How to Use the Checkmarx CheckAI ChatGPT Plugin?

1. How to install the Checkmarx CheckAI ChatGPT Plugin?

Installation Steps:

1. Open the ChatGPT website.
2. Log in to your ChatGPT account.
3. Make sure you have enabled the ChatGPT plugin in your account.
4. Select the GPT-4 model.
5. Select the Plugins.
6. Click on the dropdown arrow to open the list of installed plugins and scroll down to the bottom to click on "Plugin Store".
7. Find Checkmarx CheckAI in the plugin store and click on "Install".

2. How to use the Checkmarx CheckAI ChatGPT Plugin?

Usage Steps:

1. Enter the code or the name of the package/library you want to validate in the ChatGPT dialog box.
2. Type "Use Checkmarx CheckAI to validate the code" or "Use Checkmarx CheckAI to validate the package/library" in the dialog box.
3. Wait for Checkmarx CheckAI to return the validation results.

3. A few examples of prompt words for using the Checkmarx CheckAI ChatGPT Plugin

• "Use Checkmarx CheckAI to validate the code" (triggers code validation).
• "Use Checkmarx CheckAI to validate the npm install package" (triggers package validation).
• "Use Checkmarx CheckAI to validate the pip install library" (triggers library validation).

4. What are the advantages and disadvantages of the Checkmarx CheckAI ChatGPT Plugin?

Advantages:

• Effectively verifies packages/libraries in the code, ensuring the safety of the development environment.
• For Java packages, the plugin conveniently uses the Maven groupId and artifactId combination, making it more accessible to Java developers.

Disadvantages:

• Verification may take some time, causing slight delays for large projects.
• The plugin may not be effective in validating some uncommon packages/libraries.

5. Are there any restrictions on using the Checkmarx CheckAI ChatGPT Plugin?

The plugin may not be able to validate certain specific packages/libraries, and the validation process may require some time. Additionally, the plugin may require users to provide detailed package/library information for effective validation.

6. What are some tips for using the Checkmarx CheckAI ChatGPT Plugin?

When validating code or packages/libraries, provide detailed information such as the full name of the package/library to improve accuracy. For Java developers, utilize the plugin's special handling for Java packages by providing Maven groupId and artifactId for validation.

7. What are the consequences of improper use of the Checkmarx CheckAI ChatGPT Plugin?

Improper use of the plugin may result in inaccurate validation, potentially compromising the security of the development environment. For example, failing to provide complete package/library information might render the plugin ineffective. Ignoring the plugin's validation results could lead to security risks in the development environment.

8. Conclusion

Checkmarx CheckAI is a highly practical ChatGPT plugin that effectively validates packages/libraries in code, ensuring the safety of the development environment. To use the plugin, simply enter relevant prompt phrases in the dialog box, and the plugin will automatically perform the validation and return the results.