MichaelVessia/codex-review
modules/programs/agents/shared/_archive/codex-review/SKILL.md
Send staged changes to Codex for independent peer review, then evaluate and implement warranted feedback
$ install --global
skillsauthnpx skillsauth add MichaelVessia/nixos-config codex-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 15, 2026, 6:20 AM110.9s1 file scanned
SKILL.md
- name:
- codex-review
- description:
- Send staged changes to Codex for independent peer review, then evaluate and implement warranted feedback
- allowed-tools:
- Bash(git diff:*), Bash(git status:*), Bash(git log:*), Task(codex)
Workflow
Step 1: Send to Codex for review
Use the codex subagent to review staged changes. Pass it the following prompt:
Review the staged git diff as a senior engineer. Provide:
- Critical Issues - bugs, security vulnerabilities, or breaking changes that MUST be fixed.
- Improvements - concrete suggestions for better code quality, performance, or maintainability.
- Nitpicks - minor style or preference items (low priority).
Be specific. Reference exact file paths and lines from the diff. Provide code examples for suggested fixes. Do NOT comment on formatting or whitespace. Do NOT suggest adding comments or docblocks unless something is genuinely confusing. Keep your review concise and actionable.
Step 2: Present the feedback
Display Codex's full review to the user in a clear, formatted way.
Step 3: Evaluate and implement
Read the staged diff yourself (git diff --cached) so you have full context,
then evaluate each piece of Codex's feedback:
- Implement suggestions that are clearly correct improvements (bugs, security issues, genuine code quality wins).
- Ignore anything that is purely stylistic preference, overly cautious, or conflicts with the project's established patterns, conventions, or CLAUDE.md rules.
- Explain briefly which suggestions you're implementing and which you're skipping (and why). You have greater context about this codebase than Codex does.
After making changes, re-stage the modified files.
Related Skills
MichaelVessia/stack
tools
VerifiedTrustedCommunity
User guide for the local squash-safe `stack` CLI for stacked PR/MR repair on GitHub and GitLab. Use when someone asks how to inspect, track, sync, merge, document, or undo stacked pull requests / merge requests in squash-merge repositories. Prefer this tool over GitHub's `gh stack` command for this workflow.
2SKILL.mdUpdated Jun 5, 2026
MichaelVessia/herdr
tools
VerifiedTrustedCommunity
Control herdr from inside it. Manage workspaces and tabs, split panes, spawn agents, read output, and wait for state changes — all via CLI commands that talk to the running herdr instance over a local unix socket. Use when running inside herdr (HERDR_ENV=1).
2SKILL.mdUpdated Jun 4, 2026
MichaelVessia/autocaliweb
development
VerifiedTrustedCommunity
Inspect my self-hosted AutoCaliWeb library. Use when the user asks about AutoCaliWeb, books in Calibre, OPDS status, recent imports, shelves, catalog stats, or wants to search the ebook library.
2SKILL.mdUpdated May 25, 2026
MichaelVessia/add-youtube-channel
data-ai
VerifiedTrustedCommunity
Subscribe a YouTube channel in TubeArchivist, queue its top videos by views from recent uploads, wait for the first file, scan Jellyfin, and rename + lock the channel folder to a friendly display name. Use when the user says "add a youtube channel", "subscribe to <channel>", or wants a curated TubeArchivist + Jellyfin import for a creator.
2SKILL.mdUpdated May 24, 2026