An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend.
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “Authorized Security Review” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 1
- authorized-security-review
Use when the user requests an authorized bug-bounty or HackerOne security assessment, evidence validation, or vulnerability report using existing connected tools. Supports source review and scoped web/API assessment.
Things to ask
- “Review this authorized program using my connected tools.”
- “Validate this finding against the supplied evidence.”
- “Draft a HackerOne report from these verified results.”
Disconnect or uninstall
- 1In ChatGPT
Disconnect an account in Settings → Apps or Plugins. To remove the plugin itself, open Authorized Security Review in the Plugin Directory and select Uninstall plugin. Uninstalling can disconnect every account connected through it, and plugins your workspace installs may not offer the option.
- 2In Codex
Run /plugins in the Codex CLI, select the plugin and uninstall it, or press Space to turn it off.