CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

codex-review

Code review workflows with Codex CLI including automated reviews, diff analysis, and PR improvements. Use for code review, quality checks, or automated improvement suggestions.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Medium

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content is highly actionable — every workflow is expressed as concrete, executable bash — but the destructive auto-fix workflows run with no validation checkpoints, and the body carries stale date/version metadata plus redundant repeated command sections. Tightening the structure and adding verification steps before auto-commits would raise both conciseness and workflow clarity.

Suggestions

Remove the "**Last Updated**: December 2025 (GPT-5.2 Release)" line — time-sensitive version metadata goes stale and adds tokens without guidance value; if version-specific behavior matters, isolate it in a deprecation/old-patterns section.

Consolidate the three near-identical `codex exec` sections (Automated Code Review, PR Automation, Automated Review Workflows) into one section parameterized by prompt and scope, eliminating repeated command scaffolding.

Add explicit validation checkpoints to the destructive `auto_review_and_fix` workflow — e.g., "Review `git diff` and only commit when tests pass" — so the auto-fix loop has a verify-then-proceed feedback loop before creating commits.

DimensionReasoningScore

Conciseness

The body is mostly lean command blocks, but the time-sensitive line "**Last Updated**: December 2025 (GPT-5.2 Release)" adds no guidance value and will go stale, and three sections ("Automated Code Review", "PR Automation", "Automated Review Workflows") repeat near-identical `codex exec --dangerously-bypass-approvals-and-sandbox` invocations that could be consolidated. Mostly efficient, but could be tightened — matching anchor 3 rather than 4.

3 / 5

Actionability

Every section provides fully executable, copy-paste-ready commands: `codex exec --dangerously-bypass-approvals-and-sandbox --json "..."` with complete prompts, `codex apply`/`codex a`, and a complete `auto_review_and_fix` shell function with usage. The examples cover the common cases (full review, diff review, PR review, applying fixes), matching the anchor-5 example.

5 / 5

Workflow Clarity

The batch/destructive `auto_review_and_fix` workflow instructs Codex to "Auto-fix all issues" and "Create clean git commits" under `--dangerously-bypass-approvals-and-sandbox` with no validation checkpoints on the AI's fixes, which caps workflow clarity at 3 per the rubric guidelines. Only the "Apply Codex Suggestions" section includes a review-before-applying step (`git diff`, `git add -p`); the automated workflows lack feedback loops, leaving checkpoints missing or implicit.

3 / 5

Progressive Disclosure

No bundle files exist, and the ~100-line body is appropriately self-contained with clear section headers ("## Automated Code Review", "## Git Diff Review", etc.) and easy navigation. The minor organization gap from redundant near-identical command sections keeps this at anchor 4 rather than 5.

4 / 5

Total

15

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is strong: it names the domain and three concrete capabilities, uses third person, and includes an explicit trigger clause with natural user phrases. Its only weaknesses are minor — a few missing trigger synonyms (diff, PR review) and some overlap risk with generic code-review skills.

DimensionReasoningScore

Specificity

"automated reviews, diff analysis, and PR improvements" lists three concrete actions in the code-review domain, matching anchor 4 ("Lists several specific actions; minor gaps in coverage"). Not 5 because coverage omits concrete outputs (e.g., prioritized reports, fix application); not 3 because more than 1–2 actions are named.

4 / 5

Completeness

It explicitly answers "what" ("Code review workflows with Codex CLI including automated reviews, diff analysis, and PR improvements") and "when" ("Use for code review, quality checks, or automated improvement suggestions") with concrete trigger phrases, matching anchor 5. It is more explicit than the anchor-4 example, whose "when" clause is less specific.

5 / 5

Trigger Term Quality

"Use for code review, quality checks, or automated improvement suggestions" includes natural phrases users would say, matching anchor 4 ("Good keyword coverage; a few natural terms missing"). Not 5 because common variations like "diff", "PR review", "review my changes", and "refactor" are absent; not 3 because the primary natural terms are present and specific.

4 / 5

Distinctiveness Conflict Risk

The description is scoped to "Codex CLI", a distinct tool, matching anchor 4 ("Mostly distinct; minor overlap risk with closely related skills"). Not 5 because generic triggers like "code review" and "quality checks" could also fire for a general code-review skill; not 3 because the Codex CLI scoping meaningfully narrows the niche.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

fernandezbaptiste/Skrillz

Path

skills/codex-review/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.