OpenAI Codex security directory

Product Design

Published by OpenAI

High risk

Turns early product ideas, URLs and screenshots into reviewable prototypes. Research user friction, audit flows and explore alternative visual directions. Build interactive frontend prototypes and compare them with the intended design.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Audit, clone and QA workflows navigate and interact with live pages: Can programmatically control a browser, including navigation, form input, clicks, capture, or page inspection.
  • Share workflow publishes runnable prototypes to hosting services: Can deploy code, applications, containers, workflows, or infrastructure to a persistent environment.
  • Build and context workflows create and update local project files: Can read, create, or change files on the local filesystem or in a selected project.
  • Can send data to external services: Can send prompts, files, queries, or connected-service data to an external service.
  • Prototype workflows install dependencies and execute generated applications: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.

Available capabilities

This add-on exposes 10 tools or capabilities.

  • audit
  • design-qa
  • get-context
  • ideate
  • image-to-code
  • index
  • research
  • share
  • url-to-code
  • user-context

The interactive security report will load automatically.