# Authorized Security Review (ChatGPT Plugin)

> Authorized security testing

- Type: plugin
- Publisher: Issam Chaaban
- Categories: Security
- Website: https://chatgpt.com/plugins/plugins_6ab1390b02d4819185936510a50a38e9
- Open in ChatGPT: https://chatgpt.com/plugins/plugins_6ab1390b02d4819185936510a50a38e9
- Version: 1.0.1
- Listed: 2026-10-15

## About

An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend.

## Install

1. **Add it in ChatGPT** Open Plugins in the ChatGPT sidebar (web or desktop), search for “Authorized Security Review” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

## Disconnect or uninstall

1. **In ChatGPT** Disconnect an account in Settings → Apps or Plugins. To remove the plugin itself, open Authorized Security Review in the Plugin Directory and select Uninstall plugin. Uninstalling can disconnect every account connected through it, and plugins your workspace installs may not offer the option.

2. **In Codex** Run /plugins in the Codex CLI, select the plugin and uninstall it, or press Space to turn it off.

## Skills

- **authorized-security-review**: Use when the user requests an authorized bug-bounty or HackerOne security assessment, evidence validation, or vulnerability report using existing connected tools. Supports source review and scoped web/API assessment.

## Example prompts

- "Review this authorized program using my connected tools."
- "Validate this finding against the supplied evidence."
- "Draft a HackerOne report from these verified results."

## Authorized Security Review alternatives

- [Codex Security](https://chatgptplugins.directory/plugins/codex-security.md): Security scanning for your codebase
- [Static Analysis (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-static-analysis.md): CodeQL, Semgrep and SARIF parsing skills for security bug hunting
- [Differential Review (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-differential-review.md): Security-focused review of code diffs with blast-radius estimation
- [Supply Chain Risk Auditor (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-supply-chain-risk-auditor.md): Audit npm, PyPI and Go dependencies for supply-chain risk
- [Aivana Security Investigator](https://chatgptplugins.directory/plugins/aivana-security-investigator.md): Run safe KQL investigations
- [Atbash Safety](https://chatgptplugins.directory/plugins/atbash-safety.md): Guard tool calls with Atbash

---
Source: https://chatgptplugins.directory/plugins/authorized-security-review · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.