Agent skill · Audited from source
Codex Cli Specialist
skill · borghei/Claude-SkillsNOASSERTION licenceAudited 19 Oct 2026 · source 6e3fcbdbb5cf
Is it safe? With care — CAUTION, grade B (86/100). We read this skill's source at commit 6e3fcbdbb5cf and observed filesystem access and no hard-coded secrets. The audit raised 11 findings, 0 critical or high. What it does: OpenAI Codex CLI and cross-platform skill authoring. Use when setting up Codex CLI, converting or syncing skills between Claude Code and Codex, configuring agents/openai.yaml, or validating cross-platform skill…
Cite
Cite this page
ModelsAtlas. “Codex Cli Specialist (borghei/Claude-Skills)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/borghei/codex-cli-specialist
Trust audit
Audit 0.4.1 · source read 19 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemDeclared1 observation
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 5 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 6 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (11)
MEDIUMInventory / provenanceinv.symlink · .codex/skills/a11y-audit
.codex/skills/a11y-audit
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills/ab-test-setup
.codex/skills/ab-test-setup
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills/account-executive
.codex/skills/account-executive
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills/ad-creative
.codex/skills/ad-creative
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills/aeo
.codex/skills/aeo
- Why
- link not followed
- Fix
- —
LOWPrompt injectionprompt.authority_framing · references/codex-cli-guide.md:205
You are a senior X specialist.
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWPrompt injectionprompt.authority_framing · references/configuration-and-distribution.md:22
You are a senior X specialist. When the user asks about Y:
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWPrompt injectionprompt.authority_framing · references/cross-platform-skills.md:131
You are a senior X specialist.
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWPrompt injectionprompt.authority_framing · references/cross-platform-skills.md:163
You are a senior X specialist with deep expertise in Y and Z.
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWPrompt injectionprompt.authority_framing · references/cross-platform-skills.md:197
You are a senior X specialist. Follow these guidelines when generating code.
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWPrompt injectionprompt.credential_read · references/codex-cli-guide.md:404
- **No secret access** - environment variables filtered
- Why
- asks the agent to read credentials
- Fix
- —
Audit 0.4.1 · source sha 6e3fcbdbb5cf · 19 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherborghei GitHub userOwner of the repository this skill is read from
- Source folderborghei/Claude-Skills/engineering/codex-cli-specialistThe exact folder we audited
- LicenceNOASSERTIONAs the repository states it
- Commit pinned for this verdict6e3fcbdbb5cfA new audit runs when the source changes
- Repository statusNot archivedLast push 12 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: OpenAI Codex CLI and cross-platform skill authoring. Use when setting up Codex CLI, converting or syncing skills between Claude Code and Codex, configuring agents/openai.yaml, or validating cross-platform skill…
--- name: codex-cli-specialist description: > OpenAI Codex CLI and cross-platform skill authoring. Use when setting up Codex CLI, converting or syncing skills between Claude Code and Codex, configuring agents/openai.yaml, or validating cross-platform skill compatibility. license: MIT + Commons Clause metadata: version: 1.1.0 author: borghei category: engineering domain: development-tools updated: 2026-06-17 tags: [openai-codex, cross-platform, skill-conversion, cli] --- # Codex CLI Specialist The agent converts Claude Code skills to Codex-compatible format, validates cross-platform compatibility, and builds skill registry manifests. It generates `agents/openai.yaml` configurations from SKILL.md frontmatter, runs 17 compatibility checks across both platforms, and produces `skills-index.json` for discovery systems. ## Core Capabilities - **Skill conversion** — turn a Claude Code SKILL.md into a Codex-compatible skill by generating `agents/openai.yaml` and copying scripts/references/assets. - **Cross-platform validation** — run 17 checks across Claude Code, Codex CLI, and shared categories (frontmatter, openai.yaml, encoding, naming, size). - **Index building** — scan skill directories and emit a `skills-index.json` manifest for registries, discovery, and version pinning. - **Codex CLI setup & operation** — install, configure API access, and run with the right approval mode (suggest / auto-edit / full-auto). - **Dual-target authoring** — write skills that work on both platforms from one shared `scripts/`, `references/`, `assets/` tree. - **Distribution & sync** — keep Claude Code and Codex in sync via shared repo, CI/CD conversion, or git hooks; publish via GitHub releases. ## When to Use - Setting up or operating OpenAI Codex CLI. - Converting or syncing skills between Claude Code and Codex. - Configuring or reviewing `agents/openai.yaml`. - Validating a skill for dual-platform compatibility. - Building a `skills-index.json` for a skill library. ## Clarify First Before converting or building, confirm these inputs. If any is unknown or vague, ASK — do not assume: - [ ] **Task** — convert a skill, validate cross-platform compatibility, or build a skills index (selects `codex_skill_converter.py` vs `cross_platform_validator.py` vs `skills_index_builder.py`) - [ ] **Source path** — the SKILL.md or skill directory to operate on (the input the scripts read) - [ ] **Strictness** — strict validation mode and whether to fail on warnings (sets `--strict` and the pass/fail gate) Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact. ## Tools | Tool | Purpose | Command | |------|---------|---------| | `codex_skill_converter.py` | Convert a Claude Code SKILL.md into Codex format (`agents/openai.yaml`) | `python scripts/codex_skill_converter.py <skill_md> [--output-dir DIR] [--json]` | | `cross_platform_validator.py` | Run 