Skip to content
Back to skills

2829 Codex Invocation 4328260e

ASecurity

- Model: `gpt-5.3-codex` - Reasoning effort: `xhigh`

  • 9 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 11, 2026
ai-agentsbash

Works with

  • cli

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 2829-codex-invocation_4328260e --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 2829 Codex Invocation 4328260e?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 2829 Codex Invocation 4328260e
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-2829-codex-invocation-4328260e/badge)](https://www.skillsdirectory.com/skills/tools-only-2829-codex-invocation-4328260e)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

SKILL.md
# Codex CLI Invocation

## Default Configuration

- Model: `gpt-5.3-codex`
- Reasoning effort: `xhigh`

## Base Command

```bash
codex review <scope-flag> \
  -c model='"gpt-5.3-codex"' \
  -c model_reasoning_effort='"xhigh"'
```

Model and reasoning are set via `-c` config overrides (not `-m`).

## Scope Flags

| Scope | Flag |
|-------|------|
| Uncommitted changes | `--uncommitted` (staged + unstaged + untracked) |
| Branch diff | `--base <branch>` |
| Specific commit | `--commit <sha>` |

## Adding a Review Prompt

Assemble the prompt string from the user's choices:

```
<If project context was requested>
Project conventions and standards:
---
<full contents of CLAUDE.md or AGENTS.md>
---

<If focus area was selected or custom text provided>
<focus area instructions>
```

If there is no prompt (general review, no context), run
codex review without a prompt argument.

## Passing the Prompt

`--uncommitted` accepts a positional prompt argument:

```bash
codex review --uncommitted \
  -c model='"gpt-5.3-codex"' \
  -c model_reasoning_effort='"xhigh"' \
  "the assembled prompt"
```

`--base` and `--commit` do NOT accept a custom prompt via any
mechanism. The positional `[PROMPT]` argument is mutually
exclusive with these flags, and there is no stdin option.

**Limitation:** When using `--base` or `--commit`, Codex
cannot receive custom review instructions or project context
via prompt. If an `AGENTS.md` file exists at the repo root,
Codex reads it automatically — but the skill should not
create or modify this file.

For `--uncommitted`, project context and focus instructions
are passed via the positional prompt argument (no limitation).

## Model Fallback

If `gpt-5.3-codex` fails with an auth error (e.g., "not supported
when using Codex with a ChatGPT account"), retry with
`gpt-5.2-codex`. Log the fallback for the user.

## Error Handling

| Error | Action |
|-------|--------|
| `codex: command not found` | Tell user: `npm i -g @openai/codex` |
| Model auth error | Retry with `gpt-5.2-codex` |
| Timeout | Suggest `high` reasoning instead of `xhigh` |
| `EPERM` / sandbox errors | Expected — `codex review` runs sandboxed and cannot execute tests or builds. Ignore these. |

## Parsing Output

Codex review output is verbose. It contains sandbox warnings,
`[thinking]` blocks, `[exec]` blocks showing tool calls and
full file reads, and the actual review findings.

When presenting results to the user:
- **Do NOT dump raw output.** Summarize the findings.
- The review conclusion is typically at the **end** of the
  output, after all thinking and exec blocks.
- Skip sandbox permission warnings (`EPERM`, `xcodebuild`).
- Skip `[thinking]` and `[exec]` block contents unless they
  contain specific findings the user should see.
- If the output is truncated (>30KB), read the persisted
  output file to find the conclusion.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…