---
title: "security-pack"
description: "Codex marketplace bundle for secure development, OWASP, risk gates, and web identity."
canonical: https://agentpluginsdirectory.com/plugins/security-pack
last-updated: 2026-10-05
---

# security-pack
Codex marketplace bundle for secure development, OWASP, risk gates, and web identity.
- Slug: security-pack
- Publisher: Harley Bartles
- Repository: https://github.com/HarleyBartles/agent-asset-marketplace
- Manifest: dist/plugins/security-pack/plugin.json
- Version: 1.0.0
- License: MIT
- Category (editorial): other
- Skills: 4 (owasp-top-ten, risk-gates, secure-development, web-identity)
- MCP servers: 0
- Stars: 0
- Repository created: 2026-06-04
- Repository last pushed: 2026-10-03
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/security-pack
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What security-pack does, in the publisher's words

This bundle projects first-party source custody into the Codex marketplace.

- provenance and source mapping in SOURCE.md
- bundle inventory in references/bundle-manifest.json
- The pack covers secure coding, OWASP review, risk gates, security testing, threat modeling, cloud review, config validation, risk review, and web identity.
- The pack does not absorb unrelated topical homes.
- The bundle is a marketplace bundle over retained source custody, not a new source of truth.

Skills install directly from the Codex plugin root under this plugin.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/HarleyBartles/agent-asset-marketplace/HEAD/dist/plugins/security-pack/README.md