codex skillA
codex is agent-read markdown (skill) from ericpardee/agent-files: Use when the user asks to run Codex CLI (codex exec, codex resume) or references OpenAI Codex for code analysis, refactoring, or automated editing.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Codex CLI Reference for driving `codex exec` correctly from an agent session. For a full review gate with a fix-or-rebut loop, use the `codex-gate` skill instead. ## Invocation rules - Do not pass `-m`. `~/.codex/config.toml` sets the default model; override it only when the user names a model. Pair reviews with `-c model_reasoning_effort="xhigh"` (options: `none`, `minimal`, `low`, `medium`, `high`, `xhigh`). - Always redirect stdin from `/dev/null`. `codex exec` appends stdin to the prompt, so without the redirect it blocks on an open terminal and looks like a slow reasoning pass until killed. The tell is empty stdout with `Reading additional input from stdin...` on stderr. - Append `2>/dev/null` to hide thinking tokens (stderr). Show stderr only when debugging. - Sandbox: `--sandbox read-only` for reviews, `workspace-write` for edits, `danger-full-access` only for work that needs the network. `--full-auto` applies to write runs only. Ask before `--full-auto`, `danger-full-access`, or `--skip-git-repo-check` unless the user already granted it. - `-C <dir>` runs from another directory; `--skip-git-repo-check` is needed outside a repository. …
Read the whole file at its exact version.
How to install
mdr add ericpardee/agent-files/codex@git:20260920.6de3dc1mdr add ericpardee/agent-files/codex@sha256:c5f7978a82bf3506Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_vvyrvcv7bo2iazgg)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260920.6de3dc1 latest | 2026-09-20 | 6de3dc1 | 3,398 B | A | view · diff |
| git:20260918.4729d23 | 2026-09-18 | 4729d23 | 5,527 B | A | view · diff |
| git:20260727.60d0582 | 2026-07-27 | 60d0582 | 4,305 B | A | view · diff |
| git:20260213.3aef356 | 2026-02-13 | 3aef356 | 4,203 B | A | view · diff |
| git:20260119.f7a0b30 | 2026-01-19 | f7a0b30 | 4,002 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3398 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
ericpardee/agent-files · 3 stars · license MIT · pushed 2026-09-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_vvyrvcv7bo2iazgg GET https://markdownregistry.com/api/v1/resolve?ref=ericpardee/agent-files/codex GET https://markdownregistry.com/api/v1/blob/c5f7978a82bf3506dad2fb3825965ba20edeb36c0b71406fe3fe63da1c437b02
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
More from ericpardee/agent-files
Every file in ericpardee/agent-files