Graph-Based Change Review
tirth8205/code-review-graph
Reviews a change set using a code knowledge graph for risk scores, blast radius and test gaps, and ends with a merge recommendation.
Code review via Codex CLI with full disk access. An agent skill from sd0xdev/sd0x-harness.
Install Codex CLI Review
$ npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install sd0xdev/sd0x-harness codex-cli-review --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/sd0xdev/sd0x-harness.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/codex-cli-review .claude/skills/codex-cli-review && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "codex-cli-review" agent skill from https://github.com/sd0xdev/sd0x-harness/tree/main/skills/codex-cli-review into .claude/skills/codex-cli-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "codex-cli-review", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/sd0xdev/sd0x-harness/tree/main/skills/codex-cli-reviewType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install sd0xdev/sd0x-harness codex-cli-review --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/sd0xdev/sd0x-harness.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/codex-cli-review .agents/skills/codex-cli-review && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "codex-cli-review" agent skill from https://github.com/sd0xdev/sd0x-harness/tree/main/skills/codex-cli-review into .agents/skills/codex-cli-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "codex-cli-review", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install sd0xdev/sd0x-harness codex-cli-review --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/sd0xdev/sd0x-harness.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/codex-cli-review .cursor/skills/codex-cli-review && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "codex-cli-review" agent skill from https://github.com/sd0xdev/sd0x-harness/tree/main/skills/codex-cli-review into .cursor/skills/codex-cli-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "codex-cli-review", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/sd0xdev/sd0x-harness.git --path skills/codex-cli-review--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install sd0xdev/sd0x-harness codex-cli-review --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/sd0xdev/sd0x-harness.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/codex-cli-review .gemini/skills/codex-cli-review && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "codex-cli-review" agent skill from https://github.com/sd0xdev/sd0x-harness/tree/main/skills/codex-cli-review into .gemini/skills/codex-cli-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "codex-cli-review", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install sd0xdev/sd0x-harness codex-cli-reviewInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/sd0xdev/sd0x-harness.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/codex-cli-review .github/skills/codex-cli-review && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "codex-cli-review" agent skill from https://github.com/sd0xdev/sd0x-harness/tree/main/skills/codex-cli-review into .github/skills/codex-cli-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "codex-cli-review", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install sd0xdev/sd0x-harness codex-cli-review --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/sd0xdev/sd0x-harness.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/codex-cli-review .opencode/skills/codex-cli-review && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "codex-cli-review" agent skill from https://github.com/sd0xdev/sd0x-harness/tree/main/skills/codex-cli-review into .opencode/skills/codex-cli-review/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "codex-cli-review", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
codex-cli-review- GitHub stars
- 192
- Token cost
- ~1.2k tokens
- SKILL.md length
- 196 words
- Files
- 2 (incl. scripts)
- Skills in repo
- 91
- Repo updated
- First seen
- Licence
- MIT
At a glance
Code review via Codex CLI with full disk access. An agent skill from sd0xdev/sd0x-harness.
- : deep review needing full codebase read
- SKILL.md covers Trigger, When to Use, When NOT to Use and Difference from MCP Version, plus 6 more sections
- Runs Shell scripts from its folder; calls bash
- Uncommitted change review
What it does
Codex CLI Review is an agent skill from sd0xdev/sd0x-harness. Code review via Codex CLI with full disk access. Use when: deep review needing full codebase read, uncommitted change review. Not for: quick diff review (use codex-code-review), doc review (use doc-review). Output: severity-grouped findings + merge gate.
Its SKILL.md is about 1.2k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including scripts (for example `scripts/review.sh`).
It sits in Development, covering Code review. It works with Model Context Protocol. The repository describes itself as: The harness layer for Claude Code — a reference implementation of harness engineering with hook-enforced dual review, state-machine gates that survive context compaction, and… The licence is MIT.
When your agent uses it
- : deep review needing full codebase read
- Uncommitted change review
Example prompts
- “/codex-cli-review”
Requirements
- A Bash shell
- Pre-approved tools (allowed-tools): Bash(bash:*)
What it can do on your machine
Read from SKILL.md and the folder at commit c9a2036. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves these tools, so the agent can use them without asking each time:
Bash(bash:*)
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/ (Shell), which the agent can run.
Shell commands in SKILL.md call:
bash
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Codex CLI Review loads about 1.2k tokens when it runs. Until then it costs about 68 tokens; SKILL.md has 196 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
The full file from sd0xdev/sd0x-harness at commit c9a2036, republished under its MIT licence (© sd0xdev). 196 words, ~1,184 tokens.
