Codex, Plugin
Codex Remote Ssh
Codex Remote Ssh has PlugVet grade C (One medium finding) from our automated hygiene checks. Finding: mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc). This is a hygiene check, not a security audit or a guarantee. Graded on 16/10/2026.
Remote SSH plugin for OpenAI Codex with MCP tools, host policies, audit logging, and safe remote operations.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit dc40a231e3bc, unchanged since the check below.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
plugins/remote-ssh/scripts/remote-ssh-cli.js, line 30
const sshHost = (await rl.question("SSH Host (user@hostname or ~/.ssh/config host): ")).trim();
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_CREDENTIAL
plugins/remote-ssh/scripts/remote-ssh-cli.js, line 30
const sshHost = (await rl.question("SSH Host (user@hostname or ~/.ssh/config host): ")).trim();
plugins/remote-ssh/scripts/remote-ssh-mcp.js, line 621
description: "[email protected] or a host from ~/.ssh/config.",
plugins/remote-ssh/scripts/remote-ssh-mcp.js, line 634
description: "Leave empty to use default SSH key or SSH config. Example: ~/.ssh/id_rsa.",
Show more
plugins/remote-ssh/scripts/remote-ssh-mcp.js, line 648
sshHost: { type: "string", description: "user@hostname or a host alias from ~/.ssh/config." },
plugins/remote-ssh/scripts/remote-ssh-mcp.js, line 973
? "Use an SSH key or ~/.ssh/config for normal Codex operation. Password fallback should be used only during setup and must not be stored in plugin config."
.gitignore, line 6
remote-ssh-audit.jsonl
PRIVACY.md, line 5
The plugin does not require users to paste private keys into Codex. SSH authentication material remains in the user's local SSH setup, key files, ssh-agent, or `~/.ssh/config`.
SECURITY.md, line 19
The plugin never asks users to paste private keys, passwords, or passphrases into chat. It calls the system `ssh` binary and relies on normal SSH key files, ssh-agent, and `~/.ssh/
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit dc40a231e3bc. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: dc40a231e3bcb75d19bedef5b66991e4e57bc72f
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.