Skill All skills & plugins / Codex official plugins
Codex Security
Codex Security workflows for security scans, analysis, and investigation.
- Type
- Plugin with 15 skills by OpenAI
- Catalog
- Codex official plugins
- Source
- openai/plugins/plugins/codex-security (142 files scanned)
- Install and details
- Agent Skills Index entry
- License
- Proprietary (manifest)
- Signals
- Local MCP serverBundled scriptsSpawns processes
Pre-approved tools
No allowed-tools or tools list in its SKILL.md, command or agent files, so the agent asks before using tools as usual.
Hooks
No hooks.
MCP servers and apps
| Server | Where it runs | Credentials |
|---|---|---|
| codex-security | Local process: ./scripts/launch_codex_security_mcp --stdio | none in config |
Also ships 1 Codex app connector file (.app.json), which link a hosted app to your account.
Bundled code
42 code files (JavaScript, Python); first 40 listed:
codex-security/scripts/generate_rank_input.pycodex-security/scripts/workbench_native_indexes.pycodex-security/scripts/snapshot_sqlite.pycodex-security/scripts/report_projection.pycodex-security/scripts/workbench_severity.pycodex-security/scripts/workbench_schema.pycodex-security/scripts/windows_scan_local_files.pycodex-security/scripts/workbench_finding_workflows.pycodex-security/scripts/filesystem_identity.pycodex-security/scripts/deep_scan_workbench.pycodex-security/scripts/validate_scan_contract.pycodex-security/scripts/workbench_scan_usage.pycodex-security/scripts/deep_scan_config.pycodex-security/scripts/finalize_scan_contract.pycodex-security/scripts/workbench_scan_history.py- and 27 more
Network calls
No HTTP or socket call pattern found in the code.
Starts other programs
3 files. First match per file:
plugins/codex-security/scripts/generate_rank_input.py:350result = subprocess.run(command, cwd=repo, capture_output=True, check=False)
plugins/codex-security/scripts/generate_in_scope_files.py:107result = subprocess.run(
plugins/codex-security/scripts/workbench_target.py:258return subprocess.run(
Credentials referenced
No key, token or secret environment variable found in code or MCP config.
Static scan of commit 0722921 on 2026-10-27. Signals are patterns found in the files, not a verdict: a network call can be the whole point of a skill. Read the linked lines before you decide. How the scan works.