Herramientas

From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

From Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity.

Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq.

Plugin marketplace of 77 product management skills based on JTBD, opportunity solution trees, RICE and other proven methods, covering user interviews, PRDs, roadmaps, prioritization, market sizing and product sunsets. A Codex skill pack is also available.

Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in.

Diffusion model inference in pure C/C++: one sd-cli command runs SD, FLUX, Qwen Image, Wan and more locally to create or edit images and short videos, with Metal acceleration on Mac. No cloud needed; bring your own model weights and use a release binary or build from source.

77 product management skills built on JTBD, opportunity solution trees, RICE, Working Backwards and other proven methods: user interviews, PRDs, roadmaps, prioritization, competitive intel, market sizing and sunsetting, explaining the frameworks as they go. CC BY-NC-SA licensed.

OpenAI's official Codex plugin for answering product and business questions with data: metric anomaly diagnosis, KPI design, market sizing, dashboards and reports, notebooks and data quality checks. Connects to data warehouses and BI tools.

Prepares meetings using past notes, requirements and decisions in Notion: picks a template by meeting type, drafts the agenda and pre-reads, and adds research. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP.

Creates, edits and validates reproducible Python and SQL Jupyter notebooks: organizes cells as reports or tutorials, checks conclusions against actual output and reruns top to bottom before handoff. Maintained by OpenAI in the Data Analytics plugin of openai/plugins.

Builds, refactors and debugs ChatGPT apps with the OpenAI Apps SDK: plans tools, scaffolds the MCP server and UI widgets, and checks the work against official docs. Maintained by OpenAI; formerly chatgpt-apps in openai/skills.

Turns conversations and notes into structured Notion pages such as team wikis, how-to guides, decision records and FAQs, linked to related pages. From OpenAI's official plugin repo (developer: Notion); needs the Notion MCP.

OpenAI's official Codex plugin that turns early product ideas, live pages or screenshots into interactive prototypes, proposing a few visual directions before building. Also reviews user flows, researches user pain points and checks accessibility issues.

ClickUp's official plugin in OpenAI's Codex marketplace: search your whole ClickUp workspace in natural language, find, create, update and manage tasks, and check whether a project or sprint is at risk of slipping. Codex only; needs a ClickUp account and authorization.

OpenAI's official data analytics skills: data quality assessment, KPI design, metric anomaly diagnosis, dashboards and analysis reports, market sizing and notebooks. Ships with a Codex plugin; some skills depend on its runtime.

Tests and debugs a locally running frontend with Codex's Browser plugin or Playwright: checks blank pages, framework and console errors, captures screenshots, re-verifies after fixes and writes a QA report. Maintained by OpenAI; formerly playwright-interactive in openai/skills.

monday.com's official plugin in OpenAI's Codex marketplace: search boards, create and update items, assign owners, set timelines and post updates, for campaign schedules, approvals, project tracking and client management. Codex only; needs a monday.com account.

OpenAI's official Codex plugin for Microsoft Teams: summarizes chats and channel messages, pulls out action items, and drafts channel replies or meeting follow-ups. Requires signing in to Codex with ChatGPT and authorizing a Microsoft account.

Build with OpenAI best practices inside Codex: call the OpenAI API, build and deploy agents with the Agents SDK, create ChatGPT apps and prepare submission materials, and create API keys directly. Maintained by OpenAI; Codex only.

Linear's official plugin in OpenAI's Codex marketplace: search, create and update Linear issues, projects and initiatives from Codex, and draft PRDs, status updates and customer request summaries. Codex only; needs a Linear account and authorization.

OpenAI's official Codex plugin for adding the OpenAI Ads measurement pixel and optional Conversions API (CAPI) to a website, with local validation scripts plus key and deduplication guidance. Needs the site's source and an OpenAI Ads account; review manually before launch.

OpenAI's official Codex plugin for Outlook Calendar: summarizes your day, compares availability across people, preps meetings, explains busy and tentative states, and creates, reschedules or cancels meetings. Requires Codex with a ChatGPT sign-in and a Microsoft account.

OpenAI's official Codex plugin that makes Google Drive the single entry point to search, organize, share and export files, handing Docs, Sheets, Slides and comments to dedicated sub-skills for summaries, edits and new files. Authorize your Google account in Codex.