open source codex-security plugin

What variant of Codex are you using?

CLI

What feature would you like to see?

https://openai.com/daybreak/codex-security-plugin/#codex-cli

Additional information

Security shouldn't be hidden.

---

The Codex CLI (github.com/openai/codex) is open source (Apache-2.0, mostly Rust + TS). But the codex-security plugin is a separate, proprietary product — not in that repo. Its manifest says so:

"license": "Proprietary",
"repository": "https://github.com/openai/plugins"   // not the public OSS repo

It's distributed through the openai-curated marketplace, not bundled with the CLI.

However — since you've installed it, the payload is sitting on your disk.

And it splits into readable vs. compiled:

┌──────────────────────────┬────────────────────────┬──────────────────────────────────────────────────────────────┐
│           Part           │       Readable?        │                          What it is                          │
├──────────────────────────┼────────────────────────┼──────────────────────────────────────────────────────────────┤
│ skills/**/SKILL.md +     │ ✅ Plain markdown      │ The actual methodology/prompts: security-scan,               │
│ references/*.md          │ (~3,260 lines)         │ deep-security-scan, validation, triage-finding,              │
│                          │                        │ attack-path-analysis, threat-model, fix-finding              │
├──────────────────────────┼────────────────────────┼──────────────────────────────────────────────────────────────┤
│ scripts/*.py             │ ✅ Readable Python     │ Workbench helpers — sqlite ledger, finding preview, report   │
│                          │                        │ validation, SARIF projection                                 │
├──────────────────────────┼────────────────────────┼──────────────────────────────────────────────────────────────┤
│ schemas/*.json,          │ ✅ Readable            │ Findings/coverage/manifest schemas                           │
│ preflight/*.toml         │                        │                                                              │
├──────────────────────────┼────────────────────────┼──────────────────────────────────────────────────────────────┤
│ mcp/server.mjs +         │                        │ A tiny loader that brotli-decompresses bundled runtime       │
│ server.mjs.br.part-*     │ ❌ Compiled/obfuscated │ chunks. The real MCP server logic (workbench DB, the HTML    │
│                          │                        │ app UI) is not human-readable source                         │
└──────────────────────────┴────────────────────────┴──────────────────────────────────────────────────────────────┘