codex-review
Facilitates structured feedback from Codex on implementation plans, aiding in iterative development and decision-making.
Install this skill
or
85/100
Security score
The codex-review skill was audited on May 30, 2026 and we found 3 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 21
Template literal with variable interpolation in command context
SourceSKILL.md
| 21 | ```bash |
medium line 42
Access to hidden dotfiles in home directory
SourceSKILL.md
| 42 | | `--log-id` | No | auto-generated UUID | Identifier for the persistent JSONL log file at `~/.closedloop-ai/plan-with-codex/<log-id>.jsonl`. The raw Codex JSON stream is appended here each round. Pass |
medium line 48
Access to hidden dotfiles in home directory
SourceSKILL.md
| 48 | All stdout responses include three tokens: a verdict (or failure indicator), `CODEX_SESSION`, and `LOG_ID`. The raw Codex JSON stream is appended to `~/.closedloop-ai/plan-with-codex/<uuid>.jsonl`. Pa |
Scanned on May 30, 2026
View Security Dashboard