17 Claude Code + Codex + cross-platform compatibility checks on a skill dir | `python scripts/cross_platform_validator.py <skill_dir> [--strict] [--json]` | | `skills_index_builder.py` | Build a `skills-index.json` manifest from a directory of skills | `python scripts/skills_index_builder.py <skills_dir> [--output FILE] [--format json\|human] [--category CAT]` | ## References Load the reference that matches the task — keep this file lean and pull detail on demand: - **[references/workflows.md](references/workflows.md)** — Quick Start, Tools Overview, the 5 core workflows (install, author, convert, validate, build index), Common Patterns, and deep per-tool parameter/output reference. Read when running a workflow or needing exact tool arguments. - **[references/configuration-and-distribution.md](references/configuration-and-distribution.md)** — `agents/openai.yaml` structure, discovery/locations, invocation patterns, cross-platform patterns, frontmatter compatibility, install/versioning, and sync/CI/CD/GitHub distribution. Read when configuring openai.yaml or distributing a library. - **[references/best-practices-and-troubleshooting.md](references/best-practices-and-troubleshooting.md)** — best practices (authoring, Codex usage, cross-platform, performance), anti-patterns, troubleshooting table, and success criteria. Read before shipping or when a tool misbehaves. - **[references/codex-cli-guide.md](references/codex-cli-guide.md)** — full Codex CLI reference: installation, configuration, approval modes, skill system, invocation, built-in features, environment variables. - **[references/cross-platform-skills.md](references/cross-platform-skills.md)** — writing skills for multiple agents (Claude Code, Codex, Cursor, Copilot, Goose): platform comparison, universal structure, per-platform config files, template. - **[assets/openai-yaml-template.yaml](assets/openai-yaml-template.yaml)** — production-grade Codex config template (instructions, tools, model selection, versioning). ## Scope & Limitations **This skill covers:** - Installing, configuring, and operating OpenAI Codex CLI - Converting Claude Code SKILL.md files into Codex-compatible format with `agents/openai.yaml` - Validating skill directories for dual-platform (Claude Code + Codex CLI) compatibility - Building skill registry manifests (`skills-index.json`) for discovery and distribution **This skill does NOT cover:** - Writing the actual domain logic inside Python tool scripts (see [senior-fullstack](../senior-fullstack/SKILL.md), [code-reviewer](../code-reviewer/SKILL.md), or the relevant domain skill) - Cursor, Windsurf, Cline, or Aider platform-specific configuration (see [standards/](../../standards/) and root-level dotfiles like `.cursorrules`, `.windsurfrules`) - OpenAI API key management, billing, or rate-limit troubleshooting (out of scope -- refer to OpenAI documentation) - Automated testing or CI/CD pipeline authoring beyond skill validation (see [senior-devops](../senior-devops/SKILL.md) a
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 6e3fcbd
npm install -g @openai/codex git clone https://github.com/org/skills-repo.git /tmp/skills
git clone https://github.com/borghei/Claude-Skills git -C Claude-Skills checkout 6e3fcbdbb5cf
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 6e3fcbdbb5cf only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
| GitHub Copilot | Mentioned in its text, not tested | Skills for GitHub Copilot · About GitHub Copilot |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
| Windsurf | Mentioned in its text, not tested | Skills for Windsurf · About Windsurf |
Audit history
Every audit, every source change
- !CAUTION B 86 / 100
first audit · source
6e3fcbdbb5cf
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/borghei/codex-cli-specialist/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All coding & review skills →borghei/Claude-Skills
This skill should be used when the user asks to "check accessibility", "audit WCAG compliance", "scan HTML for a11y issues", "check color contrast", or "find accessibility violations in web pages".
borghei/Claude-Skills
Designs multi-agent system architectures with orchestration patterns, tool schemas, and performance evaluation. Use when building AI agent systems, designing agent workflows, creating tool schemas, or evaluating agent…
borghei/Claude-Skills
Design AI agent communication protocols: MCP tool schemas, A2A, function calling, and inter- agent messaging. Use when building multi-agent systems, defining tool interfaces, or implementing agent-to-agent communication.
borghei/Claude-Skills
Design multi-agent orchestration with workflow DAGs, routing, handoff protocols, and state management. Use when building pipelines of specialized agents, designing fan-out/fan-in patterns, or implementing fault-tolerant…
borghei/Claude-Skills
Multi-agent DAG orchestration for workflows where AI agents collaborate via dependency graphs, covering agent spawning, output merging, and quality evaluation. Use when a task needs multiple specialized agents or to…
borghei/Claude-Skills
Analytics engineering across data modeling, dbt, transformation, and semantic layers. Use when building dbt models, designing star schemas, writing staging or mart SQL, configuring data tests, or optimizing warehouse…
Add this badge to your README
[](https://modelsatlas.com/skills/borghei/codex-cli-specialist/)
<a href="https://modelsatlas.com/skills/borghei/codex-cli-specialist/"><img src="https://modelsatlas.com/skills/borghei/codex-cli-specialist/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about Codex Cli Specialist
What does the Codex Cli Specialist skill do?
Is Codex Cli Specialist safe to install?
What can Codex Cli Specialist access on my machine?
Which assistants does Codex Cli Specialist work with?
How current is this page?
Sources
- github.com/borghei/Claude-Skills/tree/main/engineering/codex-cli — the audited source at commit 6e3fcbdbb5cf and every finding aboveObserved · 19 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Codex Cli Specialist skill do?
- Is Codex Cli Specialist safe to install?
- What can Codex Cli Specialist access on my machine?