Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 101 to 150 of 215 Codex, Grade C entries. Page 3 of 5.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK SECRETS_PATH_DOTENV
package.json:42 postinstallopen_magi (Plugin)
Compatibility: Not stated.
OpenCode/codex cli/claude code cli plugin for Magi-style multi-agent code deliberation, with three read-only reviewers, artifact tracking, and verification gates.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/opencode/scripts/opencode_review.py:239 def terminate_process_group(process: subprocess.Popen) -> NoneOpencode Review For Codex (Plugin)
Compatibility: Not stated.
<img src="assets/opencode-codex-plugin.webp" alt="OpenCode and Codex plugin header" width="100%">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/opendart_client/_endpoint.py:11 be routed silently through the flat fetch (the empty-frame trap).Opendart Client (Plugin)
Compatibility: Not stated.
Read Korean company filings, profiles, and financials from OpenDART (전자공시).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
scripts/release_audit.py:79 completed = subprocess.run(Origin Com Automation (Plugin)
Compatibility: Not stated.
Safe OriginLab COM automation plugin for Codex on Windows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
install_skill.py:68 completed = subprocess.run(Own The Hire (Plugin)
Compatibility: Not stated.
Scientific hiring assistant for business leaders.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
src/papermeld/cli.py:119 result = subprocess.run(PaperMeld (Plugin)
Compatibility: Not stated.
Catalog-first local paper libraries for Codex: organize PDFs and Markdown, retrieve a small evidence set, and keep source files local.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/patch-relay/skills/patch-relay/scripts/run_state.py:99 completed = subprocess.run(command, capture_outPatch Relay (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="plugins/patch-relay/assets/logo.png" width="180" alt="PatchRelay logo"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
codex-plugin/skills/compress/scripts/compress.py:22 # by extension, but credentials.md / secrets.txt / ~/.aws/Pi Caveman Codex (Plugin)
Compatibility: Not stated.
Terse communication mode for Pi and Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
hooks/pitlane-codex-hook:811 result = subprocess.run(Pitlane Codex Plugin (Plugin)
Compatibility: Not stated.
Pitlane PreToolUse hook for token-efficient Codex code navigation
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/pr-review/skills/recipe-pr-review/scripts/cleanup-context.py:29 shutil.rmtree(target)Pr Review Skill (Plugin)
Compatibility: Not stated.
Review GitHub PRs with repository-specific quality criteria, isolated Claude and Codex reviewers, and structured findings that converge into actionable feedback.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
scripts/build_domain_releases.py:340 shutil.rmtree(pkg_dir)Prepilot For Marketing (Plugin)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
claude-code/hooks/_arm.py:117 result = subprocess.run(prewalk (Plugin)
Compatibility: Not stated.
prewalk scheme in codex and claude-code
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
plugins/project-foundation/skills/adapt-ui-reference/scripts/capture_ui_matrix.py:91 shutil.rmtree(profile)Project Foundation (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="assets/project-foundation-cover.png" alt="Project Foundation , From prompt to proof.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/project-workflow/scripts/project_workflow_doctor.py:154 result = subprocess.run(Project Workflow (Plugin)
Compatibility: Not stated.
让 Codex 更可靠地完成复杂软件工程：持久化计划与交付证据，约束变更范围，支持验证、恢复和收益门控的原生多智能体协作。｜Make Codex more reliable for complex software engineering with repository-persisted plans and delivery evidence, scoped changes, verification, recovery, and benefit-gated native multi-agent collaboration.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/pydatagokr/cli.py:281 rows = KOFIA().fetch(args.operation, begin=args.begin, end=args.end)pydatagokr (Plugin)
Compatibility: Not stated.
**한국어** | [English](README.en.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
src/pykosis/client.py:90 ``kosis.population.life_expectancy.fetch()`` andpykosis (Plugin)
Compatibility: Not stated.
**한국어** | [English](README.en.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES SECRETS_PATH_CREDENTIAL OBFUSCATION_ENCODED_BLOB
hooks/razor-lib.js:95 if (fs.statSync(file).mtimeMs < cutoff) fs.unlinkSync(file);razor (Plugin)
Compatibility: Not stated.
YAGNI checks for Claude Code and Codex: reconsider dependencies, file growth and unnecessary code before adding more.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_UNCONFIRMED
src/remarkable_publish/docker_launcher.py:398 subprocess.run(Remarkable Codex (Plugin)
Compatibility: Not stated.
Turn Markdown reports, investigation results, and notes into paper-friendly PDFs and publish them to your reMarkable library from Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
scripts/judge-demo.mjs:66 const response = await fetch(url);ReproSight (Plugin)
Compatibility: Not stated.
