Codex, Plugin
Codex Is All You Need
Public-safe Codex plugin-first preset system with agents, skills, examples, scripts, and a read-only dashboard.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit c3b89bb9ad3b, unchanged since the check below.
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
Why this grade
- PERMISSION_DELETE_FILES Low
Contains a call that can delete files.
plugins/github-publish-zip/skills/github-publish-zip/scripts/pack_github_publish_zip.py, line 36
return subprocess.run( - NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
plugins/visual-brainstorming/skills/visual-brainstorming/assets/browser-shell.js, line 46
const response = await fetch(authenticated("/api/latest"), { cache: "no-store" }); - SECRETS_PATH_DOTENV Low
Mentions a .env file.
AGENTS.md, line 108
URLs, credentials, `.env` values, customer data, private template content, or
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
plugins/github-publish-zip/skills/github-publish-zip/scripts/pack_github_publish_zip.py, line 36
return subprocess.run(
plugins/github-publish-zip/skills/github-publish-zip/scripts/pack_github_publish_zip.py, line 214
result = subprocess.run(
plugins/github-publish-zip/skills/github-publish-zip/scripts/pack_github_publish_zip.py, line 246
result = subprocess.run(
Show more
plugins/visual-brainstorming/skills/visual-brainstorming/scripts/companion.py, line 1719
shutil.rmtree(path)
plugins/visual-brainstorming/skills/visual-brainstorming/scripts/companion.py, line 2445
process = subprocess.Popen(command, **popen_kwargs)
scripts/check_skill_metadata.py, line 56
result = subprocess.run(
scripts/check_skill_metadata.py, line 297
content = subprocess.run(
scripts/check_skill_metadata.py, line 522
result = subprocess.run(
scripts/sync_codex_entrypoints.py, line 211
result = subprocess.run(
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
plugins/visual-brainstorming/skills/visual-brainstorming/assets/browser-shell.js, line 46
const response = await fetch(authenticated("/api/latest"), { cache: "no-store" });
plugins/visual-brainstorming/skills/visual-brainstorming/assets/browser-shell.js, line 84
const response = await fetch(authenticated("/api/events"), {
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
examples/catalog/common/skills/core-codex-agents-md-builder/references/card-templates.md, line 80
- 不要提交 `.env*` 文件或任何凭据
examples/catalog/dev/skills/dev-cli-auth-diagnosis/references/codex-permissions-and-sandbox.md, line 126
"**/*.env" = "deny"
AGENTS.md, line 108
URLs, credentials, `.env` values, customer data, private template content, or
Show more
plugins/codex-next/skills/core-codex-agents-md-builder/references/card-templates.md, line 80
- 不要提交 `.env*` 文件或任何凭据
plugins/codex-next/skills/dev-cli-auth-diagnosis/references/codex-permissions-and-sandbox.md, line 126
"**/*.env" = "deny"
docs/global-git-ignore.md, line 71
# Local environment and secret-bearing files
docs/skill-spec/research/openclaw.md, line 188
- Secrets via `skills.entries.*.env` / `apiKey` on host turn only - not in SKILL.md
docs/user-global-agents-example.md, line 46
- Customer data, personal information, screenshots, or `.env` values.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit c3b89bb9ad3b. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: c3b89bb9ad3b553d4c7f99929da1af65e7bd6110
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.