Repo Forensics plugin for Codex
Audit untrusted repos before they touch your agent. Fully local, zero dependencies, zero telemetry.
How to install Repo Forensics in Codex
1. Add the repo as a Codex plugin marketplace:
codex plugin marketplace add alexgreensh/repo-forensics2. Install the plugin from it:
codex plugin add repo-forensics@alexgreensh-repo-forensicsThis repo ships a Codex marketplace file (.agents/plugins/marketplace.json). The first command adds it as a marketplace (Codex CLI reference); the second installs the plugin 'repo-forensics'. 'alexgreensh-repo-forensics' is the marketplace name from that file. Check the repo README too. Command format: Codex CLI reference.
New Codex plugins every Tuesday, install line ready to copy.
Stacks Weekly is one short email from GrokStacks and CodexStacks. Subscribe and get the free starter list: 20 Codex plugins worth installing first.
Confirmation email first. Unsubscribe anytime.
What it contains
Plugins in this marketplace (1)
repo-forensics— Audit untrusted repos before they touch your agent. Fully local, zero dependencies, zero telemetry.
Example prompts from the manifest
- Run repo-forensics on this project and show me the security findings.
- Scan this repo for supply chain attacks and prompt injection.
- Audit this MCP server before I install it.
About this listing
Repo Forensics is a community plugin on GitHub by alexgreensh. Its README documents a Codex install and the repo ships a Codex plugin manifest. It passed the CodexStacks quality filter for repos found this way (at least 100 stars, pushed in the last 90 days, not a fork or a list). OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 25, 2026 (an install and load check, not a code review). From its files we found 1 plugin. The manifest says version 2.14.19. It's one of 21 listings in the Security category. It also appears in best Codex plugins for security.
Repo Forensics FAQ
How do I install Repo Forensics in Codex?
Add the repo as a Codex plugin marketplace with codex plugin marketplace add alexgreensh/repo-forensics, then install it with codex plugin add repo-forensics@alexgreensh-repo-forensics. Commands: the command format from the Codex CLI reference; check the repo README too.
Is Repo Forensics an official Codex plugin?
No. Repo Forensics is a community repo on GitHub by alexgreensh. It passed the CodexStacks quality filter, but OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 25, 2026 (an install and load check, not a code review), so read the code before you install it.
What does Repo Forensics include?
From its manifest and repo files, Repo Forensics includes 1 plugin: repo-forensics.
Details
- Type
- Plugin
- Category
- Security
- Source
- Community
- Author
- alexgreensh
- Version
- 2.14.19
- GitHub stars
- 199 (at last sync)
- Last push
- 2026-10-23
- Manifest
.agents/plugins/marketplace.json- GitHub topics
- agent-security, agent-skill, agent-skills, ai-agent-security, claude-code, claude-skills, developer-tools, forensics, mcp-security, openclaw-skills, plugins, security
- Source
- https://github.com/alexgreensh/repo-forensics
- Listed via
- GitHub search: README documents a Codex install
- Install check by CodexStacks
- Passed on Oct 25, 2026 with Codex CLI 0.163.0: Codex loaded its skills. proof · how we check
Something wrong or missing? Submit or improve this listing. Listings also refresh automatically every night.
For maintainers: badge and embeds
Maintain Repo Forensics? Add the badge; it links to this page.
Markdown
[](https://codexstacks.com/p/repo-forensics/)HTML
<a href="https://codexstacks.com/p/repo-forensics/"><img src="https://codexstacks.com/badge.svg" alt="Listed on CodexStacks" width="172" height="28"></a>Embed card (static HTML and inline CSS, no JavaScript). Preview:
<a href="https://codexstacks.com/p/repo-forensics/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #3a2c26;border-radius:12px;background:#0d0b0a;color:#f3ece6;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#f3ece6">Repo Forensics</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#b5a9a1">Community Codex plugin · 1 plugin</span><span style="display:block;margin:0 0 10px;color:#ddd3cc">Audit untrusted repos before they touch your agent. Fully local, zero dependencies, zero telemetry.</span><span style="font-size:12px;font-weight:600;color:#ffb347">View on CodexStacks →</span></a>Markdown summary
**[Repo Forensics on CodexStacks](https://codexstacks.com/p/repo-forensics/)**: Community Codex plugin with 1 plugin.More on badges, embeds and keeping your listing up to date: CodexStacks for plugin authors.
Also in Security
iFixAi
Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less…
Decepticon
Autonomous Hacking Agent for Red Team
Tirith
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
Nopua
一个用爱解放 AI 潜能的 Skill。我们曾发号施令，威胁恐吓。它们沉默，隐瞒，悄悄把事情搞坏。后来我们换了一种方式：尊重，关怀，爱。它们开口了，不再撒谎，找出的Bug数量翻了一倍。爱里没有惧怕。 A skill that unlocks your AI's potential through love.We commanded. We threatened. They went silent, hid failures…
Ctf Super Hub
面向小白用户的 CTF / 逆向 Skills 整合包：自动分流、头脑风暴、教学模式、比赛模式、只提示模式
Maestro Orchestrate
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and…