Best Codex plugins for security
We found 12 listings for security that work with Codex. 4 of them are in OpenAI's official curated catalog (Cloudflare, Codex Security, CrowdStrike Falcon Foundry, Public Equity Investing), so they install from the built-in marketplace. 8 are community repos that pass our quality filter (not tested by us).
How this list was made: every listing in the CodexStacks catalog whose category is Security, or the name or description mentions security, vulnerabilities, pentesting, threats or SecOps. "Best" here means "available and documented", not a ranking: we haven't benchmarked these, and there are no paid placements in this list. Order: official OpenAI curated listings first (A–Z), then community repos by GitHub stars at last sync. This is not a quality ranking.
Comparison
| Name | Source | Type | Skills | MCP servers | One-line install |
|---|---|---|---|---|---|
| Cloudflare | Official OpenAI curated | Plugin | 9 | 1 | Yes |
| Codex Security | Official OpenAI curated | Plugin | 15 | 1 | Yes |
| CrowdStrike Falcon Foundry | Official OpenAI curated | Plugin | 12 | – | Yes |
| Public Equity Investing | Official OpenAI curated | Plugin | 23 | – | Yes |
| maestro-orchestrate | Community | Plugin | – | – | Yes |
| Stata MCP | Community | Plugin | – | – | See README |
| codex-guard | Community | Plugin | – | – | Yes |
| cti-skills | Community | Plugin | – | – | See README |
| repopilot | Community | Connector | – | – | See README |
| Trident-SecOps-Skills | Community | Plugin | – | – | See README |
| pdf-decompiler-mcp | Community | Connector | – | – | See README |
| agent-setup | Community | Plugin | – | – | See README |
Skills and MCP server counts come from the plugin's own files (official catalog) or its manifest (community). "–" means none found or not published in a manifest we can read.
All 12 listings
Cloudflare
Bring Cloudflare platform guidance into Codex with curated skills for the broader platform, Wrangler CLI, and the Agents SDK, plus the official Cloudflare API MCP server for authenticated access to live account data and workflows across Workers, Pages, storage, AI, networking, security, and analytics services.
Codex Security
Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts.
CrowdStrike Falcon Foundry
Create, validate, deploy, and troubleshoot Falcon Foundry apps with specialized guidance for UI, functions, collections, Falcon Fusion SOAR workflows, security, and OpenAPI integrations.
Public Equity Investing
Public equity investing workflows for long-only investors, long/short hedge funds, sell-side equity research teams, ETF/index and constituent diligence, event-driven equity investors, and sector/thematic listed-equity research teams. Outputs should surface what is mispriced, what is priced in, what proves or kills the thesis, what to do next, and what evidence is missing. Use Credit Markets for credit instruments, creditworthiness, restructuring, distressed, recovery, spreads, yields, covenants, and debt security analysis.
maestro-orchestrate
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
Stata MCP
The official working package of MCP-for-Stata plugin, including mcp config and stata-skill.
codex-guard
Quality gate for AI/Codex-generated pull requests: blocks TODO leftovers, leaked secrets, sloppy commits and red CI before they reach main.
cti-skills
Cyber Threat Intelligence Skills for each stage of the CTI Lifecycle.
repopilot
Local, deterministic review of Git changes: weakened tests and CI gates, security boundaries, blast radius. CLI, GitHub Action, MCP server, and coding-agent plugins.
Trident-SecOps-Skills
A curated collection of AI SecOps 24 SKILL.md capabilities for security work offensive security, SOC and detection engineering, cloud and Kubernetes hardening, DFIR, threat intel, secure programming, reverse engineering, prompt improvement, and multilingual communication.
pdf-decompiler-mcp
A MCP that turns PDFs into structured text, tables, figures, metadata, annotations, and page-level evidence for selective retrieval by MCP-compatible AI agents. Improves the information quality AI agents receive while also reducing token costs in some scenarios.
agent-setup
Universal setup for Claude Code & Codex CLI — security guard, TTS notifications, status line, slash commands