Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 51 to 100 of 215 Codex, Grade C entries. Page 2 of 5.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
skills/usage-report/scripts/test_usage_report.py:495 completed = subprocess.run(Codex Usage Audit (Plugin)
Compatibility: Not stated.
Local token, context, cache, and cost telemetry for Codex conversations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
plugins/codex-usage-reports/lib/codex_usage_reports/update_notice.py:94 with urllib.request.urlopen(request, tCodex Usage Reports (Plugin)
Compatibility: Not stated.
Automatic local token usage reports for every Codex Task and turn.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
src/dependencies.ts:220 fs.unlinkSync(zipFile);Codex Wakatime (Plugin)
Compatibility: Not stated.
Codex plugin for Wakatime
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
docs/details/wsl-output-encoding.md:19 The variable is passed through `child_process.spawn` and does not modifCodex Win To Wsl (Plugin)
Compatibility: Not stated.
Reliable WSL command execution for Windows-native Codex, with strict cwd handling, structured results, UTF-8 output, timeouts, and process cleanup.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/install-hook-runtime.py:434 shutil.rmtree(temporary, ignore_errors=True)Codex Work Governance (Plugin)
Compatibility: Not stated.
Composable, tool-neutral governance policies for Codex work.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
mcp/lib/report.mjs:37 :root{color-scheme:dark;--bg:#11100f;--card:#1d1b19;--line:#38332f;--text:#f6f2ed;--muteCodex Workflows (Plugin)
Compatibility: Not stated.
Codex Workflows is a Codex plugin for persistent, budgeted multi-agent orchestration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
scripts/test_youtube_mcp.py:586 completed = subprocess.run(Codex Ymt (Plugin)
Compatibility: Not stated.
Open-source Codex plugin and MCP server for translating YouTube video titles and descriptions, reviewing multilingual metadata, and safely publishing approved localizations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
evals/run_apply_behavior_smoke.py:93 completed = subprocess.run(CodexQB (Plugin)
Compatibility: Codex.
CodexQB is a Codex plugin for evidence-backed repo comprehension, planning, QA audit, and gated implementation handoffs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:20 prepareCoding Agents Tmux (Plugin)
Compatibility: Not stated.
Track, monitor, and jump between agent sessions in tmux
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
inspector/web/app.js:58 const response = await fetch(path, { cache: 'no-store' });Coordinate Agents (Plugin)
Compatibility: Codex.
Coordinate multiple AI coding agents through a local-first, recoverable Agent Bus.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/check-paths.py:37 tracked = subprocess.run(Creator Agent Plugin (Plugin)
Compatibility: Not stated.
Distribution metadata for the LottieFiles Creator agent plugin.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
harness/codex_runtime.py:186 completed = subprocess.run(crucible (Plugin)
Compatibility: Not stated.
<p align="center"> <picture> <img src="assets/logo.png" width="160" alt="Crucible logo" style="border-radius: 28px;" /> </picture> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
omnimodal/audio_processing.py:111 result = subprocess.run(Deepseek Omnimodal (Plugin)
Compatibility: Not stated.
Open-source multimodal MCP plugin for text-only AI agents: recognize and generate images, video, and audio through Qwen/DashScope.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST
package.json:12 prepareDeploygate Agent Plugin (Plugin)
Compatibility: Not stated.
DeployGate integration for Claude Code and Codex
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES INSTALL_LIFECYCLE_HOOK NETWORK_UNNAMED_HOST
src/install.ts:557 if (!dry) fs.rmSync(path.join(d, e.name), { force: true });dolly (Plugin)
Compatibility: Not stated.
Long-term memory + feature planning for coding agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_CREDENTIAL
opencode/dotnet-episteme.js:24 * `git diff && curl x` matches `git diff*` but the later `*&*` deny wins.Dotnet Episteme Skills (Plugin)
Compatibility: Not stated.
DotNet Episteme Skills - a curated, manual-first .NET AI skills library rooted in systematic knowledge (episteme) and shaped by disciplined craft (techne), designed for engineers who prioritise precision over hype.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:95 prepareDsh Tool Chaos (Plugin)
Compatibility: Not stated.
> Development version `0.1.0-next.1` (GitHub source; no npm release): tested locally on Windows Node.js 24.11.1 with DSH `0.1.7-rc.2` (2026-09-28).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
index.html:9 <div id="zs8EIrvg0" style="display:none">Z09B3Ug2IIOzAXGx7BbNR/rrXDf3S7Kowbzra16JkkdRUk3XSiZn+epMEasel Js Cpu Render Kit (Plugin)
Compatibility: Not stated.
