pi-sloane/chatgpt-plugin

This repository holds the Pi Security plugin for ChatGPT and Codex. It connects a security platform called Pi to conversations you are already having, so you can look into security findings, check your overall security posture, get advice on how to fix problems, review designs, and paste in Markdown security reports without switching to another tool. Once installed from the ChatGPT plugin directory and connected to a Pi Security account, you can ask it things like to investigate a specific finding and explain the evidence behind it, review your current threat model and related scan results, or pull up recommended next steps for fixing an issue, all through normal conversation. The plugin is careful to separate what Pi itself reports as evidence from what is added as interpretation on top of it. Looking things up and reviewing your posture is read-only and safe to do freely. Anything that actually starts a process, such as queuing a design review, importing a report, or preparing a remediation plan, requires the plugin to first show you exactly what it plans to do and where, and wait for your confirmation before making a single request. For this release, it accepts Pi finding IDs and links, certain Confluence and Notion links for design reviews, and Markdown text pasted straight into the chat. It does not accept file uploads like PDFs, Word documents, or screenshots. It works inside ChatGPT Work on the web, the ChatGPT desktop app, and Codex CLI or IDE extensions installed through a plugin marketplace, and it is only available in English for now. The README asks users to only share information they are authorized to send, and to avoid pasting credentials or unrelated customer data into prompts or reports, since the plugin passes that content along to the Pi service.