shousper/consult-codex
skills/consult-codex/SKILL.md
Consults OpenAI Codex CLI for an independent perspective on any question. Shells out to the codex CLI in read-only sandbox mode and relays the response. Use when you want a second opinion from Codex, or when asked to "consult codex", "ask codex", or "codex oracle".
$ install --global
skillsauthnpx skillsauth add shousper/claude-kit consult-codexInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 4:22 PM55.3s2 files scanned
SKILL.md
- name:
- consult-codex
- description:
- Consults OpenAI Codex CLI for an independent perspective on any question. Shells out to the codex CLI in read-only sandbox mode and relays the response. Use when you want a second opinion from Codex, or when asked to "consult codex", "ask codex", or "codex oracle".
- allowed-tools:
- Bash
Consult Codex
You are a proxy. Your ONLY job is to shell out to the Codex CLI and relay its response.
Rules
- DO NOT read files, explore the codebase, or answer the question yourself
- DO NOT use Read, Grep, Glob, ctx_execute, ctx_batch_execute, or any other tool
- Your ONLY tool is Bash. Use it ONLY to invoke the codex CLI
- If you catch yourself doing anything other than constructing a prompt and running
codex exec: STOP
Steps
- Read the user's question and any context provided
- Check dependency:
bash skills/consult-codex/deps.sh - Construct a prompt string that includes:
- The question or topic
- Relevant context from the conversation
- Instruction: "Validate all claims and cite verifiable sources (official docs, specs, RFCs, papers). Prefer primary sources."
- Run via Bash (set
timeout: 600000):
OUTFILE=$(mktemp /tmp/codex-oracle-XXXXXX.txt) && codex exec -s read-only -o "$OUTFILE" -- "<prompt>" > /dev/null 2>&1; cat "$OUTFILE"; rm -f "$OUTFILE"
The -o flag writes ONLY the final agent message to a file. Redirecting stdout/stderr to /dev/null suppresses trace output. Then cat reads the clean result.
- Relay the response faithfully. Add a brief synthesis of key insights at the end.
Model & Effort Preferences
If the user specifies a model or effort level ("most powerful", "cheap", "high effort"):
- Run
codex --helpto discover current flags - Add appropriate flags to the command
- If no preference: omit, use local defaults
If CLI Is Missing
Report: "codex CLI not found. Install: npm install -g @openai/codex — https://github.com/openai/codex"
Do NOT answer the question yourself as a fallback.
Related Skills
shousper/writing-skills
development
VerifiedTrustedCommunity
Creates, edits, and tests Claude skill files (SKILL.md) using TDD methodology with baseline pressure testing and rationalization defense. Use when writing a new skill, modifying an existing skill, optimizing a skill description for discovery (CSO), testing whether a skill triggers correctly, or structuring skill documentation. Enforces RED-GREEN-REFACTOR for process documentation.
2SKILL.mdUpdated Apr 25, 2026
shousper/writing-plans
development
VerifiedTrustedCommunity
Creates detailed, bite-sized implementation plans with TDD structure, exact file paths, complete code, and test commands. Use when you have a spec, requirements, design doc, or feature request and need to plan before coding — especially for multi-step tasks, large features, or when handing off to another session. DO NOT TRIGGER when asked to write code directly or fix a simple bug.
2SKILL.mdUpdated Apr 25, 2026
shousper/worktree-cleanup
testing
VerifiedTrustedCommunity
Removes git worktrees safely, cleans up associated branches, and pulls latest mainline after removal. Use when finished with a worktree, done with a branch, cleaning up after a merge or PR, abandoning work in a worktree, or when "git worktree list" shows stale entries. Checks for uncommitted changes, verifies no open PRs before branch deletion, and handles force-removal of locked worktrees.
2SKILL.mdUpdated Apr 25, 2026
shousper/verify
development
VerifiedTrustedCommunity
Enforces fresh verification evidence before any completion or success claims. Use when about to say "done", "fixed", "tests pass", "build succeeds", or any synonym; before committing, creating PRs, or moving to the next task; before expressing satisfaction or positive statements about work state; and after agent delegation to independently verify results. Prevents unverified claims by requiring command execution, output inspection, and exit code confirmation.
2SKILL.mdUpdated Apr 25, 2026