Codex Plugin Scanner
Description
⚠️ MOVED → hashgraph-online/ai-plugin-scanner — Security scanner for AI CLI plugins
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
⚠️ Repository Moved
**This project has been renamed and moved.**
codex-plugin-scanner → **ai-plugin-scanner**
[](https://github.com/hashgraph-online/ai-plugin-scanner)
👉 **[hashgraph-online/ai-plugin-scanner](https://github.com/hashgraph-online/ai-plugin-scanner)**
Security and best-practices scanner for AI CLI plugins. Scores plugins 0-100.
What changed?
Only the name. The project, branding, and maintainers (HOL / Hashgraph Online) are the same.
| Old | New | |
|---|---|---|
| Repo | hashgraph-online/codex-plugin-scanner |
hashgraph-online/ai-plugin-scanner |
| PyPI package | codex-plugin-scanner |
codex-plugin-scanner (unchanged) |
| Docker image | ghcr.io/hashgraph-online/codex-plugin-scanner |
ghcr.io/hashgraph-online/codex-plugin-scanner (unchanged) |
| GitHub Action | hashgraph-online/hol-codex-plugin-scanner-action |
hashgraph-online/hol-codex-plugin-scanner-action (unchanged) |
| License | Apache 2.0 | Apache 2.0 |
Quick links
Updating your workflows
If you reference this repo in CI or docs, update the URL:
- https://github.com/hashgraph-online/codex-plugin-scanner
+ https://github.com/hashgraph-online/ai-plugin-scanner
The PyPI package name, Docker image, and GitHub Action remain the same. No code changes needed
Related Skills
Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Google Workspace Alert Center
Manage security alerts
Security Related Agents
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,
Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | -