debugs a locally running frontend with Codex's Browser plugin or Playwright: checks blank pages, framework and console errors, captures screenshots, re-verifies after fixes and writes a QA report. Maintained by OpenAI; formerly playwright-interactive in openai/skills.

OpenAI's official browser-game skills: plan core gameplay and tech choices first, then build with Phaser for 2D or Three.js / React Three Fiber for 3D, plus HUD and menu UI, sprite animation, a GLB asset pipeline and in-browser playtesting.