VIDOC Security Review brings security code review workflows from Vidoc Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diffs, validate suspected vulnerabilities, and prepare reports with evidence, impact, and proposed fixes. Findings distinguish supported issues from concerns that need more context. Reviews use supplied code and the host's existing read-only access. This skills-only plugin does not connect to the VIDOC platform, provide a repository connection, or run the VIDOC scanning service. Each review describes its scope and missing evidence. Learn more about Vidoc Security Lab at vidocsecurity.com.
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “VIDOC Security Review” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 3
- security-code-review
Review user-supplied source code, a diff, or an accessible repository for security vulnerabilities when the user requests a security code review.
- security-finding-validation
Validate a user-supplied suspected vulnerability or existing security finding against supplied or accessible source code and identify supporting evidence or false positives.
- security-review-report
Prepare a security code review report from supplied findings, validation results, and scope notes when the user requests a report or summary of an existing review.
Things to ask
- “Use VIDOC Security Review to review this code or diff for security vulnerabilities.”
- “Use VIDOC Security Review to validate this suspected security finding against the supplied code.”
- “Use VIDOC Security Review to prepare a report from these findings.”