think — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited think (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Brainstorm normally, but every clarifying question is routed through Codex for a second opinion before the user sees it. Enforcement is automatic — you never call Codex yourself, and you do NOT need to run any shell command to turn it on.
When the user runs /claudex:think, a UserPromptExpansion hook arms the gate for this session automatically (it runs in hook context, so it isn't subject to the permission classifier). You don't touch it.
Skill(superpowers:brainstorming) and follow it normally. Ask clarifying questions via AskUserQuestion as usual — the hook intercepts each one.~/.claude/claudex/state/<session>-critique.md) holding your drafted question + Codex's critique, so the critique isn't shown red and then repeated. Read that file, then in ONE message:**Original question:** heading (keep your recommended option), so the user can see your framing before Codex weighed in.**Codex says:** heading.**My take:** — 1-3 sentences: do you agree? Fold any fixes you accept into the question.AskUserQuestion (revised if you agreed) — the revised question is the one the user actually answers. It passes through this time (one re-issue is allowed within ~2 minutes of the block).So each round the user sees, in order: Original question (with your recommendation) → Codex says → My take → the answer window — with no red duplicate of the critique. (If the file can't be written, the hook falls back to putting the critique inline in the denial reason.)
writing-plans, the gate auto-disarms (a PreToolUse Skill hook handles it); it also auto-expires after the TTL.While the gate is armed you are in design mode. PreToolUse hooks block — not just discourage — these until the design is approved:
Edit/Write/MultiEdit/NotebookEdit to any non-markdown file is denied (.mdx counts as code). Don't fight it: it means you skipped to implementation. Go back and brainstorm.CLAUDE.md, SKILL.md, AGENTS.md, GEMINI.md are denied even though they're markdown — changing them mid-session could weaken the gate itself.test-driven-development, executing-plans, subagent-driven-development, frontend-design, mcp-builder are denied.Bash commands that write code (echo >, sed -i, tee, node -e, git apply/checkout, cp/mv, …) or that touch the gate marker are denied. Read-only exploration passes. Don't try to route around the edit gate through the shell.What you can do while armed: write the design/spec/plan markdown doc, ask AskUserQuestion, and (after you've brainstormed and the user approves) invoke writing-plans — which disarms the gate and reopens everything for implementation. So the only sanctioned path out of design mode is: brainstorm → approved design → writing-plans. If the user explicitly tells you to skip the design process, that's their call — point them to the kill switch below; don't disarm the gate yourself (the kill switch is for the user to type with a leading !).
If you never see aCodex says:block on your questions, the gate didn't arm (e.g. the plugin wasn't reloaded after install). Tell the user to run/reload-pluginsand re-run/claudex:think, rather than trying to write the marker yourself (a model Bash write to~/.claudeis blocked in auto mode).
! rm -f ~/.claude/claudex/armed{"enabled": false} in ~/.claude/claudex/config.json.ttlHours (default 6).{"enforceImplementationGate": false} in ~/.claude/claudex/config.json to turn off the code/skill blocking described above (the Codex question gate is unaffected). It is fail-open — a hook error never blocks an edit.{"failClosed": true} in ~/.claude/claudex/config.json to block instead.node. Errors like "Bun not found" come from a different plugin, not claudex.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.