OpenAI Codex security directory

Mixpanel Headless

Published by Mixpanel

High risk

Brings Mixpanel product analytics into Codex through its Python SDK. Explore event schemas, funnels, retention, user flows and profile data. Build or inspect dashboards and manage connected accounts, projects and analysis context.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • OAuth setup opens an interactive browser: Can programmatically control a browser, including navigation, form input, clicks, capture, or page inspection.
  • Dashboard skill exposes deletion operations: Can delete records, files, projects, messages, or resources that may be difficult to recover.
  • Plugin creates and modifies dashboards, reports and business context: Can create or change persistent records, files, projects, permissions, settings, or credentials.
  • Analysis can retrieve events and individual user profiles: Can read private account, workspace, repository, message, analytics, or file data.
  • Auth manager persists OAuth or service-account credentials: Uses credentials, OAuth grants, API keys, or tokens that may remain valid after the current session.
  • Skills install packages and execute generated Python analysis: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.

Available capabilities

This add-on exposes 4 tools or capabilities.

  • dashboard-expert
  • mixpanel-auth
  • mixpanelyst
  • mixpanel-headless-setup

The interactive security report will load automatically.