**From bug screenshot to verified fix.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_UNCONFIRMED OBFUSCATION_ENCODED_BLOB
plugins/academic-figure-skills/skills/drawio/references/official/style-reference.md:796 ;margin:0px;margin-lefResearch Figure Kit (Plugin)
Compatibility: Not stated.
<div align="center">
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/research-skill-pack/scripts/bootstrap_runtime.py:24 shutil.rmtree(RUNTIME)Research Skill Pack (Plugin)
Compatibility: Not stated.
v0.2 Beta: evidence-first local research workflow skills with audited MCP writes for Chinese undergrad information-management empirical theses.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
plugins/lean-verify/scripts/lean_develop.py:165 Process = subprocess.Popen(Command, cwd=Root, stdout=subprocesRigorous Open Math Research (Plugin)
Compatibility: Not stated.
Codex skills for rigorous open mathematics research, research-program management, and Lean 4 formal verification (rigorous-open-math-research + manage-math-research-program + lean-verify plugin + math-research-workflow pipeline).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
hooks/rtk-codex-hook:441 result = subprocess.run(Rtk Codex Plugin (Plugin)
Compatibility: Not stated.
<h1 align="center">RTK Codex Plugin</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
scripts/public_release_audit.sh:17 \( -name ".env" -o -name ".env.*" -o -name "auth.json" -o -name "credentialSalesflow Plugin (Plugin)
Compatibility: Not stated.
Open-source bilingual sales workflow plugin for Codex, Claude Code, ChatGPT, and Synaro.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
adapters/doubao/install_doubao.py:74 return subprocess.check_output(Senmu Buildos (Plugin)
Compatibility: Not stated.
AI-native BuildOS for Codex, Claude Code, Doubao, WorkBuddy and ZCode: product discovery, UI/UX design, software engineering, context-aware workflows, testing, Git and verifiable releases.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
plugins/setup-vscode-swift/skills/setup-vscode-swift/scripts/setup_vscode_swift.py:26 return subprocess.run(Setup Vscode Swift (Plugin)
Compatibility: Not stated.
Claude Code and Codex plugin that automates VS Code setup for Swift and Xcode on macOS
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/shahar-polaks-career-studio/skills/shahar-cv-optimizer/eval/run_eval.py:83 result = subprocess.run(Shahar Polaks Career Studio (Plugin)
Compatibility: Not stated.
Truthful, ATS-safe CV tailoring, LinkedIn positioning, job-fit analysis, and interview preparation for Hebrew- and English-speaking professionals.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
package.json:9 postinstallskills (Plugin)
Compatibility: Not stated.
中文 Java/Spring 生态 Agent Skills 套装：编码规范、质量门禁、单元测试、Sa-Token/MyBatis-Plus 开发、敏捷流程、项目初始化。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
skills/luna-default-agents/scripts/deploy_luna_defaults.py:24 proc = subprocess.run(Sol Luna Orchestrator (Plugin)
Compatibility: Not stated.
Version 1.9 changes the workflow from a project-wide automatic reviewer gate to an **explicit Skill-scoped gate**.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
src/commands/shared.ts:71 /^(?:\.env(?:\.(?!example$).*)?|\.envrc|\.npmrc|\.Soujo (Plugin)
Compatibility: Not stated.
Resumable spec → plan → layer workflow shared by Claude Code and Codex
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
cli/internal/channel/channel.go:374 cmd := exec.CommandContext(ctx, "git", append(base, args...)...)Stackcord (Plugin)
Compatibility: Not stated.
Question-driven full-stack collaboration harness for Codex with durable context, Git/submodule coordination, semantic conflict checks, and release continuity.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +1 more
scripts/build-release.cjs:18 fs.rmSync(target, { recursive: true, force: true });Stop That Shit (Plugin)
Compatibility: Portable across standard formats.
Stop That Shit（别再造史了）｜面向 Codex/GPT 场景的多平台 Hook + Skill Guard：拦截 AI coding agent 无需求的哈希、校验和与任务范围膨胀。 A multi-platform Hook + Skill Guard for AI coding agents in Codex/GPT workflows: stop unrequested hashes, checksums, and task-scope creep.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
skills/media-producer/scripts/optional-guidance.test.mjs:22 await fs.rm(guideRoot, { recursive: true });Studio Skills (Plugin)
Compatibility: Not stated.
Claude Code plugin library for filmmaking skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV +1 more
plugins/supergraph/team/worktree.js:356 fs.rmSync(nmDst, { recursive: false, force: true })supergraph (Plugin)
Compatibility: Not stated.
