# Codex

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-poteto-noodle-codex`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [poteto](https://agentstack.voostack.com/s/poteto)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [poteto](https://github.com/poteto)
- **Source:** https://github.com/poteto/noodle/tree/main/.agents/skills/codex
- **Website:** https://poteto.github.io/noodle/

## Install

```sh
agentstack add skill-poteto-noodle-codex
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Codex

## Profiles

- **(no profile)** — read-only analysis (no compilation, no tests)
- **`--profile edit`** — local edits, build, or test (`workspace-write`, full-auto)
- **`--profile full`** — network or broad filesystem access (`danger-full-access`, full-auto)

Use `--profile edit` whenever the task involves `go test`, `go build`, or any command that writes build artifacts. The default read-only sandbox blocks all writes including compiler temp dirs.

For complex tasks, add `--config model_reasoning_effort="xhigh"`.

## Model Selection

Default to the project model in `.codex/config.toml` (`gpt-5.4`).

Use `--model gpt-5.3-codex-spark` for speed-first interactive work:

- tight back-and-forth iteration
- quick bug fixes and targeted edits
- small-to-medium refactors or UI tweaks
- rapid prototyping where frequent redirect/interrupt is expected

Stay on default `gpt-5.4` for depth-first work:

- long autonomous runs
- broad multi-file changes with heavy reasoning
- test-heavy or verification-heavy tasks
- higher correctness/risk surfaces where deeper reasoning is worth the extra latency

If the user explicitly requests a model, follow the user's request.

## Commands

Project defaults in `.codex/config.toml`. Always include `--skip-git-repo-check` and `2>/dev/null`. Only override model when the user explicitly requests it, or when the task clearly fits the Spark speed-first criteria above.

| Use case | Command |
| --- | --- |
| Read-only analysis | `codex exec --skip-git-repo-check -o "$CODEX_OUT" "prompt" 2>/dev/null` |
| Speed-first interactive loop (Spark) | add `--model gpt-5.3-codex-spark` |
| Apply local edits | add `--profile edit` |
| Network / broad access | add `--profile full` |
| Resume session | `echo "prompt" \| codex exec --skip-git-repo-check -o "$CODEX_OUT" resume --last 2>/dev/null` |

Create a temp file for output before running: `CODEX_OUT=$(mktemp /tmp/codex-out.XXXXXX)`. Read the result from `$CODEX_OUT` after completion.

Run with Bash `run_in_background: true`. Monitor via `TaskOutput` with `block: true, timeout: 600000` — do NOT use `sleep` commands to poll. Read the `-o` file for the final answer.

## Resuming

Don't pass model/effort/sandbox flags when resuming — original session settings carry over. `-o` is safe to include.

## Conventions

This is a Go project. Use `go test`, `go build`, `go vet` in prompts. Codex workers don't receive CLAUDE.md or hooks, so project conventions must be explicit.

## Post-Execution Verification

**Always verify Codex output via `git diff --stat`** — never trust the worker's self-reported file list. Codex workers may make out-of-scope changes (deleting files, reverting unrelated code, removing test functions). The completion promise may list only intended files while omitting destructive side effects.

When other work exists in the same codebase, include explicit "DO NOT modify or delete" file lists in the prompt. The positive instruction ("only touch these files") is insufficient — Codex interprets "clean up" broadly.

Per [[principles/prove-it-works]]: trust artifacts, not self-reports.

## Worktree Usage

With `-C `, the worktree has its own git index. `.claude/` may symlink to `.agents/` — use `.agents/` paths for git operations.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [poteto](https://github.com/poteto)
- **Source:** [poteto/noodle](https://github.com/poteto/noodle)
- **License:** MIT
- **Homepage:** https://poteto.github.io/noodle/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-poteto-noodle-codex
- Seller: https://agentstack.voostack.com/s/poteto
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.