Codex Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Codex Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server for local repository indexing and code understanding.
┌─── MCP Server ───────────────────────────────────────┐
│ ├── Tools (search_code, find_symbol, etc.) │
│ ├── Database Layer (SQLite + Vector Storage) │
│ ├── Indexing Engine (AST + Embeddings) │
│ ├── File System Monitor (Real-time updates) │
│ └── Language Parsers (TypeScript, Python, etc.) │
└─────────────────────────────────────────────────────┘📋 Design Documents: Before making architectural changes, please review the design documentation in the design/ folder:
npm install
npm run buildnpm run devConfigure in your MCP client (e.g., VS Code):
{
"mcpServers": {
"codex": {
"command": "node",
"args": ["path/to/codex-mcp-server/dist/index.js"],
"env": {
"REPO_PATH": "/path/to/your/repository"
}
}
}
}search_code - Semantic search across the codebasefind_symbol - Find function/class definitionsget_references - Find all symbol usagesanalyze_dependencies - Show import/dependency graphsget_context - Get relevant context for code understandingindex_repository - Manually trigger repository indexingSet environment variables:
REPO_PATH - Path to the repository to indexOPENAI_API_KEY - For embedding generation (optional, can use local embeddings)DB_PATH - Database storage path (default: ./data)This project is designed to work seamlessly with GitHub Copilot coding agents. For detailed implementation instructions using GitHub Copilot, see GITHUB_COPILOT_GUIDE.md.
#github-pull-request_copilot-coding-agent to your requestsImplement the LanguageParser class that can parse JavaScript and TypeScript files
to extract function definitions, class declarations, and import statements.
#github-pull-request_copilot-coding-agentCreate comprehensive unit tests for the SearchEngine class, focusing on semantic
search functionality and vector similarity calculations.
#github-pull-request_copilot-coding-agentFor complete implementation guidance, phase-by-phase instructions, and best practices for using GitHub Copilot with this codebase, see the GitHub Copilot Guide.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.