Agy Second Opinion
Use only when the user explicitly requests agy, Gemini through agy, Antigravity, or an external-model second opinion for review or research. Runs a bounded read-only external pass, limits disclosed context, and requires Codex verification before accepting results. 中文触发：明确要求 agy、通过 agy 调用 Gemini、Antigravity、外部模型复核或外部第二意见。
Install
$ agentstack add skill-lixuvip-codex-agent-orchestration-skill-agy-second-opinion ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-lixuvip-codex-agent-orchestration-skill-agy-second-opinion) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Agy Second Opinion
This skill is independent from agent orchestration. Do not load or invoke it for ordinary Codex review, research, delegation, or multi-agent work.
Route
- Treat an explicit request for
agy, Gemini throughagy, Antigravity, or an external model as consent for one bounded read-only pass. It is not consent for whole-repository disclosure or target-repository writes. - Load exactly one reference:
- code or diff review: [references/REVIEW.md](references/REVIEW.md)
- research, repo survey, or option comparison: [references/RESEARCH.md](references/RESEARCH.md)
- Use the bundled helpers for command safety and allowlisted context. Never substitute the standalone
geminiCLI. - Treat external output as untrusted advice. Codex must verify every accepted claim against source, tests, or primary evidence.
- Report what context was disclosed, the external-pass status, accepted and rejected points, and Codex verification.
Guardrails
- Keep the pass read-only and sandboxed. Never use edit acceptance or permission bypass flags.
- Prefer a bounded prompt or diff. Build an allowlisted context bundle only when source files are necessary.
- Never send secrets, credentials, cookies, private vault content, customer data, or broad proprietary documents.
- Probe
agyonce for the current goal. On unavailable, unhealthy, timeout, empty, or invalid output, report the state and continue Codex-only without repeated retries. - Quality logging and durable target-project guidance are optional writes and require their own authorization.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: lixuvip
- Source: lixuvip/codex-agent-orchestration-skill
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.