How I vet a Codex plugin or MCP server in about two minutes
Plugins and MCP servers are easy to install, and that's the problem. A plugin can bundle hooks and MCP servers, and both run code on your machine. Nobody audits every community plugin (we don't either), so here's the quick check I run before installing anything. Disclosure: I run PickAPlugin , an i…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-04 22:23 · DEV Community — AI
How I vet a Codex plugin or MCP server in about two minutes