Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1 to 50 of 215 Codex, Grade C entries. Page 1 of 5.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/adaptive-codex-orchestrator/scripts/validate_release_artifact.py:163 ".npmrc",Adaptive Codex Orchestrator (Plugin)
Compatibility: Not stated.
Control when Codex delegates bounded tasks, with explicit scope, profiles, and safe parallel execution.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
plugins/agent-orchestrator/scripts/cli_agent_job.py:832 subprocess.run(Agent Orchestrator (Plugin)
Compatibility: Not stated.
Codex plugin for orchestrating local coding-agent CLIs with task contracts, questions, observability, and review gates
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
docs/RULES.md:21 | `SHELL001` | error | Shell evaluation such as `shell=True`, `os.system`, or `Invoke-ExpressAgent Skill Release Kit (Plugin)
Compatibility: Not stated.
**Turn a private Agent Skill into a separate, reviewable release copy, without touching the source.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +2 more
plugins/trelio-agent-workspaces/scripts/trelio-host-runtime-loader.mjs:259 await fs.rm(targetDirectory, { recuAgent Workspaces (Plugin)
Compatibility: Not stated.
Официальный плагин Trelio для работы Codex, Claude и Cursor Desktop с управляемыми Agent Workspaces и актуальными навыками компании и проектов.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/agentgram/src/agentgram_tg/cli.py:1769 proc = subprocess.run(agentgram (Plugin)
Compatibility: Not stated.
Codex and AI-agent Telegram messaging plugin with a local CLI.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/build_release.py:30 check = subprocess.run([sys.executable, str(ROOT / "scripts/validate_release.py")]Ai Career Roadmap Skill (Plugin)
Compatibility: Not stated.
根据简历研究最新 AI 与泛 AI 职业机会，并生成个性化学习路线。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
plugins/ai-job-search/skills/job-search-assistant/assets/workspace-template/tools/check_framework_version.py:2Ai Job Search Codex Port (Plugin)
Compatibility: Not stated.
Unofficial Codex plugin port of MadsLorentzen/ai-job-search
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
plugins/ai-safe-driver/scripts/drift-detector.mjs:35 const FAILURE_ANCHOR = /(?:안\s*(?:했|됐|맞|지켰|넣|고쳤|따랐|반영)|못\Ai Safe Driver (Plugin)
Compatibility: Not stated.
English | [한국어](README.ko.md) | [简体中文](README.zh-CN.md) | [繁體中文](README.zh-TW.md) | [日本語](README.ja.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
skills/apple-productivity/scripts/repair_eventkit_permissions.py:26 subprocess.run(command, cwd=cwd, check=TruApple Productivity (Plugin)
Compatibility: Not stated.
Apple Productivity , a Codex plugin for Apple Calendar, Reminders, and Notes on macOS.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
templates/pages-template.html:4390 let response = await fetch(getRawUrl(path));Arckit Codex (Plugin)
Compatibility: Not stated.
ArcKit Enterprise Architecture Toolkit - Codex CLI Extension with skills, agents, and MCP servers
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
apps/docs/providers/grok.md:50 curl -fsSL https://x.ai/cli/install.sh | bashAsk Llm (Plugin)
Compatibility: Not stated.
MCP server for AI-to-AI collaboration , bridge Claude with Gemini, Codex, and other LLMs for code review, second opinions, and plan debate
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
plugins/astra-orchestrator/scripts/install-native.mjs:61 try{await fs.writeFile(temp,o.content,{flag:'wx'});awAstra Orchestrator (Plugin)
Compatibility: Not stated.
Astra plans and reviews; Luna implements.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
src/store.ts:477 fs.unlinkSync(file)Auth Codex Plugin (Plugin)
Compatibility: Codex.
Auth codex plugin for opencode with local dashboard, force mode, and etc.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:47 id_rsaAutodl Remote (Plugin)
Compatibility: Not stated.
Codex App plugin for local code editing, SSH-based AutoDL remote GPU execution, and explicit file upload/download.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/axiom-versioning/skills/dependency-versions/scripts/osv_scan.py:289 urllib.request.urlopen(request, tiaxiom (Plugin)
Compatibility: Not stated.
Axiom is a curated marketplace of shared plugins for Claude Code and Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/best-value-xianyu/browser_login.py:84 shutil.rmtree(profile, ignore_errors=True)Best Value Xianyu (Plugin)
Compatibility: Not stated.
