Claude Smart

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

.claude/rules

.claude/skills

Audit 0.4.1 · source sha a24aabf76e05 · 14 Oct 2026Report an issue or request a re-scan

• PublisherReflexioAI GitHub organizationOwner of the repository this skill is read from
• Source folderReflexioAI/claude-smart/plugin/skills/claude-smartThe exact folder we audited
• LicenceApache-2.0As the repository states it
• Commit pinned for this verdicta24aabf76e05A new audit runs when the source changes
• Repository statusNot archivedPushed today
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Codex-only — use when the user asks to run claude-smart commands in Codex, including claude-smart show, learn, restart, dashboard, clear-all, or slash-like requests such as /claude-smart:learn. In Claude Code the native…

---
name: claude-smart
description: Codex-only — use when the user asks to run claude-smart commands in Codex, including claude-smart show, learn, restart, dashboard, clear-all, or slash-like requests such as /claude-smart:learn. In Claude Code the native plugin slash commands handle these; do not invoke this skill there.
---

# claude-smart Commands In Codex

Codex does not currently support plugin-provided slash commands. When the user
asks for a claude-smart command, run the equivalent shell command through the
active plugin root. This skill is Codex-specific; under Claude Code the native
`/claude-smart:*` slash commands already exist, so do not fall back to the
shell commands there.

## Command Map

- Dashboard: `bash ~/.reflexio/plugin-root/scripts/dashboard-open.sh`
- Show learned state: `bash ~/.reflexio/plugin-root/scripts/cli.sh show`
- Learn from the latest turn: `bash ~/.reflexio/plugin-root/scripts/cli.sh learn`
- Learn with a note: `bash ~/.reflexio/plugin-root/scripts/cli.sh learn --note "<note>"`
- Restart backend/dashboard: `bash ~/.reflexio/plugin-root/scripts/cli.sh restart`
- Clear all learned state: `bash ~/.reflexio/plugin-root/scripts/cli.sh clear-all --yes`

## Behavior

1. Treat slash-like prompts such as `/claude-smart:show` as requests to run the
   matching shell command above.
2. For `learn`, preserve any user-provided note exactly as the note text.
3. For `clear-all`, require explicit confirmation before running it because it
   deletes all reflexio interactions, preferences, and skills.
4. If `~/.reflexio/plugin-root` is missing or broken, rerun
   `npx claude-smart install --host codex` to repair installation, then tell the
   user to start a new Codex session and rerun the command.
5. After running a command, summarize the important output concisely.

Excerpt, first 1,812 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

1. 2026-10-14
   !CAUTION B 89 / 100

   first audit · source a24aabf76e05

Questions about Claude Smart

• github.com/ReflexioAI/claude-smart/tree/main/plugin/skills/claud — the audited source at commit a24aabf76e05 and every finding aboveObserved · 14 Oct 2026

Spotted something wrong? Report a correction · Methodology