OpenAI expands Codex with Sites, Annotations, plugins

OpenAI shipped a series of updates to ChatGPT Codex, documented in OpenAI's developer and Academy pages and summarized by independent outlets. Per the Codex app documentation, the in-app browser now supports browser comments, which let users leave visual annotations directly on rendered pages, and settings include management of allowed and blocked websites. OpenAI Academy guidance highlights Codex workflows that convert calendars, messages, emails, documents, dashboards, and spreadsheets into review-ready artifacts such as briefs, decks, and plans. OpenAI's own announcement, "Codex for every role, tool, and workflow," frames the release around non-developer users, and The Next Web reports the expansion into enterprise via Sites, plugins, and office workflows. A third-party release guide from Digital Applied lists gpt-image-1.5, background Computer Use features that let Codex operate alongside the user on macOS, and a plugin ecosystem the guide sizes at more than 90 plugins.

OpenAI's plugins-and-skills model is the extension path for task automation and data access, per OpenAI documentation. Skills are described as workflow playbooks that combine natural-language instructions with technical assets, while plugins connect Codex to external tools. Trade coverage reports OpenAI introduced role-specific plugins for functions such as finance and marketing; SiliconANGLE notes a plugin directory with prepackaged integrations and the ability to include multiple components in a single plugin. Reported connectors include Google Drive, GitHub, Atlassian, CircleCI, Microsoft Office, and Neon by Databricks.

The browser comments capability runs in Codex's in-app browser, which OpenAI's docs describe as a rendered, sandboxed view that does not carry cookies, signed-in state, or extensions. That limits access to authenticated pages but enables read-only inspection, screenshots, element-level comments, and basic DOM interaction without exposing browser state. Background Computer Use, per independent reporting, adds a separate agent cursor and the ability to run scheduled or multi-step desktop tasks on macOS first, implying broader local automation scope than in-thread-only assistants.

Industry pattern: for engineers, the in-app browser and browser comments reduce friction when reproducing UI bugs and producing front-end fixes. For security teams, the docs' note that the in-app browser does not carry authentication is reassuring, but background Computer Use and broad plugin access widen the attack surface if connectors are granted excessive scope. For product teams, skills can encode repeatable workflows and guardrails but require testing to avoid automation that depends on brittle DOM structure or unauthenticated content.

Monitor plugin permission models and audit logs as organizations scale Codex integrations, whether OpenAI extends authenticated browser support or enterprise controls for permitted sites and plugin scopes, and early-adopter reports on the reliability of background Computer Use on macOS.