About codex
A Codex operating skill for executing coding tasks with controls for sandboxing, sessions, worktrees, and review. It supports workflows that record execution details and verify repository changes before reporting.
Key features
- 01Sandbox and execution mode selection
- 02Session and worktree handling
- 03Review and output workflows
- 04Diff and test verification
Use cases
- 01Run a task in a selected workspace
- 02Execute with a named sandbox
- 03Review repository changes
- 04Verify worktree edits before reporting
Install
Copy the command and run it in a terminal.
npx skills add https:/ / github.com/ prathamdby/ skills --skill codexAfter installing, type/codexin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
references/install.mdmanagement.mdsandbox.mdsessions.mdstreaming.mdworktrees.mdDetails
From the project READMECodex
Options and boundaries
Default: codex exec --yolo -C <abs-dir> "<prompt>"; model omitted; parent
wait 15m. Calling this skill authorizes that run: pass --yolo without asking.
--yolo is the listed alias of --dangerously-bypass-approvals-and-sandbox;
pass --yolo, not both. Bare codex is an asked-for TUI and omits --yolo.
"Use " adds -m. A named sandbox adds --sandbox <mode> and omits
--yolo. "Worktree" adds boolean --worktree, never a name or invented path.
"Review" selects codex --yolo review unless a sandbox is named. A named
sandbox omits --yolo and uses codex exec --sandbox <mode> review.
Missing values or conflicts are BLOCKED.
--full-auto is rejected. --search and --ask-for-approval are global,
before exec, and only when the user names them. Skip-git-repo-check,
bypass-hook-trust, danger-full-access, approve-for-me, and ignore-rules are
added only when the user names that control. For a named sandbox or a sandbox
failure, follow references/sandbox.md. Do not ask, and do not initialize a
repo to evade the git check.
1. Resolve
Fix workspace, prompt, mode, session, worktree, sandbox, and wait.
Check binary and codex login status without exposing secrets.
Missing binary → follow references/install.md; missing auth → BLOCKED
unless login was requested. Omit --sandbox unless the user named it.
Record cmd | workspace | mode | session | worktree | wait | evidence | terminal.
Done when target, binary, auth, and the yolo-or-named-sandbox choice are fixed.
2. Run
Build argv, quote the prompt literally, and use -C for the target.
Default text is quiet until exit; silence is not a hang. Wait until exit or
the recorded deadline; kill only this run's PID at that deadline.
Nonzero exit: capture stderr, inspect the tree, report BLOCKED.
Do not ask the user and do not add a second bypass.
For JSONL/last-message output, follow references/streaming.md.
For resume/fork, follow references/sessions.md.
For worktrees/parallel runs, follow references/worktrees.md.
For review, TUI, login, MCP, or plugins, follow references/management.md.
On a rejected flag, use scoped codex --help or codex exec --help.
Done when the process exits or a named failure is reported.
3. Verify and report
Inspect status and diff; CLI text is unverified. Run the narrowest covering tests for edited executable code. Check every child worktree; a named read-only sandbox is not a tree-unchanged guarantee. Remove only clean worktrees this run created and the user did not ask to keep; preserve login, MCP, and plugins. Report command, mode, session/worktree, wait, and outcome evidence. Done when every requested outcome is observed or a blocker is evidenced.
Terminals: SUCCESS, NO_CHANGES, BLOCKED.