Download SKILL.mdSave it as
.claude/skills/codex-cli-review/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.- name
- codex-cli-review
- description
- Code review via Codex CLI with full disk access. Use when: deep review needing full codebase read, uncommitted change review. Not for: quick diff review (use codex-code-review), doc review (use doc-review). Output: severity-grouped findings + merge gate.
- allowed-tools
- Bash(bash:*)
- context
- fork
Codex CLI Review Skill
Trigger
- Keywords: codex cli review, cli review, script review
When to Use
- Need Codex to independently explore the entire project (full disk read)
- Don't need MCP's context persistence feature
- Want to use Codex CLI's native review format
When NOT to Use
- Need iterative review (use
/codex-review-fast --continue) - Need to follow up with Codex (use MCP version)
- Only want to see diff without waiting for Codex exploration (use
/codex-review-fast)
Difference from MCP Version
| Feature | CLI Version (this skill) | MCP Version |
|---|---|---|
| Independent explore | Full disk read | Needs explicit instruction |
| Context persistence | None | threadId |
| Iterative review | Each run independent | --continue |
| Format | Codex native format | Custom prompt format |
| Execution method | Script invocation | MCP tool invocation |
Workflow
┌─────────────────────────────────────────────────────────────────┐
│ Step 1: Check Changes │
├─────────────────────────────────────────────────────────────────┤
│ git status --porcelain │
│ No changes -> Early exit │
└─────────────────────────────────────────────────────────────────┘
↓
┌─────────────────────────────────────────────────────────────────┐
│ Step 2: Execute Codex CLI │
├─────────────────────────────────────────────────────────────────┤
│ codex review --uncommitted │
│ -c 'sandbox_permissions=["disk-full-read-access"]' │
│ │
│ Codex will independently: │
│ - Read changed files │
│ - Explore related dependencies │
│ - Check existing tests │
│ - Understand project structure │
└─────────────────────────────────────────────────────────────────┘
↓
┌─────────────────────────────────────────────────────────────────┐
│ Step 3: Output Review Results │
├─────────────────────────────────────────────────────────────────┤
│ Codex native format: │
│ - Summary │
│ - Issues (Critical/Major/Minor/Suggestion) │
│ - Recommendations │
└─────────────────────────────────────────────────────────────────┘Script
bash skills/codex-cli-review/scripts/review.sh [options]Options
| Parameter | Description |
|---|---|
--base <branch> | Compare with specified branch |
--title "<text>" | Set review title |
--prompt "<text>" | Custom review instructions |
I/O Contract
Input:
- Git working directory with changes
Output:
- Codex review report (stdout)
- Exit code: 0 = success, non-0 = failure
Output
## Codex CLI Review Report
### Findings
#### P0/P1/P2
- [file:line] Issue → Fix recommendation
### Merge Gate
✅ Ready / ⛔ BlockedVerification
- Script executes without errors
- Codex explored the project (file references visible in output)
- Output includes issue classification
Examples
# Review uncommitted changes
/codex-cli-review
# Compare with main branch
/codex-cli-review --base main
# With title
/codex-cli-review --title "Feature: User Auth"
# Custom review instructions
/codex-cli-review --prompt "Focus on security and performance"Related
| Command/Skill | Difference |
|---|---|
/codex-review-fast | MCP version, supports iterative review |
/codex-review | MCP version, includes lint + build |
/codex-review-branch | MCP version, reviews entire branch |
© sd0xdev, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 1 other file (scripts) in skills/codex-cli-review of sd0xdev/sd0x-harness.
- SKILL.md
- scripts/review.sh
Open the folder on GitHubat commit c9a2036
Compare with similar skills
Codex CLI Review next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Codex CLI Review this skillsd0xdev/sd0x-harness | 192 | — | ~1.2k | Automated safety check: Pass | MIT | |
| Graph-Based Change Reviewtirth8205/code-review-graph | 32k | 1 repos | ~331 | Automated safety check: Pass | MIT | |
| YugabyteDB Backport Reviewyugabyte/yugabyte-db | 11k | — | ~2.5k | Automated safety check: Pass | Custom licence | |
| Liveagent Code ReviewStack-Cairn/LiveAgent | 2.2k | — | ~2k | Automated safety check: Pass | MIT | |
| Code Review Graph Navigatorhandsontable/handsontable | 22k | — | ~939 | Automated safety check: Pass | Custom licence | |
| Code Reviewnteract/semiotic | 2.7k | — | ~1.5k | Automated safety check: Pass | Apache-2.0 |
Similar skills
YugabyteDB Backport Review
yugabyte/yugabyte-db
Checks a YugabyteDB backport revision on Phorge against the original diff it was ported from and flags differences, tracing unexplained code back to master.
