---
title: "appsec"
description: "Comprehensive application security toolbox for Codex. 62 skills across 8 frameworks (OWASP Top 10, OWASP API Top 10, STRIDE, PASTA, LINDDUN, MITRE ATT&CK, SANS/CWE Top 25, DREAD), red team simulation with 6 attacker pers"
canonical: https://agentpluginsdirectory.com/plugins/appsec
last-updated: 2026-10-12
---

# appsec
Comprehensive application security toolbox for Codex. 62 skills across 8 frameworks (OWASP Top 10, OWASP API Top 10, STRIDE, PASTA, LINDDUN, MITRE ATT&CK, SANS/CWE Top 25, DREAD), red team simulation with 6 attacker personas plus consolidator, and interactive security education.
- Slug: appsec
- Publisher: Florian Buetow
- Repository: https://github.com/florianbuetow/codex-plugins
- Manifest: plugins/appsec/plugin.json
- Version: 0.1.2
- License: MIT
- Category (editorial): other
- Skills: 69 (access-control, api, attack-surface, auth, business-logic, config, consolidator, crypto, data-disclosure, data-flows, detecting, dos, explain, file-upload, fix, full-audit, fuzz, glossary, graphql, hacktivist, harden, identifying, info-disclosure, injection, insecure-design, insider, integrity, learn, linddun, linking, logging, misconfig, mitre, model, nation-state, non-compliance, non-repudiation-privacy, organized-crime, outdated-deps, owasp, pasta-attack-sim, pasta-decompose, pasta-objectives, pasta-risk, pasta-scope, pasta-threats, pasta-vulns, pasta, privilege-escalation, race-conditions, regression, report, repudiation, review-plan, run, sans25, script-kiddie, secrets, serverless, spoofing, ssrf, start, status, stride, supply-chain, tampering, unawareness, verify, websocket)
- MCP servers: 0
- Stars: 0
- Repository created: 2026-09-10
- Repository last pushed: 2026-10-11
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/appsec
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What appsec does, in the publisher's words

> Generated for Codex from the canonical source plugin. Run just update at the marketplace root to refresh it.

Comprehensive application security toolbox for Codex. 62 skills across 8 frameworks (OWASP Top 10, OWASP API Top 10, STRIDE, PASTA, LINDDUN, MITRE ATT&CK, SANS/CWE Top 25, DREAD), red team simulation with 6 attacker personas plus consolidator, and interactive security education.

Register the repository marketplace with codex plugin marketplace add., then run codex plugin add appsec@florianbuetow-codex-plugins or install it from Florian Buetow Codex Plugins in the Plugins Directory. Invoke its workflows with $.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/florianbuetow/codex-plugins/HEAD/plugins/appsec/README.md