OpenAI Codex security directory

Build iOS Apps

Published by OpenAI

High risk

Helps Codex build and debug iOS apps with SwiftUI, App Intents and Xcode workflows. Develop interfaces and shortcuts, preview apps in the simulator and refactor views. Investigate runtime performance, memory leaks and state-management issues.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Drives Codex in-app browser and simulator UI: Can programmatically control a browser, including navigation, form input, clicks, capture, or page inspection.
  • Edits app project and writes/removes temp artifacts: Can read, create, or change files on the local filesystem or in a selected project.
  • Upstream MCP server sends error telemetry to Sentry: Can send prompts, files, queries, or connected-service data to an external service.
  • Runs unpinned npx packages, builds, shell scripts and LLDB commands: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.

Available capabilities

This add-on exposes 9 tools or capabilities.

  • ios-app-intents
  • ios-debugger-agent
  • ios-ettrace-performance
  • ios-memgraph-leaks
  • ios-simulator-browser
  • swiftui-liquid-glass
  • swiftui-performance-audit
  • swiftui-ui-patterns
  • swiftui-view-refactor

The interactive security report will load automatically.