Codex Security

Review documented security analysis and investigation workflows.

Source owner: openai · openai/plugins
Declared author / attribution: OpenAI (manifest declaration)

Review security →

Package installedNot observed

External connectionNot observed

Access authorizedNot observed

Task completedNot observed

A source listing is not a check of your machine, account, permissions or result.

COMPOSITION

What is included

Partial inventory

These are declared contents or individually observed source files. Each row states its evidence scope; these are not separate installation recommendations.

Skills

Declared bundled skill directory

Manifest declaration at 1dc195897af4161d039b80d8471ec0a10c9bbc89; contents and authorization not tested

Exact member count not established.

Packaged here — do not install a second copy just because it appears here. File presence does not establish host activation.

App connection

Declared App configuration

Manifest declaration at 1dc195897af4161d039b80d8471ec0a10c9bbc89; contents and authorization not tested

Exact member count not established.

MCP configuration

Declared MCP configuration

Manifest declaration at 1dc195897af4161d039b80d8471ec0a10c9bbc89; contents and authorization not tested

Exact member count not established.

Configuration is not proof that a server is connected or authorized.

DISTRIBUTION EVIDENCE

Marketplace entries and source pins

Manifest fields inspected. Default marketplace or source reference. Marketplace curator: OpenAI. Curator identity is not package authorship or runtime certification.

codex-security: 1dc195897af4161d039b80d8471ec0a10c9bbc89
Package path: plugins/codex-security

Inspect the exact marketplace snapshot

Manifest version 0.1.22 was observed separately at 1e285826e604f66f7208f7ac4dba0fe8341d1f57. Directory pointers do not establish a complete file inventory.

TASK-SCOPED PREREQUISITES

What you need to check

Required, optional and unknown describe the recorded workflow. They are not security or compatibility verdicts.

No complete prerequisite inventory was established from the recorded sources. This does not mean “no dependencies” or “no account needed.”

Make a local prerequisite note

Your notes stay in this page. They cannot establish authorization or task success.

EVIDENCE & CHANGE HISTORY

Version and sources

Recorded workflow-note version: 0.1.22
Source revision: 1dc195897af4161d039b80d8471ec0a10c9bbc89
Observation date: 2026-09-07 — not a release date or runtime test date
Declared target: Interface not established. Other interfaces remain unknown unless specifically documented.
Package license information: Package license not established here; only reference-only facts and original notes are redistributed.
Identity: gpa:plugin:b24dc22f8f6a2c9c1d013d7ffcb358952a795cce26658378c14d2db983263a1e
Exact package root: https://github.com/openai/plugins / plugins/codex-security

This snapshot has one recorded observation for this package. No earlier version or permission change is invented. A future source change requires a new reviewed observation before current relationships are carried forward.

Prepare a correction note

Compare for the same task

Copy and Markdown downloads retain source dates, prerequisites and recorded issues, without your personal notes. Compare recorded facts, not a global score. Different ecosystems remain different installations.