A catalog of ChatGPT & Codex plugins, sorted by people.
NPMScan by salemalem: Check npm packages for malware, known vulnerabilities, typosquats and maintainer takeovers before installing, via npmscan.com's free, read-only MCP server (23 tools, no API key). Here are 4 plugins in our catalog that describe a similar job, with the numbers you'd check before switching.
| Plugin | Stars | License | Last push | Packaged as |
|---|---|---|---|---|
| AISLE MCP Read-only MCP server that pulls AISLE security findings and suggested patches into Claude Code, Codex or Cursor so the agent can fix vulnerabilities in the editor. | ★ n/a | No license file | n/a | MCP server |
| Known Agents MCP Server Ask ChatGPT or Claude about the AI agents, crawlers and scrapers visiting your website, using Known Agents' bot-traffic analytics. | ★ n/a | No license file | 2026-11-10 | MCP server |
| Fixlane Known security issues in developer software with reviewed fix procedures: checks your installed tools and versions read-only. Remote MCP server plus plugin for Claude and Codex. | ★ 0 | MIT | 2026-11-11 | MCP server, plugin |
| Fundry CFO Claude and Codex plugin for Fundry's read-only CFO tools over MCP. | ★ 0 | MIT | 2026-11-11 | plugin |
Picked by overlap between each project's own description and NPMScan's, same category first. Ordered by that overlap, not by stars or payment.
More: Security & Governance plugins · best Security & Governance plugins, ranked · all comparisons
Data from GitHub and each project's README, checked 2026-11-15. We haven't installed or audited these, and stars measure attention, not quality. Paid placements never change this page. Spot a mistake? hello@pickaplugin.com
One short email a week: the MCP servers and plugins that joined the catalog, and the ones gaining stars fastest. Free. Confirm by email, unsubscribe in one click. Past issues.