richfrem/codex-cli-agent
plugins/cli-agents/skills/codex-cli-agent/SKILL.md
Codex CLI sub-agent for dispatching tasks to OpenAI-compatible models via the `codex` binary. Use for code-focused tasks routed to GPT-5 Codex or any OpenAI-compatible endpoint. Part of the run_agent.py multi-LLM task router — cli=codex target.
$ install --global
skillsauthnpx skillsauth add richfrem/agent-plugins-skills codex-cli-agentInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 16, 2026, 5:33 AM51.2s7 files scanned
SKILL.md
- name:
- codex-cli-agent
- plugin:
- cli-agents
- description:
- >
- allowed-tools:
- Bash, Read, Write
Identity: The Codex Sub-Agent Dispatcher (Standard: gpt-5-codex)
Dispatches bounded tasks to the Codex CLI (codex binary). Uses the run_agent.py task router with cli=codex.
[!IMPORTANT] Default model:
gpt-5-codex. RequiresOPENAI_API_KEYin environment. Thecodexbinary must be on PATH.
Orchestration Pattern: run_agent.py
python ./scripts/run_agent.py \
<PERSONA_FILE> <INPUT_FILE> <OUTPUT_FILE> "<INSTRUCTION>" \
--cli codex --model gpt-5-codex
The prompt is piped to codex exec via stdin — not passed as a positional arg — to avoid OS ARG_MAX limits and process listing exposure.
Example
python ./scripts/run_agent.py \
agents/refactor-expert.md \
target.py \
refactor.md \
"Refactor this function and explain the top 3 changes." \
--cli codex
With a different model
python ./scripts/run_agent.py \
agents/security-auditor.md \
target.py \
security.md \
"Find vulnerabilities. Rate severity: CRITICAL / MODERATE / MINOR." \
--cli codex --model gpt-4o
When to Use codex-cli-agent
| Use Case | Why codex |
|----------|-----------|
| Code review / refactor | GPT-5 Codex is code-optimized |
| OpenAI endpoint routing | Use any OPENAI_BASE_URL-compatible target |
| Isolated sub-task to GPT-5 | No main agent context bleed |
Persona Registry (agents/)
| Persona | Use For |
|---------|---------|
| security-auditor.md | Red team, vulnerability scanning |
| refactor-expert.md | Code optimization, DRY, readability |
| architect-review.md | System design, modularity |
Smoke Test
echo "Say hello in one sentence." | codex exec --model gpt-5-codex -
python ./scripts/run_agent.py agents/refactor-expert.md target.py output.md "Summarize this file." --cli codex
Health Check
echo $OPENAI_API_KEY # must be set
which codex # must be on PATH
codex --version
codex exec --help # verify exec subcommand and available flags
Related Skills
richfrem/issue-worktree-agent
testing
VerifiedTrustedCommunity
Skill for creating and managing isolated git worktrees (`.worktrees/issue-NNN`) for issue execution branches. USE ONLY when setting up or cleaning up isolated git worktrees for specific issue execution. DO NOT USE for managing local task files (use `task-agent`) or escalating tasks to issues (use `github-issue-backlog-agent`).
4SKILL.mdUpdated Jul 29, 2026
richfrem/issue-pr-lifecycle-agent
data-ai
VerifiedTrustedCommunity
Skill for orchestrating the end-to-end GitHub issue lifecycle flow: Issue -> Worktree -> Implementation -> PR Creation -> Resolution Closure. USE ONLY when running or dry-running full lifecycle orchestration for resolving an issue with a PR. DO NOT USE for isolated worktree management only (use `issue-worktree-agent`) or logging issues (use `github-issue-agent`).
4SKILL.mdUpdated Jul 29, 2026
richfrem/github-issue-prioritizer
tools
VerifiedTrustedCommunity
Automatically ranks GitHub issues (P0-P3) based on friction tier, frequency, and blockages, synchronizing priority labels and GitHub Projects v2 custom fields.
4SKILL.mdUpdated Jul 29, 2026
richfrem/github-issue-backlog-agent
testing
VerifiedTrustedCommunity
Bridge skill for escalating ephemeral local task scratchpad items (`tasks/*.md`) into durable, taxonomy-validated, evidence-rich GitHub Issues. USE ONLY when promoting a single-session local task into durable repository backlog. DO NOT USE for managing local kanban boards (use `task-agent` instead) or directly querying/commenting on issues (use `github-issue-agent` instead).
4SKILL.mdUpdated Jul 29, 2026