Back to extension profile
Extension Security Summary

Codex – OpenAI’s coding agent

openai.chatgpt@26.5818.31338
Security outcomeNo known concern

Analysis completed without actionable evidence or unapproved baseline changes.

Checked version26.5818.31338
Analysis statusCompleted
Scan date
What this means

The key information before you install.

This is a plain-language summary of the completed analysis for this exact extension version. Technical evidence and workspace actions are available after sign-in.

Permission Passport · exact release

What this extension can reach.

Six consistent access categories, tied to version 26.5818.31338. Capability describes power—not malicious intent.

Newer release availableLatest is @26.5818.41705
3 categories observed@26.5818.31338 analyzed releaseBound artifact identity
Workspace and filesystem accessFiles

Filesystem

Observed
Commands, processes, and install scriptsTerminal

Process Execution

Observed
Outbound connections and remote servicesNetwork

Network

Observed
Credentials, environment, and sensitive configurationSecrets

Not observed in this scan—not a guarantee of absence.

Not observed
Editor commands, webviews, and user interactionEditor

Not observed in this scan—not a guarantee of absence.

Not observed
AI models, autonomous tools, MCP, and delegationAgents & tools

Not observed in this scan—not a guarantee of absence.

Not observed
This passport never carries forward to another version.
Review evidence
Release context

Versions

26.5818.41705Not analyzed26.818.41705Not analyzed26.818.41509Not analyzed26.5818.41509Not analyzed26.818.32112Not analyzed26.5818.32112Not analyzed