Liveagent Code Review
Stack-Cairn/LiveAgent
Review an open GitHub pull request or the current local branch and working tree with parallel, independent reviewers and evidence-based validation.
Code Review Graph Navigator
handsontable/handsontable
Queries a pre-built, Tree-sitter-based code graph of the whole monorepo instead of grepping call chains, for exploring, debugging, refactoring or reviewing code.
Code Review
nteract/semiotic
Review Semiotic pull requests for behavioral bugs, regressions, contract drift, and missing evidence.
Roam
Cranot/roam-code
Codebase comprehension via roam-code CLI. An agent skill from Cranot/roam-code.
More from sd0xdev/sd0x-harness
All 91 skills in this repoAdr
sd0xdev/sd0x-harness
Write an Architecture Decision Record (ADR) for a feature — Context / Decision / Status / Consequences / Alternatives, filed as docs/features/<feature/adr-<NNN-<title.md with a 3-digit zero-padded…
Load PR Review
sd0xdev/sd0x-harness
Load GitHub PR review comments into AI session — analyze, triage, plan.
Next Step
sd0xdev/sd0x-harness
Change-aware next step advisor. An agent skill from sd0xdev/sd0x-harness.
Obsidian CLI
sd0xdev/sd0x-harness
Obsidian vault integration via official CLI. An agent skill from sd0xdev/sd0x-harness.
Orchestrate
sd0xdev/sd0x-harness
Agent-driven workflow orchestration (v1 report-only). An agent skill from sd0xdev/sd0x-harness.
PR Comment
sd0xdev/sd0x-harness
Post friendly review comments to a GitHub PR — prepare locally, preview, then submit as atomic review.
Related
Works with
Categories
Questions about Codex CLI Review
What does Codex CLI Review do?
Code review via Codex CLI with full disk access. An agent skill from sd0xdev/sd0x-harness. Codex CLI Review is an agent skill from sd0xdev/sd0x-harness. Code review via Codex CLI with full disk access.
When should I use Codex CLI Review?
Codex CLI Review fits situations like: : deep review needing full codebase read; uncommitted change review.
How do I install Codex CLI Review in Claude Code?
Run `npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a claude-code`. Or copy the skill folder (skills/codex-cli-review in sd0xdev/sd0x-harness) into .claude/skills/codex-cli-review in your project. Claude Code loads it when a task matches its description.
How do I install Codex CLI Review in Codex?
Run `npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a codex`. Or copy the skill folder (skills/codex-cli-review in sd0xdev/sd0x-harness) into .agents/skills/codex-cli-review in your project. Codex loads it when a task matches its description.
Can I use Codex CLI Review in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add sd0xdev/sd0x-harness --skill codex-cli-review -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/codex-cli-review, .gemini/skills/codex-cli-review, .github/skills/codex-cli-review and .opencode/skills/codex-cli-review in your project.
What does Codex CLI Review need to run?
Going by SKILL.md and its folder, Codex CLI Review needs a shell for the scripts in its folder and the command-line tools its instructions call (bash). Our summary lists: A Bash shell. Its frontmatter pre-approves these tools: Bash(bash:*).
Does Codex CLI Review access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Codex CLI Review safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Codex CLI Review use?
Codex CLI Review is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Codex CLI Review use?
About 1.2k tokens (SKILL.md is roughly 4.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Codex CLI Review?
Skills that share tags, products or a category with Codex CLI Review: Graph-Based Change Review (tirth8205/code-review-graph, 32k stars), YugabyteDB Backport Review (yugabyte/yugabyte-db, 11k stars), Liveagent Code Review (Stack-Cairn/LiveAgent, 2.2k stars) and Code Review Graph Navigator (handsontable/handsontable, 22k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Codex CLI Review?
sd0xdev (a GitHub user) maintains it in sd0xdev/sd0x-harness, which has 192 GitHub stars. The repository holds 91 skills in this directory. The repository was last updated on October 6, 2026.
Source: sd0xdev/sd0x-harness on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.