Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 201 to 215 of 215 Codex, Grade C entries. Page 5 of 5.
Listed A to Z by name.
No entries match that filter.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
scripts/dev_deploy.py:215 return subprocess.check_output(Subagent Governance (Plugin)
Compatibility: Not stated.
[English](README.md) · [简体中文](README.zh-CN.md)
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
skills/security/SKILL.md:43 - `.aws/credentials`SystemSmith (Plugin)
Compatibility: Not stated.
SystemSmith turns recurring engineering judgment into reusable agent skills.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV OBFUSCATION_MINIFIED_PAYLOAD
packages/core/drivers/chromium-web-driver.mjs:141 const socket = new WebSocket(endpoint);Ui Distiller (Plugin)
Compatibility: Not stated.
**Turn authorized UI evidence into inspectable, adaptable design assets , locally.**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED SECRETS_PATH_DOTENV
scripts/validate-distribution.py:169 result = subprocess.run(Vidiq Mcp (Plugin)
Compatibility: Not stated.
Official vidIQ plugin for YouTube creators.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
remote-mcp/build_guides.py:6 css='''*{box-sizing:border-box}html{color-scheme:dark}body{margin:0;background:#0Vnish Global Operator (Plugin)
Compatibility: Not stated.
Read-only VNISH firmware routing, compatibility verification, staged rollout planning, rollback lineage checks, and assumption-led ROI calculation.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_ENCODED_BLOB
plugins/workflow-manager/scripts/orchestrator_hook.py:1 #!/usr/bin/env python3Workflow Manager (Plugin)
Compatibility: Not stated.
面向 Codex 的质量优先、上下文高效工作流管理插件：只减少冗余和噪声，不削弱解决问题所需的推理、证据、纠错与验收验证。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
lib/zcodex_memory/extraction.py:163 runner: Callable[..., subprocess.CompletedProcess[str]] = subprocess.run,Zcodex Memory (Plugin)
Compatibility: Not stated.
[中文](README.zh-CN.md) | English
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL
plugin/scripts/zeyu_plugin_client/tunnel.py:105 with socket.create_connection(("127.0.0.1", port), timeout=minZeyu Windows Gpu (Plugin)
Compatibility: Not stated.
> Mac 上写代码和使用 Codex，Windows 笔记本安静地提供 NVIDIA GPU。
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
plugins/assay/skills/assay/SKILL.md:252 sh -c "$(curl -fsSL https://app.goassay.io/helper/install.sh)"Assay Plugins (Plugin)
Compatibility: Not stated.
Publish a task to [Assay](https://goassay.io) from inside your own coding session , code, a document, a deck, any kind of work , or take paid work from it.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST +2 more
cli/nexscope_cli/main.py:158 result = subprocess.run([sys.executable, str(ROOT / 'runner.py'), str(ROOT / 'skiCodex Nexscope Plugin (Plugin)
Compatibility: Not stated.
Ecommerce research in Codex with [Nexscope](https://www.nexscope.ai).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES SECRETS_PATH_DOTENV
skills/harness-audit/scripts/code_sensor.py:74 proc = subprocess.run(cfg["command"], shell=True, cwd=str(root)Harness Audit (Plugin)
Compatibility: Not stated.
<h1>🧰 harness-audit - Your AI Project's Personal Organizer</h1>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
plugins/blackbox/assets/anomalies.js:499 ackboxRequest(path,method,body) : await fetch(path, {method,headers:{Blackbox Plugin (Plugin)
Compatibility: Not stated.
<p align="center"> <img src="docs/images/blackbox-mark.svg" width="72" height="72" alt="Blackbox"> </p>
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.en.md:67 curl -fsSL https://qoder.com/install | bashCodex To Agents (Plugin)
Compatibility: Not stated.
**让 Codex 指挥 agents 干活。**
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
PERMISSION_DELETE_FILES NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
packages/monster/evals/runners/tier2_perception_infer.py:106 proc = subprocess.Popen(Open Game Studio (Plugin)
Compatibility: Not stated.
Local projects, immutable assets, canvases and character production for Codex.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
OBFUSCATION_MINIFIED_PAYLOAD
plugins/pages-native/native/worker.js:119 function objects(d) {var out=[];['text','shape','image','chart','linPages Native (Plugin)
Compatibility: Not stated.
Native Apple Pages documents for Codex and MCP.
This grade is a hygiene screen, not proof of safety.