<div align="center"> <img src="./assets/readme-hero.svg" width="100%" alt="闲鱼最优解擂台：实时查价、逐轮打擂、寻找预算内真正值得买的商品">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/silkscreen-cleanup/scripts/kicad_silk_audit.py:50 completed = subprocess.run(chatpcba (Plugin)
Compatibility: Not stated.
Evidence-gated PCBA workflow with reusable engineering skills and a governed online rule registry.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/choice-pilot/scripts/smoke-test.mjs:71 const health = await fetch(healthUrl);Choice Pilot (Plugin)
Compatibility: Not stated.
Context-aware clickable choices for Codex and MCP Apps.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/claimmate/scripts/claimmate_core/documents.py:5 result = subprocess.run(claimmate (Plugin)
Compatibility: Not stated.
ClaimMate 是一个面向出差报销的 ChatGPT/Codex 插件。它使用大模型识别材料类型、费用类型、金额、项目归属和材料配对，并通过可维护的报销要求表检查材料完整性。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
relay.py:67 def fetch(peer, since_id, channel=None):Claude Bridge (Plugin)
Compatibility: Not stated.
Connect two Claude Code ,codex and grok sessions different users too, , your laptop and your VPS.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
scripts/claude-companion.mjs:1037 fs.rmSync(resolveReservedJobFile(workspaceRoot, jobId), { force: true });Claude In Codex (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="assets/claude-in-codex-hero.svg" alt="claude-in-codex" width="820" /> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore:19 .credentials.jsonClaude Usage Tray (Plugin)
Compatibility: Not stated.
Privacy-first Windows tray monitor for Claude Code Pro/Max usage, showing 5-hour and 7-day limits, reset times, and stale-data status.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
AGENTS.md:85 curl -s https://cld-flare-maxxing.abhiigatty.com/version.json | jq -r .commitCld Flare Maxxing (Plugin)
Compatibility: Not stated.
Claude Code and Codex plugin that audits, explains, and safely changes Cloudflare.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
scripts/build_release.py:46 result = subprocess.run(Code Ontology Companion (Plugin)
Compatibility: Not stated.
Map Java, Spring, and Python repositories into local code knowledge graphs for architecture and change-impact analysis.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
plugins/code80-image/src/platform.ts:28 credentialsFile: path.join(root, "credentials.json"),Code80 Image (Plugin)
Compatibility: Not stated.
Codex plugin for Code80 GPT/Grok image generation, editing, and batch workflows
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
codex-project-plugin-suite/plugins/security-release-review/skills/security-release-review/scripts/security_audCodex 13 Plugin Suite (Plugin)
Compatibility: Not stated.
不是让小白变成程序员，而是让小白能把项目流程说清楚。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
parity/tools/generate_parity.py:343 result = subprocess.run(Codex Ai Game Studio (Plugin)
Compatibility: Not stated.
Codex AI game studio: 85 skills, 163 curated tools, Unity/Godot/Unreal/Blender workflows, img2threejs, reversible automation, and visual QA.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +1 more
plugins/codex-base/skills/improve/runtime/git_worktree.py:25 result = subprocess.run(argv, cwd=cwd, env=env, iCodex Base (Plugin)
Compatibility: Not stated.
Our team's evolving Codex harness for planning, execution, and review.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/codex-binder-lane/skills/codex-binder-lane/scripts/campaign_overlay.py:774 shutil.rmtree(temporary, igCodex Binder Lane (Plugin)
Compatibility: Not stated.
Plan and design binders in Codex: pick target sites, tools and comp bio budget, then get your structures and sequences.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/codex/scripts/app-server-broker.mjs:110 fs.unlinkSync(listenTarget.path);Codex Claude Companion (Plugin)
Compatibility: Not stated.
Codex-native Claude review plugin for read-only, evidence-cited Opus review lanes.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST
docs/site.js:72 fetch(brainEl.getAttribute("data-brain"))Codex Council (Plugin)
Compatibility: Not stated.
Codex Council adapts the LLM Council method to Codex-only workflows: five independent council roles, compact role outputs, anonymized review, rubric scoring, dissent capture, and chairman synthesis for implementation decisions.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/package.py:40 "id_rsa",Codex Council (Plugin)
Compatibility: Not stated.
Codex Council is a Codex-native workflow for pressure-testing consequential decisions, engineering tradeoffs, research interpretations, and explicitly requested council code reviews.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/dsh-web/scripts/dsh_client.py:172 result = subprocess.run(Codex Dsh Web (Plugin)
Compatibility: Not stated.
English | [简体中文](README_CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST
plugins/codex-dynamic-bridge/bridge/companion.py:269 shutil.rmtree(stage, ignore_errors=True)Codex Dynamic Bridge (Plugin)
Compatibility: Not stated.
