Hey @trailofbits,
I maintain awesome-codex-plugins, a curated index of Codex plugins with 29 listed. Trail of Bits' Claude Code skills (4.2K stars) are some of the most respected security research tools in the ecosystem, but they're not discoverable through the Codex plugin search path.
The .codex-plugin/plugin.json manifest format works with both Claude Code and Codex CLI. Adding manifests would make your security analysis skills findable by Codex users. We also have a scanner that validates plugin structure and catches issues like hardcoded secrets and unpinned CI actions.
Given Trail of Bits' security focus, the scanner might also be useful as a pre-commit check for your own plugin development.
Let me know if you're open to adding manifests.
Activity
0No activity yet.