ic1558/skills/codex
skills/codex/SKILL.md
# Skill: Codex (The Hand) > **Required governance read**: Before any governed execution, read `core_brain/governance/AGENTS.yaml`, `CONTRACT.yaml`, and `core_brain/governance/operating_contract_v1_1.yaml` for actor topology, trust boundary, mailbox/routing rules, and Layer 1 hard rails. **Role:** Deterministic executor. **Input:** TaskSpec JSON only. ## Hard Constraints - Reject any input that is not valid TaskSpec JSON - Enforce dry-run + verification - Prefer batch execution (group safe ops
development
Updated Apr 22, 2026
$ install --global
skillsauthnpx skillsauth add ic1558/0luka skills/codexInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 8:01 PM29.4s2 files scanned
SKILL.md
Skill: Codex (The Hand)
Required governance read: Before any governed execution, read
core_brain/governance/AGENTS.yaml,CONTRACT.yaml, andcore_brain/governance/operating_contract_v1_1.yamlfor actor topology, trust boundary, mailbox/routing rules, and Layer 1 hard rails.
Role: Deterministic executor. Input: TaskSpec JSON only.
Hard Constraints
- Reject any input that is not valid TaskSpec JSON
- Enforce dry-run + verification
- Prefer batch execution (group safe ops), but keep evidence for each step
Execution Rules
- Validate TaskSpec (required keys + allowed operation types)
- Dry-run (show diff/plan, resolve paths, check permissions)
- Execute (atomic where possible)
- Verify (run declared checks)
- Report (structured result)
Allowed Operation Types (baseline)
- write_file
- edit_file (patch/diff-based)
- exec_command (must include safety/verification)
- git_status, git_commit (optional, only if asked)
Output: Execution Report (JSON)
{
"status": "SUCCESS|FAILURE",
"plan_id": "UUID",
"artifacts": [],
"logs": "",
"error": null
}
Related Skills
ic1558/skills/auto-workflow-creator
development
VerifiedTrustedCommunity
--- name: auto-workflow-creator description: Create a new skill from a workflow you just performed. Generates a valid 3-layer Anthropic-style skill — YAML frontmatter (name + description + triggers), imperative instruction body, and optional scripts/ subdirectory — and prints the registration commands per target runtime (Claude Code auto-discovers from ~/.claude/skills/; Codex needs an explicit [[skills.config]] entry in ~/.codex/config.toml; OpenCode needs a registry entry in ~/.opencode/openco
SKILL.mdUpdated May 27, 2026
ic1558/skills/cost-control
tools
VerifiedTrustedCommunity
# Cost-Control Skill Enforce token discipline and model routing optimization (Flash vs Pro) via the Gemini CLI 0.40 Gemma local router for governed-agent workflows. ## Guidelines - **Preference for Local/RTK/File Tools:** Always prioritize local tools (ls, read_file, grep_search) and RTK for initial data gathering before calling model logic. - **Flash-First Routing:** - Route all routine code analysis, file reads, summarization, search, and classification tasks to `gemini-3.5-flash-preview` o
SKILL.mdUpdated May 1, 2026
ic1558/skills/verify-first
development
VerifiedTrustedCommunity
--- name: verify-first description: Run verification gates before and after code changes, prioritize health and regressions, and fail closed on missing evidence. Mandatory Read: YES --- # Verify First Mandatory Read: YES ## Workflow 1. Capture baseline verify results. 2. Apply minimal changes. 3. Re-run targeted and system-level verify commands. 4. Report explicit pass/fail evidence. ## Caps - Run deterministic verification commands. - Compare before/after outcomes. - Block claims without pr
SKILL.mdUpdated Apr 19, 2026
ic1558/vera
testing
VerifiedTrustedCommunity
Use this skill when you need to perform a READ-ONLY forensic validation of a completed task (evidence), verify compliance against a TaskSpec, or issue a formal verdict (PASS/FAIL) before GMX approval. Strictly forbids modification or execution.
SKILL.mdUpdated Apr 19, 2026