AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Codex Review

skill-thibautbaissac-rails-ai-agents-codex-review · by ThibautBaissac

Get an independent second opinion from OpenAI Codex CLI on a plan, diff, spec, or Claude's last response. Use when the user asks to "get a second opinion", "have codex review", "cross-check with codex", or wants adversarial review of Claude's output. Argument is one of plan|diff|spec|last-response (default last-response).

No reviews yet
0 installs
4 views
0.0% view→install

Install

$ agentstack add skill-thibautbaissac-rails-ai-agents-codex-review

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-thibautbaissac-rails-ai-agents-codex-review)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Codex Review? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

/codex-review — Independent second opinion from Codex CLI

Argument: $ARGUMENTS — one of plan | diff | spec | last-response. Default last-response.

Never fall back to reviewing Claude's own output if Codex fails. If Codex can't run, say so and stop.

1. Preflight

Run in order. Stop cleanly on first failure:

command -v codex >/dev/null 2>&1 || { echo "codex CLI not found. Install: https://github.com/openai/codex"; exit 0; }
codex login status 2>&1 | grep -qi "logged in" || { echo "codex not logged in. Run: codex login"; exit 0; }

2. Resolve target

  • last-response (default): identify your previous substantive assistant turn (the last turn with user-facing prose — skip turns that are pure tool calls or tool results). Write that prose verbatim to a temp file via the Write tool: $(mktemp -t codex-review).md. Record the path as $TARGET_FILE.
  • plan: if there is an active in-conversation plan, write it to a temp file as above. Otherwise pick the newest file under ./.claude/plans/ (ls -t ./.claude/plans/*.md 2>/dev/null | head -1). If neither exists, report "no plan found" and stop.
  • spec: pick the newest spec.md under ./specs/ (fd -t f 'spec\.md$' ./specs 2>/dev/null | xargs ls -t 2>/dev/null | head -1). If none, stop.
  • diff: no file needed — Codex reads the repo directly via codex review --uncommitted.

3. Build rubric (skip for diff)

The diff target uses codex review's built-in review prompt — do not pass a custom rubric there (--uncommitted is mutually exclusive with [PROMPT] and will error).

For plan | spec | last-response, write this rubric to $(mktemp -t codex-rubric).txt:

You are an adversarial reviewer giving a second opinion. Be terse. Do not restate what is correct.

Check, in order:
1. Correctness — logic errors, off-by-one, wrong APIs, broken invariants.
2. Missing edge cases — nulls, empty inputs, concurrent writes, partial failures, auth gaps.
3. Simpler alternatives — is there a shorter, more conventional, or better-supported approach?
4. Risk — blast radius, reversibility, data loss, security implications.

Output format: 4 sections with those exact headings. Skip a section if you have nothing material. No preamble, no summary, no praise.

4. Invoke Codex

Use a single Bash call with 600000ms timeout. Capture stdout and exit code. Do not pass -c model=... — rely on the user's ~/.codex/config.toml defaults.

  • diff:

``bash codex review --uncommitted ``

  • plan | spec | last-response:

``bash { printf '=== CONTENT TO REVIEW ===\n'; cat "$TARGET_FILE"; printf '\n\n=== REVIEW INSTRUCTIONS ===\n'; cat "$RUBRIC_FILE"; } \ | codex exec --sandbox read-only --skip-git-repo-check - ``

Pass all content via stdin. Never put file contents on argv.

5. Emit review

On exit code 0:

### Codex Review

On non-zero exit or timeout:

### Codex Review (FAILED)

Codex exited with status . Stderr tail:

Stop after emitting failure. Do not substitute your own review.

6. Ask before reconciling

After a successful review, end your turn with one question to the user:

> Want me to reconcile — decide which points to adopt, reject, or defer?

Only if the user says yes, produce a ### Reconciliation section with three bullet lists: Adopt, Reject (each with a one-line reason), Defer (each with a one-line reason to revisit later). Do not rubber-stamp Codex; reject points that are wrong or off-scope.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.