Codex safe workflow
Skill KevinBigham/codex-safe-starter/.agents/skills/codex-safe-workflow
Safe repo-local starter template for Codex guidance, skills, read-only agents, conservative config, and no-key validation.
npx -y skills add KevinBigham/codex-safe-starter --skill codex-safe-workflowAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Use inside Codex Safe Starter for repo-local setup, portability, safety, validation, eval, and public Git workflow changes. Do not use for unrelated app coding tasks.
SKILL.md
1.3 KB, as published. Nobody here has run it
Codex Safe Workflow
Use this skill for changes to the Codex Safe Starter repo. It is the canonical repo-scoped skill and should stay under .agents/skills/codex-safe-workflow/.
- Read
AGENTS.mdanddocs/codex/repo_map.md. - Plan non-trivial edits with objective, scope, files, verification, risks, and rollback.
- Keep changes project-local unless the maintainer explicitly approves a global change.
- Do not install tools by default. Stage install proposals in
codex-upgrade/SECURITY_REVIEW.md. - Run:
node scripts/secret-scan.mjsnode scripts/selftest.mjsnode scripts/doctor.mjs --cinode scripts/smoke.mjsnode codex-upgrade/benchmarks/run-smoke.mjs --final
- Before commit, stage only intended files and run
node scripts/secret-scan.mjs --staged. - Update
PORTABILITY_REPORT.mdandCODEX_STACK_REPORT.mdwhen portability, validation, Git, agent, skill, or install decisions change. - Keep MCP, hooks, rules, plugins, and permission-profile migrations staged in docs unless the maintainer explicitly approves activating them.
For the detailed checklist, read references/workflow-checklist.md.