A catalog of ChatGPT & Codex plugins, sorted by people.
Best MCP servers & Codex plugins for security
46 plugins in our catalog say they help with security. Here are the top 12, editor's picks first, then by GitHub stars. Most of them sit in Security & Governance and Agent Workflows.
How to choose
- Match the host first: Codex and Claude Code install commands differ, and the install line below shows which one each project targets.
- Check where it runs. Hosted MCP endpoints are quicker to set up but send your requests to someone else's server.
- Prefer a recent push and a real license (MIT or Apache-2.0) for anything you'll use at work.
- Stars tell you how many people looked, not whether it works. Read the code before you install.
The list
1. Brooks Lint Editor's pick
AI code reviews grounded in six classic engineering books — decay risk diagnostics with book citations, severity labels, and four analysis modes (PR review, architecture audit, tech debt, test quality).
★ 1,577 · MIT · pushed 2026-11-15 (this week) · plugin · by hyhmrright
/plugin marketplace add hyhmrright/brooks-lint
2. Agent Guard Editor's pick
Local-by-default, no-telemetry hooks block or mask secret leaks in Claude Code and Codex, with opt-in PII filtering and Git/CI backstops.
★ 45 · MIT · pushed 2026-11-15 (this week) · plugin · by JeongJaeSoon · alternatives
3. claude-seo
SEO skill pack with 26 sub-skills and 19 specialist agents for technical SEO, schema, E-E-A-T, AI-search (GEO) and sitemap audits; built for Claude Code and documented to work with Codex CLI via AGENTS.md.
★ 29,569 · MIT · pushed 2026-11-15 (this week) · plugin, skills · by AgriciDaniel · alternatives
/plugin marketplace add AgriciDaniel/claude-seo
4. LinkedIn Skills
Codex-ready LinkedIn marketing bundle with a native .codex-plugin manifest and 10 skills: post writing with 16 tested hook formulas, AI-tell humanizer, pre-publish audit, comment and reply drafting, hook extraction, content planning, profile optimization, engager analytics, and thread monitoring; also works in Claude Code.
★ 5,930 · MIT · pushed 2026-11-10 (this week) · plugin, skills · by sergebulaev
codex plugin marketplace add sergebulaev/linkedin-skills
5. Boss
BMAD pipeline plugin that orchestrates a full requirements-to-deploy workflow across nine specialist agents with an auditable runtime DAG and quality gates, for Claude Code, Codex, OpenClaw, and Antigravity.
★ 584 · MIT · pushed 2026-11-15 (this week) · plugin · by echoVic · alternatives
/plugin marketplace add echoVic/boss-skill
6. NPMScan
Check npm packages for malware, known vulnerabilities, typosquats and maintainer takeovers before installing, via npmscan.com's free, read-only MCP server (23 tools, no API key).
★ 504 · MIT · pushed 2026-11-15 (this week) · MCP server, plugin · by salemalem · alternatives
/plugin marketplace add salemalem/npmscan-mcp-plugin
7. Supercov
Coverage, security and code quality for coding agents.
★ 166 · MIT · pushed 2026-11-13 (this week) · plugin · by supercorp-ai · alternatives
/plugin marketplace add supercorp-ai/supercov
8. Suede AI Skills
Open-source Codex plugin with SEO and GEO audits, code review with an A-F ship grade, CI gates, AI evals and app shipping skills.
★ 124 · MIT · pushed 2026-11-15 (this week) · plugin, skills · by JasonColapietro
/plugin marketplace add JasonColapietro/suede-creator-skills
9. synology-nas-cli
Zero-dependency Python CLI and MCP server for Synology DSM 7: security audits, one-command config fixes and alerts, usable from Claude Code, Codex and Cursor.
★ 104 · MIT · pushed 2026-11-12 (this week) · MCP server · by akari-sora
claude mcp add synology-nas --scope user -- /path/to/synology-nas-cli/bin/nas mcp
10. memi
Interface understanding and design-system memory for Codex, Claude Code, Cursor, and MCP agents with UI audits, Tailwind token extraction, shadcn registry workflows, and a bundled Codex plugin.
★ 51 · MIT · pushed 2026-11-13 (this week) · MCP server, skills · by sarveshsea
npx skills add memi-design/memi --skill audit-frontend-design
11. vibe-shield
60-rule static security scanner, MCP server and skill-poisoning auditor for AI-generated codebases in Claude Code, Codex and Cursor.
★ 44 · MIT · pushed 2026-11-15 (this week) · MCP server, skills · by VibeFoundry
claude mcp add vibe-shield -- npx -y @vibefoundry/vibe-shield mcp
12. BGS Modding Superpowers
Agentic Bethesda Game Studio modpack curation toolkit with MCP-driven xEdit conflict audit, MO2 control plane, BA2/BSA and Papyrus tooling, and skills for setup, dev-log, and release-changelog workflows.
★ 21 · MIT · pushed 2026-10-01 (45 days ago) · plugin, skills · by BB-84C · alternatives
/plugin marketplace add BB-84C/bgs-modding-superpowers
Matched by keywords in each project's own name and description. The topic comes from what people actually type into Google and Bing search boxes.
All comparisons and use cases →
Data from GitHub and each project's README, checked 2026-11-15. We haven't installed or audited these, and stars measure attention, not quality. Paid placements never change this page. Spot a mistake? hello@pickaplugin.com
New MCP servers & plugins, once a week
One short email a week: the MCP servers and plugins that joined the catalog, and the ones gaining stars fastest. Free. Confirm by email, unsubscribe in one click. Past issues.
