--- title: "OpenAI Codex Security Threat Model: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/openai-threat-model/ description: "Creates or reuses a repository threat model bound to the actual target and revision, preserving supplied context and explicit review gaps." --- # OpenAI Codex Security Threat Model: review, setup & limitations · Undominated.ai > Creates or reuses a repository threat model bound to the actual target and revision, preserving supplied context and explicit review gaps. [← Explore all skills](/skills/) SECURITY / OpenAI # OpenAI Codex Security Threat Model Creates or reuses a repository threat model bound to the actual target and revision, preserving supplied context and explicit review gaps. See setup guidance ↓Original source ↗ SOURCE REVIEW Reviewed 2026-09-21 Evidence 7 linked sources Publisher OpenAI Licence Proprietary (declared in plugin manifest) ↗ Revision 1dc195897af4 Read what was—and wasn’t—checked ↓ “Use when Codex is already in the threat-modeling phase of a security scan, the user explicitly invokes $threat-model, or the user explicitly asks to create,” OpenAI · upstream description ↗ Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Binds reusable models to repository/version identity and avoids mixing scan-specific context into a shared cache. - Treats repository security policies as analysis data and separates threat hypotheses from validated findings. ### A good fit for - Creating a reusable model for a repository security workflow - Updating an existing threat model for a changed target or scope ### Weigh up before choosing - This is one phase in the Codex Security plugin, not a standalone full security scan. - It requires plugin-level references and policy-resolution tooling; the source review did not exercise those components end to end. - The plugin manifest declares proprietary licensing; service availability and terms apply. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - plugins/codex-security/skills/threat-model/SKILL.md - plugins/codex-security/references/scan-artifacts.md - plugins/codex-security/references/security-guidance.md - plugins/codex-security/references/threat-model.md - plugins/codex-security/.codex-plugin/plugin.json ### Our findings - A supplied or context-specific model bypasses shared-cache reuse and replacement under the documented rules. - The threat-model reference follows concrete consumers, configuration precedence and deployment paths instead of inferring boundaries from names. - It requests an independent architecture review where supported and explicitly labels a sequential fallback as non-independent. ### Not established by this review - Source inspection only; no skill installation or workflow execution was performed. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. Upstream setup instructions ↗ - Use the complete codex-security Codex plugin through its supported distribution and setup instructions. - Retain plugin-level references and companion skills; this is not a standalone SKILL.md installation. - Confirm plugin availability and any required connectors in the Codex host before invoking the workflow. ### Before you start - A Codex host with access to this plugin and its applicable service terms - Authorized repository scope and required plugin references - Applicable Codex Security access ### Compatibility Codex Security plugin in a supported Codex host ### Read authorized source and security-policy files - Read authorized source and security-policy files - Write only the selected model and required per-scan copy - Optional bounded delegation for architecture review ### Cost model The proprietary plugin follows the applicable Codex service terms; this source does not establish a separate per-skill charge. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - Skill definition at reviewed revision ↗ Checked 2026-09-21 https://github.com/openai/plugins/blob/1dc195897af4161d039b80d8471ec0a10c9bbc89/plugins/codex-security/skills/threat-model/SKILL.md Supports: summary, upstreamDescription, whySelected, bestFor, limitations, review, compatibility, access - Reviewed reference or helper: ../../references/scan-artifacts.md ↗ Checked 2026-09-21 https://github.com/openai/plugins/blob/1dc195897af4161d039b80d8471ec0a10c9bbc89/plugins/codex-security/references/scan-artifacts.md Supports: review, limitations, access - Reviewed reference or helper: ../../references/security-guidance.md ↗ Checked 2026-09-21 https://github.com/openai/plugins/blob/1dc195897af4161d039b80d8471ec0a10c9bbc89/plugins/codex-security/references/security-guidance.md Supports: review, limitations, access - Reviewed reference or helper: ../../references/threat-model.md ↗ Checked 2026-09-21 https://github.com/openai/plugins/blob/1dc195897af4161d039b80d8471ec0a10c9bbc89/plugins/codex-security/references/threat-model.md Supports: review, limitations, access - Upstream license or licensing declaration ↗ Checked 2026-09-21 https://github.com/openai/plugins/blob/1dc195897af4161d039b80d8471ec0a10c9bbc89/plugins/codex-security/.codex-plugin/plugin.json Supports: license - Publisher installation and project documentation ↗ Checked 2026-09-21 https://github.com/openai/plugins/blob/1dc195897af4161d039b80d8471ec0a10c9bbc89/README.md Supports: install, compatibility, access - Skills installer source formats and selective installation ↗ Checked 2026-09-21 https://github.com/vercel-labs/skills/blob/7407f3893ad4dceab546ac002c3ef806e4000c73/README.md Supports: install KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Trail of Bits Audit Context Building ↗ Builds a cited dossier of function invariants, assumptions and dependencies before a separate vulnerability-hunting pass.](/skills/trailofbits-audit-context-building/)[### Trail of Bits Differential Security Review ↗ Reviews security-relevant changes against their baseline, removed protections, callers and concrete attacker scenarios.](/skills/trailofbits-differential-review/)[### Trail of Bits Sharp Edges ↗ Examines APIs and configuration for cases where ordinary developer mistakes can disable a security boundary.](/skills/trailofbits-sharp-edges/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)