codex — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited codex (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Delegate coding execution to Codex CLI. CodeX turns clear plans into working code.
codex CLI directly.--file "src/app/[locale]/page.tsx"). Unquoted [...] triggers zsh glob expansion.--file to point CodeX to key files — it reads them directly. Duplicating file contents in the prompt wastes tokens and adds no value.The script path is:
~/.claude/skills/codex/scripts/ask_codex.shMinimal invocation:
~/.claude/skills/codex/scripts/ask_codex.sh "Your request in natural language"With file context:
~/.claude/skills/codex/scripts/ask_codex.sh "Refactor these components to use the new API" \
--file src/components/UserList.tsx \
--file src/components/UserDetail.tsxMulti-turn conversation (continue a previous session):
~/.claude/skills/codex/scripts/ask_codex.sh "Also add retry logic with exponential backoff" \
--session <session_id from previous run>The script prints on success:
session_id=<thread_id>
output_path=<path to markdown file>Read the file at output_path to get CodeX's response. Save session_id if you plan follow-up calls.
Call CodeX when at least one of these is true:
--read-only.--file (2-6 high-signal entry points; CodeX has full workspace access and will discover related files on its own).For multi-step projects, use --session <id> to continue with full conversation history. For independent parallel tasks, use the Task tool with run_in_background: true.
--workspace <path> — Target workspace directory (defaults to current directory).--file <path> — Point CodeX to key entry-point files (repeatable, workspace-relative or absolute). Don't duplicate their contents in the prompt.--session <id> — Resume a previous session for multi-turn conversation.--model <name> — Override model (default: uses Codex config).--reasoning <level> — Reasoning effort: low, medium, high (default: medium). Use high for code review, debugging, complex refactoring, or root cause analysis.--sandbox <mode> — Override sandbox policy (default: workspace-write via full-auto).--read-only — Read-only mode for pure discussion/analysis, no file changes.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.