Imagine a world where your AI coding assistant, whether Claude, Codex, Copilot, or OpenCode, can render complex visual applications directly in the browser, without a single GPU call.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
plugins/twitter-voice/skills/twitter-voice-setup/scripts/check_env_keys.py:32 env_path = Path.home() / ".env"Eidolon Cache (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="assets/image/hero_A_hand_of_words.png" alt="Two hands touching on wrinkled linen at golden hour , one small and feminine, palm up; the other covering it gently, dissolving into handwritten cursive script and warm amber light where they meet."> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/check_distribution_status.py:40 def fetch(url, *, token=None):Fantasy Football Manager (Plugin)
Compatibility: Codex.
ESPN draft and lineup tools for Codex and other MCP clients, with browser sign-in, approval modes, per-team limits, and server monitoring.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/fisis/_accessor.py:6 ``f.life.company("0010001").fetch(list_no=..., ...)`` reads left to right --fisis (Plugin)
Compatibility: Not stated.
[English](https://github.com/seokhoonj/fisis/blob/main/README.en.md) | **한국어**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
lib/distribution.js:55 if (!commands.has(path.basename(file,'.md'))) fs.rmSync(file);foreman (Plugin)
Compatibility: Portable across standard formats.
AI-powered strategic advisor for entrepreneurs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL
src/fred_client/_config.py:8 3. ``"FRED_API_KEY"`` in ``$XDG_CONFIG_HOME/fred-client/credentials.json``Fred Client (Plugin)
Compatibility: Not stated.
**English** | [한국어](https://github.com/seokhoonj/fred-client/blob/main/README.ko.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/gaussian-workflow-copilot/scripts/build_distribution.py:34 tests = subprocess.run(Gaussian Workflow Copilot (Plugin)
Compatibility: Not stated.
面向 Gaussian 量子化学计算的可审计 Codex 工作流插件
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/crux-query.mjs:16 const response = await fetch(endpoint, {Google Suite Seo Mcp (Plugin)
Compatibility: Not stated.
Local plugin Compatible for Google Search Console, Google Analytics 4, and CrUX SEO workflows, compatible with Codex, Claude Code, Cursor, VS Code, OpenClaw, and Hermes through standard MCP configurations.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/gpt-helper/skills/verify-before-answer/coop/coop_helper.py:178 result = subprocess.run(Gpt Helper (Plugin)
Compatibility: Not stated.
Skills-only plugin for ChatGPT Work and Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
plugins/gpthybrid/skills/hypcox/scripts/baseline.py:36 result = subprocess.run(GPTHybrid (Plugin)
Compatibility: Not stated.
GPTHybrid gives Codex on Windows 11 + WSL 2 a dedicated visible browser and an evidence-based way to use ChatGPT Web as a planning partner.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
mcp-server/src/lib/state.mjs:320 try { fs.unlinkSync(path.join(jobsDir, `${job.id}.json`)); } catch { /* bestGrok Build Codex Plugin (Plugin)
Compatibility: Not stated.
Codex CLI plugin: delegate reviews and bounded coding tasks to the local Grok Build CLI via a bundled MCP server
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
evaluation/cli.py:51 completed = subprocess.run(happycodex (Plugin)
Compatibility: Not stated.
[English](README.en.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
scripts/herdr_subagent_panes.py:50 completed = subprocess.run(Herdr Codex Subagents (Plugin)
Compatibility: Not stated.
Show Codex subagents in temporary Herdr panes.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK
package.json:22 postinstallHumanizer Cli (Plugin)
Compatibility: Not stated.
Detect AI-written text with 33 checks, right in your terminal.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +1 more
codex_bench/harness.py:222 proc = subprocess.run(hyperresearch (Plugin)
Compatibility: Portable across standard formats.
Convert Claude Code or Codex into the most intelligent Deep Research Agent.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
plugins/job-agent/job_agent/linkedin.py:120 subprocess.Popen(command, stdout=subprocess.DEVNULL, stderr=subproJob Agent (Plugin)
Compatibility: Not stated.
Job Agent is a local-first Codex plugin that helps a job seeker analyze opportunities, prepare strong applications, and keep track of every decision.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
development/scripts/build_release.py:90 subprocess.run(Journal Cover Letter Tutorial (Plugin)
Compatibility: Codex.
