Auditcodexdirect

Skill sterlingcrispin/claude_slash_commands/auditcodexdirect

slash commands for Clade and Codex

Install

npx -y skills add sterlingcrispin/claude_slash_commands --skill auditcodexdirect

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.

What its author says it does

Copied from the file, not written here

Send specific files to OpenAI Codex CLI for an independent audit/review

SKILL.md

2.8 KB, 629 tokens by cl100k_base, as published. Nobody here has run it

Codex Direct File Audit

Your Task

The user wants to audit specific files (not a git diff). They will provide file paths, or you should identify the relevant files from context.

Identify the files to audit. If the user provided paths, use those. Otherwise, determine the most relevant files from the conversation context.
Prepare a brief summary of what each file does and why it's being audited.
Run the following command, replacing <FILE_PATHS> with the space-separated list of files, and <FILE_SUMMARY> with a concise description of each file's purpose:

codex exec -m "gpt-5.4" -c 'model_reasoning_effort="xhigh"' -c 'service_tier="fast"' --dangerously-bypass-approvals-and-sandbox -C "$(pwd)" "You are a READ-ONLY code reviewer. Read and review the following files: <FILE_PATHS>. Review them for: bugs, security issues, performance problems, logic errors, and style concerns. Be specific about file names and line numbers. You may read other files in the repo and run tests to verify your findings. SAFETY RULES: Do NOT delete files, edit existing files, change branches, checkout, reset, revert, amend, or undo commits. Do NOT run git push, git checkout, git reset, git clean, rm, or any destructive command. You may create temporary files if needed for debugging. Your job is strictly to READ and REPORT. Do a deep audit and think from first principles. Leave no question unanswered. Here is context about the files: <FILE_SUMMARY>"

Validate every finding before presenting it. The auditor (Codex) operates with limited context. It does not know the project's vision, strategic goals, or architectural rationale. It will often invent critical issues that are misunderstandings, or overstate the severity of things that are intentional design choices. For each finding Codex returns, you MUST:
- Check the actual source code to confirm the issue is real, not a hallucination or misread.
- Check any local strategic/planning documents (e.g. agents.md, README.md, CLAUDE.md, current_*.md, or similar docs in the repo or in a /doc/ folder DEV_JOURNAL.md etc) to see if the finding conflicts with the stated project intent.
- Ask yourself: "Is this a real bug, or is Codex misunderstanding the context?" and "Even if real, is this meaningful or is it trivial/stylistic noise?"
- If there are findings that are not both real AND meaningful, share them with the user but clearly label them and with your reasons why.
Present the validated findings to the user. For each one, briefly note why you believe it's legitimate. If Codex gave the all-clear, or if all findings failed validation, say so.
Ask the user if they'd like to address any of the validated feedback.

What ships with it

Read from the repository