OpenAI Codex security directory

Boltz

Published by Boltz

High risk

Brings Boltz biomolecular modeling into Codex. Predict complex structures and binding, screen molecule or protein libraries, and design binders. Also supports small-molecule ADME predictions and recovery of modeling job results.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Writes payloads and downloaded results locally: Can read, create, or change files on the local filesystem or in a selected project.
  • Sends protein/molecule data to Boltz API: Can send prompts, files, queries, or connected-service data to an external service.
  • CLI login performed without asking first: Uses credentials, OAuth grants, API keys, or tokens that may remain valid after the current session.
  • curl|sh / irm|iex installer and shell-driven CLI: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.
  • Submits paid compute jobs: Can initiate purchases, paid jobs, payments, refunds, infrastructure spend, or other financial activity.

Available capabilities

This add-on exposes 8 tools or capabilities.

  • boltz-check-status
  • boltz-cli-setup
  • boltz-protein-design
  • boltz-protein-screen
  • boltz-small-molecule-adme
  • boltz-small-molecule-design
  • boltz-small-molecule-screen
  • boltz-structure-and-binding

The interactive security report will load automatically.