Week 45, updated 2 Nov 2026

Coding agents codex-plugin-cc

Is codex-plugin-cc safe?

Short answer: No issues found. StackGrade's weekly scan of openai/codex-plugin-cc found no issues: no critical-severity dependency advisories, no downloading install hooks, no remote-code patterns and no risky agent instruction files. Automated scan of commit db52e28 on 2 Nov 2026, not a manual audit.

Updated : the last week its score, rank or safety result changed.

Official plugin to use Codex from inside Claude Code for code review or delegated tasks.

  • 34,797 stars
  • pushed 8 Jul
  • Apache-2.0
  • JavaScript

github.com/openai/codex-plugin-cc

29score out of 100

#48of 52 overall#13in Coding agentssame score as Week 44

  • Maintenance 30%10
  • Adoption 30%22
  • Docs 20%69
  • Community 20%–
W42W43W44W45

Score over the last 4 weeks: 29, 29, 29, 29.

No issues found

All checks clean in the scan of 2 Nov 2026.

How this score works

Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.

  • Maintenance: Last push 8 Jul 2026. Last 7 GitHub releases within 99 days (about 1.8 per 30 days), latest release 8 Jul 2026. Median 455.1 h to close an issue (5 closed issues).
  • Adoption: 34,797 stars (70%), 2,408 forks (30%).
  • Docs: README 10,907 characters, 25 headings, 21 code blocks, install section: yes.

Methodology

#13 of 14 in Coding agents

Ranked by score. The yellow row is this tool.

Coding agents, Week 45score 0–100, safety
  1. 1Gemini CLI#4 overall70Caution
  2. 2OpenCode#5 overall70No issues found
  3. 3OpenHands#10 overall68Caution
  4. 4Claude Code#11 overall65No dependencies scanned
  5. 5Cline#12 overall65Caution
  6. 6Codex#16 overall58Caution
  7. 7deepseek-harness#17 overall57Caution
  8. 8KiroCrew#27 overall52Caution
  9. 9magpie#28 overall51No issues found
  10. 10Continue#43 overall37Caution
  11. 11goose#44 overall36Caution
  12. 12Aider#45 overall31Caution
  13. 13codex-plugin-cc#48 overall29No issues found
Show the other 1
  1. 14Roo Code#51 overall23Caution

Safety scan, 2 Nov 2026

Automated scan of commit db52e28, 58 files. Not a manual audit.

No issues found

  • 0Critical dependency advisories0 high, 0 medium, 0 low. OSV, runtime dependencies only.
  • 0Install hooksNo npm install scripts found.
  • 0Remote-code patternsFor example eval(fetch(…)).
  • 15Agent files checked0 phrases flagged for review.
  • 0curl | sh installersIn docs or program code. Information only.
Why this label?

No issues found by the automated scan.

Known vulnerabilities in runtime dependencies (OSV): 0 critical, 0 high, 0 medium, 0 low

Automated scan of commit db52e28 on 2 Nov 2026, not a manual audit. 58 files checked. What we check

Repo activity

From the GitHub API, fetched 2 Nov 2026.

  • 0Releases, 90 daysLatest v1.0.6, 8 Jul
  • 19dMedian issue closeOver 5 closed issues
  • 34.8kStars+217 since 26 Oct
  • 2.4kForks545 open issues
  • 2026Repo created30 Mar 2026
30 days ago2 Nov
0 releases in the last 30 days, one mark each (GitHub releases feed, last 10 entries).

0 releases in the last 30 days (GitHub releases feed, last 10 entries).

Questions about codex-plugin-cc

Answers use this week's StackGrade data.

Is codex-plugin-cc safe to use?

No issues found. StackGrade's weekly scan of openai/codex-plugin-cc found no issues: no critical-severity dependency advisories, no downloading install hooks, no remote-code patterns and no risky agent instruction files. Automated scan of commit db52e28 on 2 Nov 2026, not a manual audit.

How does StackGrade score codex-plugin-cc?

codex-plugin-cc scores 29 out of 100 in Week 45: #48 of 52 tracked tools overall and #13 in Coding agents. The score combines maintenance (10), adoption (22) and docs (69) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.

What are the alternatives to codex-plugin-cc?

The highest-scored other tools in Coding agents this week: Gemini CLI (70, Caution), OpenCode (70, No issues found), OpenHands (68, Caution), Claude Code (65, No dependencies scanned). StackGrade has not tested them hands-on.

What licence does codex-plugin-cc use?

The licence listed for openai/codex-plugin-cc is Apache-2.0. Read the licence text before commercial use.

Compare and use it

Used in 1 AI use case

All facts and sources
Type
Plugin
License
Apache-2.0
Language
JavaScript
Created
30 Mar 2026
Owner
openai (Organization)
Forks
2,408

GitHub description: “Use Codex from Claude Code to review code or delegate tasks.”

Sources: github.com/openai/codex-plugin-cc, api.github.com/repos/openai/codex-plugin-cc, raw.githubusercontent.com/openai/codex-plugin-cc/main/README. Fetched 2 Nov 2026.

Know when codex-plugin-cc changes label

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.