Mcp Codexreview — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Codexreview (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server that runs OpenAI Codex CLI (codex exec) to review git changes. Any MCP client (Claude Code, etc.) can request a Codex-powered code review of unstaged, staged, or last-commit changes.
@openai/codex CLI installed and available on $PATH~/.codex/config.toml or environment)claude mcp add codexreview -- npx -y mcp-codexreviewAdd to your Claude Desktop configuration (claude_desktop_config.json):
{
"mcpServers": {
"codexreview": {
"command": "npx",
"args": ["-y", "mcp-codexreview"]
}
}
}git clone https://github.com/signal-slot/mcp-codexreview.git
cd mcp-codexreview
npm install
npm run build
claude mcp add codexreview -- node /path/to/mcp-codexreview/build/index.jsreview_changesRun Codex to review git changes. Codex reads the diff and provides a thorough code review.
| Parameter | Type | Required | Description | ||
|---|---|---|---|---|---|
type | `"unstaged" \ | "staged" \ | "last_commit"` | yes | Which changes to review |
cwd | string | no | Git repo path (default: server working directory) | ||
model | string | no | Override Codex model (e.g. "o3", "gpt-4.1") | ||
instructions | string | no | Additional review focus or instructions |
get_diffGet raw git diff output without invoking Codex.
| Parameter | Type | Required | Description | ||
|---|---|---|---|---|---|
type | `"unstaged" \ | "staged" \ | "last_commit"` | yes | Which changes to diff |
path | string | no | Filter to specific file or directory | ||
cwd | string | no | Git repo path |
get_changed_filesList changed files with their status (M/A/D/R).
| Parameter | Type | Required | Description | ||
|---|---|---|---|---|---|
type | `"unstaged" \ | "staged" \ | "last_commit"` | yes | Which changes to list |
cwd | string | no | Git repo path |
The review_changes tool spawns codex exec with:
-C <cwd> to target the git repo-s read-only sandbox (Codex can read files and run git, but cannot modify)-a on-failure for non-interactive execution--output-last-message <tmpfile> to capture the review text--color never for clean outputThe review prompt instructs Codex to run the appropriate git diff command and provide a code review covering correctness, style, performance, security, and improvement suggestions.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.