Codex Security
PluginSecurity scans for a whole repo or for changes like PRs and commits, with threat modeling, vulnerability triage, fixes and re-verification; reports export to JSON, SARIF and more. OpenAI's official Codex plugin; requires Codex Security access.
README is not available right now
This repository does not provide a README. See the GitHub repository instead.
Related resources
Codex Security
CLIOpenAI's official security CLI and TypeScript SDK: scans codebases to find, validate and fix security vulnerabilities, and can draft a SECURITY.md policy. Needs Node.js 22.13+, Python 3.10+, and a ChatGPT sign-in or API key.
openai/codex-security11.1k
Claude Security
PluginOrchestrates subagents in-session to map the architecture, build a threat model and hunt for vulnerabilities. Every finding is independently verified before it goes in the report, which also comes as SARIF, and optional patch files are left for you to apply. Official Anthropic plugin.
anthropics/claude-plugins-official40k
SonarQube
PluginSonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.
SonarSource/sonarqube-agent-plugins112
Trail of Bits Skills
SkillSkills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.
trailofbits/skills7.6kDefending Code Reference Harness
SkillAnthropic's reference implementation for finding and fixing vulnerabilities: Claude Code skills for threat modeling, static scanning, triage and patching, plus an autonomous recon-to-patch pipeline (C/C++ memory bugs by default; needs Docker and gVisor). No longer maintained.
anthropics/defending-code-reference-harness7.6kCodex plugin for Claude Code
PluginCalls Codex from Claude Code for read-only or adversarial code reviews, or delegates tasks to Codex to run in the background. Maintained by OpenAI; needs a ChatGPT account (the free tier works) or an API key.
openai/codex-plugin-cc34.3k