Research, Review & Bibliometrics cover-letter workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
plugins/claude/kabo-alpha/scripts/hooks/persist-envelope.js:513 fs.rmSync(`${stem}.lock`, { force: true });Kabo Plugins (Plugin)
Compatibility: Not stated.
Creator research skills for Claude Code and Codex: see what's working on YouTube, Instagram, and TikTok, review accounts and competitors, break down videos, and plan what to post, with the public evidence attached.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/build_site.py:479 shutil.rmtree(output)Kiss My Agent (Plugin)
Compatibility: Not stated.
A Codex plugin that reduces over-design, hidden failure, and evidence inflation in research engineering.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/krx_openapi/client.py:46 return self._session.fetch(ENDPOINTS[api_id], **params)Krx Openapi (Plugin)
Compatibility: Not stated.
Read the Korea Exchange (KRX) Open API: indices, stocks, ETP, bonds, derivatives, commodities, ESG
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
plugins/lianhuanhua/skills/lianhuanhua/scripts/lianhuanhua/exporter.py:41 shutil.rmtree(panel_target)Lianhuanhua Skills (Plugin)
Compatibility: Not stated.
连环画短视频 Codex Skill：省 token 提示词包、外部/内置生图、豆包 TTS、FFmpeg 合成
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
src/llmkb/init.py:43 subprocess.run(llmkb (Plugin)
Compatibility: Not stated.
Local, folder-first LLM knowledge bases: format spec, CLI, MCP server, and agent skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
packages/extractors/src/extract.test.ts:40 "fetch('/api/charge');",mappamind (Plugin)
Compatibility: Not stated.
See what your AI coding agent just did to your system's behavior, flow, and architecture.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
plugins/matt-engineering/scripts/validate_suite.py:190 result = subprocess.run(Matt Pocock Engineering (Plugin)
Compatibility: Not stated.
[中文](./README.md) · [English](./README_EN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_ENCODED_BLOB
firebase/hosting/auth.js:755 const response = await fetch("/subscription-plans.json", { cache: "no-store" });Mcp Miner (Plugin)
Compatibility: Not stated.
MCP Miner is a passive asteroid-mining game for Codex work.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
index.js:89 fs.unlinkSync(mcpFile);Mcp Server (Plugin)
Compatibility: Not stated.
MCP server that lets AI clients read, search, export, and manage website and asset feedback from [Simple Commenter](https://www.simplecommenter.com).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
plugins/mev15-content-studio/skills/gzh-publish/scripts/publish_draft.ts:214 const res = await fetch(`${API}/cMev15 Content Studio (Plugin)
Compatibility: Not stated.
面向中文内容创作的 Codex 插件包：微信公众号排版、青十五文章配图，以及公众号、X (Twitter) Articles、小红书多平台草稿发布。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
benchmarks/plugin-runs/20260901-host-e2e-python-node-001/dogfood/verifier-bundle/inventory_project.py:109 "netMigration Skill (Plugin)
Compatibility: Not stated.
Migration Skill is a Codex-native, local-first protocol for behavior-preserving codebase migration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
plugins/mileswang-skill/skills/miles-update/scripts/update.py:83 curl = shutil.which("curl")Mileswang Skill (Plugin)
Compatibility: Not stated.
`mileswang-skill` 是 Miles Wang 的可安装 Codex 工作流合集：对外只有一个品牌和安装入口，内部按任务拆成独立 Skill，并允许以后持续增加真实、可验证的新能力。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
plugins/mindtrain/scripts/mindtrain_mcp_bridge.py:557 subprocess.run(MindTrain (Plugin)
Compatibility: Not stated.
AI-driven knowledge training platform with pluggable schedulers, Codex Skill integration, and optional Anki/FSRS support.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/model-combo/skills/model-combo/scripts/combo_core.py:150 return subprocess.run(Model Combo (Plugin)
Compatibility: Not stated.
[English](README.md) | [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
qoder-codex-bridge/scripts/attribution-test.mjs:226 fs.rmSync(root, { recursive: true, force: true });Multi Agent Mailbox (Plugin)
Compatibility: Not stated.
多智能体信箱 · Local agent messaging via CLI/MCP; tested Codex, pi, Qoder, ZCode CLI and OpenClaw, with optional native adapters.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
skills/gh-address-comments/scripts/fetch_comments.py:96 p = subprocess.run(cmd, input=stdin, capture_output=TrOdin Codex Plugin (Plugin)
Compatibility: Not stated.
Outline-Driven Development for Codex CLI - methodology + skills + agents for OpenAI Codex coding workflows.
This grade is a hygiene screen, not proof of safety.
