igorganapolsky/second-pass
plugins/claude-codex-bridge/skills/second-pass/SKILL.md
Hand the current task or repo state to Codex for an independent second pass from inside Claude Code. Use when the user explicitly wants another agent to take a shot after Claude's first pass.
$ install --global
skillsauthnpx skillsauth add igorganapolsky/rlhf-feedback-loop second-passInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 20, 2026, 10:05 AM11.1s1 file scanned
SKILL.md
- name:
- second-pass
- description:
- Hand the current task or repo state to Codex for an independent second pass from inside Claude Code. Use when the user explicitly wants another agent to take a shot after Claude's first pass.
Second Pass
Use this skill only when the user explicitly asks for a Codex handoff or second pass.
Build a concise task prompt from the user request and current repo context, then run:
node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.js" second-pass --prompt "<task prompt>"
Good task prompts are concrete:
- what changed
- what still looks risky
- what Codex should do next
- whether the user wants edits, a plan, or just a review
After the bridge returns:
- summarize what Codex recommended or changed
- mention the saved artifact path if the user wants the raw result
- keep Claude's own judgment separate from Codex's output
Related Skills
igorganapolsky/ThumbGate Brand Voice
testing
VerifiedTrustedCommunity
Make any ThumbGate-facing copy (landing pages, README, Reddit/LinkedIn/Bluesky posts, comparison pages, docs, outreach drafts) sound like ThumbGate — direct, technical, honest, anti-hype. Use BEFORE writing or editing any customer-facing or marketing text for ThumbGate.
21SKILL.mdUpdated Jun 5, 2026
igorganapolsky/thumbgate
tools
Community
ThumbGate provides pre-action gates for AI coding agents. It captures thumbs-up/down feedback on agent actions, auto-promotes repeated failures into prevention rules, and blocks known-bad tool calls via PreToolUse hooks. Trigger when the user wants to add safety guardrails to an AI agent workflow, capture structured feedback on agent output, generate prevention rules from failure patterns, gate high-risk actions before execution, or export DPO training pairs from production feedback. Works with any MCP-compatible agent including Cursor, Codex, Gemini CLI, Amp, and OpenCode.
21SKILL.mdUpdated Apr 5, 2026
igorganapolsky/skills/verify-pricing-surfaces
testing
VerifiedTrustedCommunity
# Skill: Verify Pricing Surfaces Repeatable skill for verifying all revenue-generating pages are live, have analytics, and have working Stripe links. Covers both ThumbGate and ApplyOps. ## When to use - Session startup (quick health check) - After any deploy to ThumbGate or ApplyOps - CEO asks "why aren't we making money?" or "is everything working?" - Before any pricing/checkout changes ## Steps ### 1. ThumbGate pricing surfaces ```bash # Homepage — all 3 analytics curl -sL https://thumbg
20SKILL.mdUpdated May 27, 2026
igorganapolsky/skills/pull-funnel-data
development
VerifiedTrustedCommunity
# Skill: Pull Funnel Data Repeatable skill for pulling checkout funnel analytics data from all sources into a readable local report. ## When to use - CEO asks "why aren't we making money?" or "what does the funnel look like?" - Before any pricing/checkout changes - Weekly revenue check-in ## Steps ### 1. Run the live Plausible poller ```bash cd /Users/igorganapolsky/workspace/git/igor/ThumbGate/repo npm run social:poll:plausible ``` This pulls live Plausible visitors, source attribution,
20SKILL.mdUpdated May 27, 2026