codex-security Codex Plugin

Name: codex-security
Author: OpenAI

Author: OpenAI
Category: Security
Topics: Security, Auth & Compliance · Code Quality, Review & Testing
Version: 0.1.22
First cataloged: 2026-07-12 (UTC)
Explanation last updated: 2026-09-03 (UTC)
Source (GitHub) last updated: 2026-08-26 (UTC) (10 days ago)

The explanation below is AI-generated. Please verify it against the sources.

codex-security is a plugin published by OpenAI that adds application-security scanning and review workflows to Codex. According to its plugin manifest and the Codex documentation, it lets users run full-repository or diff-based scans (covering pull requests, commits, or branches), review code changes, triage existing security findings, and draft fix proposals or vulnerability reports. The plugin bundles companion skills, an app definition, and an MCP server configuration, and it runs with interactive, read, and write capabilities inside Codex or the ChatGPT desktop app's Security workbench. It is one part of a broader Codex Security product family that also includes a command-line tool, a TypeScript SDK, and a cloud offering for connected GitHub repositories.

About the service

The broader Codex Security product family, as described in the OpenAI documentation, includes a cloud component that connects to and scans linked GitHub repositories on a commit-by-commit basis, building a repository-specific threat model to validate likely vulnerabilities before presenting them. The sources describe this GitHub-connected cloud scanning as a separate but related capability alongside the local plugin, CLI, and SDK.

What you can do with codex-security

Run a security scan across a full repository or a scoped folder
Run a deeper, more thorough scan when broader coverage is needed
Review code changes in a pull request, commit, or branch diff
Triage a backlog of existing security findings
Apply bounded fixes to approved findings
Export or track findings as artifacts
Draft vulnerability reports from findings and supporting evidence
Propose security hardening based on scan results

Sources

codex-security plugin.json(opens in a new tab) (fetched: 2026-09-03 (UTC))
codex-security homepage(opens in a new tab) (fetched: 2026-09-03 (UTC))
codex-security README(opens in a new tab) (fetched: 2026-09-03 (UTC))

History of codex-security

Codex Plugin 2026-09-03 (UTC) Updated plugin manifest (plugin.json) of codex-security
Codex Plugin 2026-09-03 (UTC) Updated version of codex-security (0.1.11 → 0.1.22)

Back to list