sd0xdev/codex-review
skills/codex-review/SKILL.md
Full second-opinion using Codex MCP (with lint:fix + build). Supports review loop with context preservation.
$ install --global
skillsauthnpx skillsauth add sd0xdev/sd0x-dev-flow codex-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 18, 2026, 4:04 AM26.5s1 file scanned
SKILL.md
- name:
- codex-review
- description:
- Full second-opinion using Codex MCP (with lint:fix + build). Supports review loop with context preservation.
- allowed-tools:
- mcp__codex__codex, mcp__codex__codex-reply, Bash(git:*), Bash(yarn:*), Bash(npm:*), Bash(bash:*), Read, Grep, Glob, Task
Codex Review
Thin entry-point skill — routes to the parent skill for full workflow.
Parent Skill
This is the Full variant of codex-code-review. Full workflow, prompt templates, and review logic are defined in the parent skill.
See @skills/codex-code-review/SKILL.md
Variant
| Property | Value |
|----------|-------|
| Scope | Diff + local checks |
| Pre-checks | lint:fix + build |
| Prompt template | @skills/codex-code-review/references/codex-prompt-full.md |
Trigger
- Keywords: full review, codex review, second opinion, codex-review
When NOT to Use
- Quick diff-only review (use
/codex-review-fast) - Branch-level review (use
/codex-review-branch) - Document review (use
/codex-review-doc)
Related Skills
sd0xdev/zh-tw
documentation
VerifiedTrustedCommunity
Rewrite the previous reply in Traditional Chinese
147SKILL.mdUpdated Apr 28, 2026
sd0xdev/watch-ci
development
VerifiedTrustedCommunity
Monitor GitHub Actions CI runs until completion. Use when: watching CI after push, checking build status, monitoring PR checks, waiting for CI completion, user says 'watch CI', 'check CI', 'CI status', 'monitor build', or /watch-ci. Not for: pushing code (use push-ci), creating PRs (use create-pr). Output: per-run verdict (pass/fail/timeout).
147SKILL.mdUpdated Apr 28, 2026
sd0xdev/verify
development
VerifiedTrustedCommunity
Verification loop — lint -> typecheck -> unit -> integration -> e2e
147SKILL.mdUpdated Apr 28, 2026
sd0xdev/update-docs
development
VerifiedTrustedCommunity
Research current code state then update corresponding docs, ensuring docs stay in sync with code.
147SKILL.mdUpdated Apr 28, 2026