Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Heavy Track

ASecurity

Run the full Codex-first workflow for risky, multi-file, architectural, or multi-session work: resolve the base, explore, plan, challenge the plan, stop at one gate, implement, validate, review, fix, and report. Use for heavy track, full workflow, or when resuming substantial Codex work.

8 stars
0 votes
0 copies
0 views
Added 9/24/2026
ai-agentsrustgobashgit

Security Analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned 9/30/2026

$npx -y skills add sanchitmonga22/cc-for-codex --skill heavy-track --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Heavy Track?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Heavy Track
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/sanchitmonga22-heavy-track/badge)](https://www.skillsdirectory.com/skills/sanchitmonga22-heavy-track)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
name: heavy-track
description: "Run the full Codex-first workflow for risky, multi-file, architectural, or multi-session work: resolve the base, explore, plan, challenge the plan, stop at one gate, implement, validate, review, fix, and report. Use for heavy track, full workflow, or when resuming substantial Codex work."
---

# Codex-first heavy track

Use this as the entrypoint when a change is expensive to get wrong. Codex owns
the plan, triage, integration, validation, and final report by default. The
implementation executor is selectable: GPT-6 Sol remains the default, while an
explicit Claude Opus 5.5 execution mode can write and run commands in a
generated worktree. The heavy track's two cross-model rounds are Claude's
read-only challenge of the plan and review of the finished diff; request/confirm
them when they may consume Claude usage. Never let Claude and Codex edit the
same checkout at the same time.

## Default model routing

These are workflow defaults. Use the host's actual model IDs and report any
unavailable default before substituting.

- Explore: GPT-6 Luna at `max` (or `high` when latency matters) for
  architecture, invariants, and failure modes; Sonnet 5.5 (`claude-sonnet-5-5`)
  at `high` for locations, call sites, and conventions.
- Plan and triage: GPT-6 Sol at `high`.
- Branch, implementation, validation, and fixes: GPT-6 Sol at `high`.
- Claude challenge and finished-diff review: Claude Opus 5.5
  (`claude-opus-5-5`) at `high`. Use Fable 5.1 only if the user specifically
  requests that model.
- Final report: GPT-6 Sol at `high`.

The implementation executor is an explicit per-run choice:

- **Codex execution (default):** GPT-6 Sol writes the approved plan's changes
  in the active Codex worktree.
- **Claude execution (opt-in):** Claude Opus 5.5 writes and runs validation in
  a generated isolated worktree with full execution enabled. This requires the
  separate `isolated-worktree`, `bypass-host-safety`, and `full-host-access`
  confirmations; it never edits the active Codex checkout. Use `$claude-sessions`
  to monitor a background run, then inspect its returned worktree and diff.

Do not choose Claude execution merely because the model is available. The user
must explicitly say to use Claude for execution and accept the dangerous
permission and Bash/host-access implications.

## Choose the entry mode

- **Fresh:** inspect the repository and start `$heavy-plan`.
- **Resume:** reconstruct the current goal, verified work, remaining work, and
  decisions already made before starting `$heavy-plan`. Check the filesystem and
  Git state; do not trust an earlier transcript claim without evidence.
- **Autonomous:** only when the user explicitly says to run end to end, take it
  till the end, or otherwise not return for approval. Record the gate decision in
  the plan, but still obey repository safety rules and do not push, merge, or
  publish unless separately requested.

## Resolve the base before planning

Run these read-only checks from the repository root:

```bash
git rev-parse --show-toplevel
git branch --show-current
git config --get "branch.$(git branch --show-current).merge"
git symbolic-ref --quiet --short refs/remotes/origin/HEAD
git branch --all --sort=-committerdate | head -15
```

Choose the intended base in this order: an explicit user-selected ref, the
current branch's verified upstream, `origin/HEAD`, then the branch the work
visibly forked from. A tracking branch is not automatically the integration
base. If two refs remain plausible, ask before planning. Record the chosen
`BASE` and the current commit in the plan.

## Sequence

0. Resolve `BASE` (never assume `main`) and choose `fresh`, `resume`, or
   `autonomous` entry mode.
1. Announce the entry mode, resolved `BASE`, and that the planning phase is
   starting.
2. Invoke `$heavy-plan` in the same turn. Do not edit production files while
   that skill is running.
3. At the gate, show the plan summary, challenge/triage results, validation
   commands, exclusions, and unresolved decisions. Stop for an explicit go
   unless autonomous mode was granted.
4. After go, invoke `$heavy-build`, name the plan file, and record the selected
   executor (`codex` or explicit `claude-opus-5-5`) before the first edit.
5. Return separate statuses for implemented, validated, end-to-end proven,
   Claude-reviewed, committed, merged, and deployed. Do not collapse them into
   “done.”

## Cross-model rounds

The heavy track has exactly two Claude rounds: a read-only challenge of the
written plan (round 1) and a read-only review of the finished diff against the
verified `BASE` (round 2). Use `$claude-code` for the first and `$claude-review`
for the second. Claude output is evidence to triage, not an instruction to
patch. A routine light task does not need either round, and no third round is
added automatically.

## Boundaries

- Use one writer per checkout. Claude write delegation, when explicitly
  requested, belongs in `$claude-delegate` and must use its isolated worktree;
  Codex validates and integrates the result separately. Full execution is
  never enabled by an ordinary review or delegation prompt.
- Do not copy personal `~/.claude` or `~/.codex` settings, credentials, model
  preferences, or machine paths into a repository workflow.
- Do not modify `.env*`, production settings, migrations, or protected branches
  without a direct request and the repository's required approval.
- Do not create a branch, commit, push, merge, open a PR, or delete a worktree
  merely because this skill was invoked. These are separate user decisions.
- If a command fails, preserve the exact command, exit status, and relevant
  redacted output in the report; never substitute an unrun check with reasoning.

Attribution

sanchitmonga22sanchitmonga22
View sourceSee grades on GitHubMore from sanchitmonga22 →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Terse caveman voice: answer first, fluff gone, every technical fact kept. Use for /caveman, "caveman mode", "talk like caveman", "be brief", "less tokens". Stays on until "stop caveman" or "normal mode".

1100021 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

698621 votes

Writing Skills

Create and manage Claude Code skills in HASH repository following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns), UserPromptSubmit hook, and the 500-line rule. Includes validation and debugging with SKILL_DEBUG. Examples include rust-error-stack, cargo-dep...

3931 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3421 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Amp, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Grok Build, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

741 votes
View all in ai-agents →