codex-qa SKILL.md skillA
codex-qa from code-yeongyu/oh-my-openagent is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add code-yeongyu/oh-my-openagent/codex-qa@git:20260923.2f99bd2Pins git:20260923.2f99bd2 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- code-yeongyu/oh-my-openagent
- Path
.agents/skills/codex-qa/SKILL.md- Versions recorded
- 6
- Latest version
- git:20260923.2f99bd2, committed Sep 23, 2026
- First version recorded
- Jun 17, 2026
- Size
- 7,800 bytes
- Repository stars
- 70,277
- License
- a license file GitHub does not identify
QA the omo Codex Light edition (lazycodex / packages/omo-codex) itself, in strict isolation so ONLY our plugin is exercised, never the user's real ~/.codex. The first-party method drives the real `codex app-server` against an isolated CODEX_HOME plus a LOCAL mock model (no real API call), and proves a plugin hook fired by asserting hook/started + hook/completed notifications. Also: isolated install verification, per-component hook probes, a tmux TUI smoke, and runtime log observation…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Codex QA QA the omo Codex Light edition (`packages/omo-codex/`, shipped as lazycodex). We exercise OUR plugin in a REAL Codex while touching nothing of the user's setup: an isolated `CODEX_HOME` + a local mock model means no real API call and the real `~/.codex` is never read or written. Each helper script ships a `--self-test` that asserts its scenario against the live machine, so the scripts are both the QA tools and their own regression checks. Verified against `codex-cli 0.140.0` (node, jq, tmux, bun on macOS). Confirm with `codex --version`; check a flag with `codex <cmd> --help`. ## Golden rules (read before running anything) - **QA ONLY our plugin.** Everything that spawns codex uses an isolated `CODEX_HOME` (created by `cqa_mk_isolated_home`) and a LOCAL mock model provider (`cqa_start_mock`). Never QA against the real `~/.codex`, never hit a real model API. The bundled scripts enforce this; if you run codex by hand, `export CODEX_HOME="$(mktemp -d)/codex"; mkdir -p "$CODEX_HOME"` FIRST (a set `CODEX_HOME` must already exist or codex hard-errors). - **Prove the real home stayed clean.** Every script shasums …
Read the whole file at its exact version.
How to install
mdr add code-yeongyu/oh-my-openagent/codex-qa@sha256:27c3e24482a4e133The line at the top of this page pins the label git:20260923.2f99bd2, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_fk3jvn2ssk3myaeo)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Jun 17, 2026 and Sep 23, 2026, about one every 20 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260923.2f99bd2 latest | 2026-09-23 | 2f99bd2 | 7,800 B | A | view · diff |
| git:20260714.5b5cbb8 | 2026-07-14 | 5b5cbb8 | 7,649 B | A | view · diff |
| git:20260708.0806e41 | 2026-07-08 | 0806e41 | 7,202 B | A | view · diff |
| git:20260625.be69c62 | 2026-06-25 | be69c62 | 7,127 B | A | view · diff |
| git:20260623.4dcfadd | 2026-06-23 | 4dcfadd | 7,073 B | A | view · diff |
| git:20260617.022d434 | 2026-06-17 | 022d434 | 6,472 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7800 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
code-yeongyu/oh-my-openagent · 70,277 stars · license a license file GitHub does not identify · pushed 2026-10-22 · branch dev
API
GET https://markdownregistry.com/api/v1/artifacts/art_fk3jvn2ssk3myaeo GET https://markdownregistry.com/api/v1/resolve?ref=code-yeongyu/oh-my-openagent/codex-qa GET https://markdownregistry.com/api/v1/blob/27c3e24482a4e133ce02a98f16a40631bcafca9449f4bd1d58787850a4e89c8f
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from code-yeongyu/oh-my-openagent
Every file in code-yeongyu/oh-my-openagent