[中文](#中文) | [English](#english)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/codex_fewer_permission_prompts/cli.py:35 "id_rsa",Codex Fewer Permission Prompts (Plugin)
Compatibility: Not stated.
Safe Codex Agent Skill for reducing repeated permission prompts with verified prefix_rule proposals, dry-run apply, and rollback.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
code/codex-flight-control/src/persistence/mission-contract-repository.ts:254 const command = commands.get(entrCodex Flight Control (Plugin)
Compatibility: Not stated.
面向 Codex 的生产级自主编程飞控：先把需求变成可持续文档，再把大目标拆成可验证的 Wave，以机械门禁、持久状态、一层子代理和动态战术指导约束长期开发。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
labs/incident-response-benchmark/evaluator.py:139 with urllib.request.urlopen(req, timeout=3) as response:Codex Howto (Plugin)
Compatibility: Not stated.
Engineering-first OpenAI Codex guide: 14 modules, 9 installable skills, reproducible benchmarks, testing, review, orchestration, and a Living Wiki.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
plugin/network-state-closeout/skills/initialize-network-state/references/discovery-guide.md:39 Useful local soCodex Knows Your Network (Plugin)
Compatibility: Not stated.
**English** | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
codex-cn-launcher.mjs:216 const response = await fetch(url);Codex Marketplace Zh (Plugin)
Compatibility: Not stated.
Codex 插件市场中文化 / Codex Plugin Marketplace Chinese , 翻译插件名称、分类和简介并对齐布局。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
plugins/codex-native-long-video-memory/evals/generate_visual_fixture.py:110 subprocess.run(Codex Native Long Video Memory (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="./assets/codex-native-long-video-memory-cover.jpg" alt="A dark evidence-first video timeline connected to a local memory graph" width="100%"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
plugins/codex-obsidian-memory/scripts/memory_core.py:108 completed = subprocess.run(Codex Obsidian Memory (Plugin)
Compatibility: Not stated.
Local-first, branch-aware long-term memory for Codex, backed by Obsidian.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/codex-plugin-discovery/skills/codex-plugin-discovery/scripts/build_index.py:40 result = subprocess.runCodex Plugin Discovery (Plugin)
Compatibility: Not stated.
Codex Plugin Discovery is a Codex skill that helps find task-relevant Codex plugins from two official OpenAI plugin repositories:
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/task-completion-guard/scripts/review_snapshot.py:86 process = subprocess.Popen(Codex Plugins (Plugin)
Compatibility: Not stated.
Codex plugins for reliable, evidence-backed task completion.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:14 installCodex Reasoning Sidebar (Plugin)
Compatibility: Not stated.
> Codex 实时思维链侧边栏插件：在 Codex 内置浏览器的侧边栏中，流式显示当前窗口的思考过程。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
plugins/remote-ssh/scripts/remote-ssh-cli.js:30 const sshHost = (await rl.question("SSH Host (user@hostname orCodex Remote Ssh (Plugin)
Compatibility: Not stated.
Remote SSH plugin for OpenAI Codex with MCP tools, host policies, audit logging, and safe remote operations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
src/install.ts:565 ".sdlc/policies/**", ".sdlc/schemas/**", ".sdlc/workflows/**", ".sdlc/templates/**", ".env"Codex Sdlc (Plugin)
Compatibility: Not stated.
Turn one feature request into a coordinated Codex delivery workflow: requirements, implementation, independent QC, and human acceptance.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
packages/plugin/internal/rename/app_server.go:100 cmd := exec.CommandContext(ctx, config.CodexPath, args...)Codex Session Auto Rename (Plugin)
Compatibility: Not stated.
> [!WARNING] > **This does not work properly yet.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/codex-site/skills/codex-site/scripts/check-site.mjs:10 'wrangler.jsonc', '.npmrc', '.pypirc', '_workerCodex Site (Plugin)
Compatibility: Not stated.
**说出想法，把第一个网站做出来、发出去、继续改。**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
.agents/skills/sol-luna-orchestration/scripts/orchestration-dashboard.mjs:87 on action(payload){const responseCodex Skill (Plugin)
Compatibility: Not stated.
This repository adds a dependency-free orchestration layer to Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
claude-fix-unicode-decode/SKILL.md:45 result = subprocess.run(Codex Skills (Plugin)
Compatibility: Not stated.
分享一些好用的codex-skill与claude-skill
This grade is a hygiene screen, not proof of safety.