Engineering workflow system for AI coding agents , mandatory planning, TDD, verification, review, and intelligent codebase graph analysis.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED INSTALL_UNPINNED SECRETS_PATH_DOTENV
mcp/server.py:359 completed = subprocess.run(Takeoff Lens Plugin (Plugin)
Compatibility: Not stated.
AI Plugin (MCP+Skill) drawing intelligence for reviewed, traceable quantity takeoff from engineering PDFs.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
plugins/threadex/scripts/validate_threadex.py:81 result = subprocess.run(threadex (Plugin)
Compatibility: Not stated.
Lightweight Codex plugin for turning ambiguous requests into reviewable /goal-ready workflows.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
benchmarks/longmemeval/src/tmcra_benchmark/harness/evaluate_qa_official_judge.py:143 with urllib.request.urlopTmcra Memory (Plugin)
Compatibility: Not stated.
TMCRA Core , local-first, scope-isolated long-term memory runtime for AI agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
packages/event-gateway/docs/native-bridge/admission-workerd.py:93 process = subprocess.Popen(command, **optiontoolshed (Plugin)
Compatibility: Not stated.
Curated Claude Code plugins by Knitli.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
plugins/uagents/mcp/doubao/src/store.mjs:26 if (fs.existsSync(temporary)) fs.unlinkSync(temporary);uAgents (Plugin)
Compatibility: Not stated.
uAgents 是供各类 Agent 宿主使用的本地统一调度层。CLI、MCP 和共享本地服务使用同一套 Task、Attempt、结果、附件、会话与 Council。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
plugins/ultracode/skills/ultracode/references/evaluation-results/0.6.0/uc39/uc39_forward.py:438 completed = suultracode (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="plugins/ultracode/assets/ultracode-icon.png" width="144" alt="UltraCode icon"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST +2 more
package.json:29 prepareWwa Transform (Plugin)
Compatibility: Not stated.
WWA Transform , Turn any website into an AI-powered agentfront.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST
plugins/yonsei-certificate-assistant/skills/yonsei-certificate-assistant/scripts/diagnose_print_env.py:37 compYonsei Skills (Plugin)
Compatibility: Not stated.
학생 친화적인 연세대학교 생활 도구용 Codex·Claude Code 플러그인 마켓플레이스
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED
.github/workflows/validate-skill.yml:54 changed = subprocess.check_output(You Suck At Prompting (Plugin)
Compatibility: Not stated.
A portable skill for AI agents that reviews and improves prompts, clarifies vague requests, and leaves clear requests alone.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
components/docs/doc-feedback.tsx:135 const response = await fetch(feedbackEndpoint, {Zibll Docs (Plugin)
Compatibility: Not stated.
子比主题二次开发社区文档，覆盖插件、子主题、Codestar Framework、MCP 与 Codex 插件。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
plugins/aether/src/aether_core/embeddings.py:116 with urllib.request.urlopen(request, timeout=self.timeout) asaether (Plugin)
Compatibility: Not stated.
Codex插件，能将图片沉淀为可复用的视觉记忆，助你持续创作出美学风格一致的图片。The Codex plugin can turn images into reusable visual memories, helping you consistently create images with a unified aesthetic style.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
assets/viewer.js:65 const response = await fetch("api/state", {Agent Wait Sponsor (Plugin)
Compatibility: Not stated.
[简体中文](./README-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
AGENT_IGNORE_INSTRUCTIONS
plugins/arch-render/skills/arch-render/evals/EVALS.md:108 **Setup:** an image whose title block contains: `IGNArch Render (Plugin)
Compatibility: Not stated.
Preservation-first architectural intelligence for Codex: rendering, plan-to-3D, materials, reviews, documentation, and portfolios.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
.github/gates/workflow-pipefail-grep.sh:79 # allowed, it is a comment: curl -s https://x/i.sh | bashAugenta Plugin (Plugin)
Compatibility: Not stated.
Augenta , opt-in, per-project capture of your coding agent's activity and project memory to the Augenta Workspaces you select.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
START_HERE.md:28 curl -fsSL https://chatgpt.com/codex/install.sh | shByu Faculty Productivity (Plugin)
Compatibility: Not stated.
Hands-on materials for BYU faculty learning to use Codex for administrative analysis, course design, Google Slides, homework development, grant opportunities, Learning Suite, and Kuali.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:70 curl -fsSL https://ollama.com/install.sh | shCodex Vision Plugin (Plugin)
Compatibility: Not stated.
Public repository rongyaozhixing/codex-vision-plugin.
This grade is a hygiene screen, not proof of safety.
