codex-cli-review SKILL.md skillA
codex-cli-review from sd0xdev/sd0x-harness is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add sd0xdev/sd0x-harness/codex-cli-review@git:20260319.7b83b52Pins git:20260319.7b83b52 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- sd0xdev/sd0x-harness
- Path
skills/codex-cli-review/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260319.7b83b52, committed Mar 19, 2026
- First version recorded
- Mar 5, 2026
- Size
- 6,018 bytes
- Repository stars
- 194
- License
- MIT
Code review via Codex CLI with full disk access. Use when: deep review needing full codebase read, uncommitted change review. Not for: quick diff review (use codex-code-review), doc review (use doc-review). Output: severity-grouped findings + merge gate.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Codex CLI Review Skill ## Trigger - Keywords: codex cli review, cli review, script review ## When to Use - Need Codex to independently explore the entire project (full disk read) - Don't need MCP's context persistence feature - Want to use Codex CLI's native review format ## When NOT to Use - Need iterative review (use `/codex-review-fast --continue`) - Need to follow up with Codex (use MCP version) - Only want to see diff without waiting for Codex exploration (use `/codex-review-fast`) ## Difference from MCP Version | Feature | CLI Version (this skill) | MCP Version | | ------------------- | ------------------------ | --------------------- | | Independent explore | Full disk read | Needs explicit instruction | | Context persistence | None | threadId | | Iterative review | Each run independent | --continue | | Format | Codex native format | Custom prompt format | | Execution method | Script invocation | MCP tool invocation | ## Workflow ``` ┌─────────────────────────────────────────────────────────────────┐ …
Read the whole file at its exact version.
How to install
mdr add sd0xdev/sd0x-harness/codex-cli-review@sha256:082bf981976239f9The line at the top of this page pins the label git:20260319.7b83b52, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_zorqeuv6ueqz7zrw)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Mar 5, 2026 and Mar 19, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260319.7b83b52 latest | 2026-03-19 | 7b83b52 | 6,018 B | A | view · diff |
| git:20260305.3ae8b92 | 2026-03-05 | 3ae8b92 | 6,036 B | A | view · diff |
| git:20260305.37d4591 | 2026-03-05 | 37d4591 | 5,740 B | A | view · diff |
| git:20260305.c56d819 | 2026-03-05 | c56d819 | 5,600 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6018 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
sd0xdev/sd0x-harness · 194 stars · license MIT · pushed 2026-10-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_zorqeuv6ueqz7zrw GET https://markdownregistry.com/api/v1/resolve?ref=sd0xdev/sd0x-harness/codex-cli-review GET https://markdownregistry.com/api/v1/blob/082bf981976239f9d9567e6915e07779b4ffda5e53f586ca4376667193f76350
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.