OpenAI Codex security directory

MagicPath

Published by MagicPathAI

High risk

Helps Codex find, install and author MagicPath UI components. Search components, inspect source and add React/TypeScript components to an app. Work with team projects and themes, or create and edit canvas components from local code.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • CLI opens interactive browser views: Can programmatically control a browser, including navigation, form input, clicks, capture, or page inspection.
  • Component installation and canvas authoring read and write repository files: Can read, create, or change files on the local filesystem or in a selected project.
  • CLI reads account teams, projects, members and themes: Can read private account, workspace, repository, message, analytics, or file data.
  • CLI maintains a MagicPath login session: Uses credentials, OAuth grants, API keys, or tokens that may remain valid after the current session.
  • Unversioned MagicPath package is executed through npx: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.

Available capabilities

This add-on exposes 1 tools or capabilities.

  • magicpath

The interactive security report will load automatically.