Skip to content
Back to skills

Codex Review

ASecurity

Set up Codex plugin for cross-model code review and task delegation inside Claude Code

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 16, 2026
ai-agentsbashnodegitapi

Works with

  • claude code
  • cli
  • api

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned October 16, 2026

npx -y skills add tommylower/cortex --skill codex-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Codex Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Codex Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tommylower-codex-review/badge)](https://www.skillsdirectory.com/skills/tommylower-codex-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: codex-review
description: Set up Codex plugin for cross-model code review and task delegation inside Claude Code
author: OpenAI (https://github.com/openai/codex-plugin-cc)
---

# Codex Review Plugin

Set up the Codex plugin for Claude Code — cross-model code review and task delegation without leaving your session.

## Install

1. **Add the marketplace and install the plugin:**
   ```bash
   /plugin marketplace add openai/codex-plugin-cc
   /plugin install codex@openai-codex
   /reload-plugins
   ```

2. **Run setup to verify Codex is ready:**
   ```bash
   /codex:setup
   ```
   If Codex isn't installed, it can install it for you. If not logged in:
   ```bash
   !codex login
   ```

3. **Verify with a quick test:**
   ```bash
   /codex:review --background
   /codex:status
   /codex:result
   ```

## Commands

### `/codex:review`

Standard code review on uncommitted changes or a branch diff. Read-only.

```bash
/codex:review                    # review uncommitted changes
/codex:review --base main        # review branch vs main
/codex:review --background       # run in background
```

### `/codex:adversarial-review`

Steerable review that challenges design decisions, not just syntax. Append free-form text to focus the review on specific risk areas.

```bash
/codex:adversarial-review
/codex:adversarial-review --base main challenge whether this caching strategy handles invalidation correctly
/codex:adversarial-review --background look for race conditions in the auth flow
```

Use this before shipping:
- auth changes
- infra scripts
- anything involving data loss or migrations
- complex state management

### `/codex:rescue`

Hands a task to Codex when Claude gets stuck or you want a different model's take.

```bash
/codex:rescue investigate why the tests started failing
/codex:rescue fix the failing test with the smallest safe patch
/codex:rescue --resume           # continue from last run
/codex:rescue --model spark      # use a faster/cheaper model
```

### `/codex:status`, `/codex:result`, `/codex:cancel`

Manage background jobs.

```bash
/codex:status                    # check running/recent jobs
/codex:result                    # get output from finished job
/codex:cancel                    # cancel active job
```

## Review Gate

Auto-reviews every time Claude finishes. Blocks completion if issues are found.

```bash
/codex:setup --enable-review-gate    # turn on
/codex:setup --disable-review-gate   # turn off
```

**Warning:** the review gate creates a Claude/Codex loop that can drain usage limits quickly. Only enable when actively monitoring.

## When to Use What

| Situation | Command |
|-----------|---------|
| Pre-ship sanity check | `/codex:review` |
| Pressure-test design decisions | `/codex:adversarial-review` |
| Claude is stuck or looping | `/codex:rescue` |
| Auth, infra, data-loss risk | `/codex:adversarial-review` with focus text |
| Want continuous cross-model review | review gate (use sparingly) |

## Requirements

- ChatGPT subscription (incl. Free) or OpenAI API key
- Node.js 18.18+
- Codex CLI (`npm install -g @openai/codex`)

## Notes

- This replaces the manual `repomix` + `llm` approach for cross-model review — same idea, built-in
- For review without a ChatGPT subscription, the manual approach in the agent-swarm skill still works with any model
- Works alongside the agent-swarm workflow — use `/codex:adversarial-review` during wave review steps instead of manual piping
- Codex config lives in `~/.codex/config.toml` (user) or `.codex/config.toml` (project)

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.