CDX-PL-013: Invalid Hooks Value - Codex CLI

Summary

• Rule ID: CDX-PL-013
• Severity: LOW
• Category: Codex CLI
• Normative Level: SHOULD
• Auto-Fix: No
• Verified On: 2026-07-30

Applicability

• Tool: codex
• Version Range: >=0.117.0
• Spec Revision: unspecified

Evidence Sources

• https://github.com/openai/codex/blob/rust-v0.146.0/codex-rs/core-plugins/src/manifest.rs
• https://github.com/openai/codex/blob/rust-v0.146.0/codex-rs/core-plugins/src/agent_plugin_manifest.rs

Test Coverage Metadata

• Unit tests: true
• Fixture tests: true
• E2E tests: false

Examples

The following examples demonstrate what triggers this rule and how to fix it.

Invalid

{"name":"my-plugin","hooks":42}

Valid

{"name":"my-plugin","hooks":["./hooks.json"]}