CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

codex-tools

Execute and manage Codex CLI tools including file operations, shell commands, web search, and automation patterns. Use for automated workflows, tool orchestration, and full automation with permission bypass.

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/codex-tools/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers fully executable, copy-paste-ready command patterns for every category it covers, but it promotes unvalidated batch and sandbox-bypassing automation without verification checkpoints, includes a penalized time-sensitive line, and repeats the same bypass pattern across redundant sections.

Suggestions

Add validation checkpoints to the batch and destructive workflows — e.g. review 'codex exec --json' output or 'git diff --stat' before accepting changes, and verify tests pass before declaring success — which currently caps workflow clarity at 3.

Remove the 'Last Updated: December 2025 (GPT-5.2 Release)' line and consolidate the repetitive --dangerously-bypass-approvals-and-sandbox examples (Automated Testing, Automated Refactoring, Batch Processing share the same shape) into one parameterized pattern.

Resolve or qualify the dangling 'Related Skills' references (codex-cli, codex-auth, codex-chat, codex-review, codex-git) since none exist in this bundle, and reconsider framing the skill as 'safely' executed while its primary examples bypass the sandbox entirely.

DimensionReasoningScore

Conciseness

The body is mostly lean code examples, but the time-sensitive line 'Last Updated: December 2025 (GPT-5.2 Release)' is penalized outside an 'old patterns' section, and the '--dangerously-bypass-approvals-and-sandbox' pattern repeats across five near-duplicate sections (Automated Testing vs. Automated Refactoring vs. Batch Processing) that could be consolidated. Mostly efficient but could be tightened, so it does not reach the 'minor trim' anchor.

3 / 5

Actionability

Every example is complete, copy-paste-ready bash with concrete usage shown — 'setup_project "my-app" "react"', 'batch_process "*.js" "add JSDoc comments and type hints"', and a backup_and_execute function with git-stash rollback — covering the common cases (file ops, shell, search, testing, refactoring). There are no pseudocode or missing-details gaps that would drop it to 4.

5 / 5

Workflow Clarity

Batch operations ('Process multiple files with full automation') and destructive operations (sandbox-bypassed writes) lack validation or verification of results — no diff review, no inspection of the --json output, no checkpoint after 'Run all tests and fix failures automatically'. Per the rubric's cap, batch/destructive workflows without validation cannot score above 3; the git-stash backup in one function is the only checkpoint, keeping this above 2.

3 / 5

Progressive Disclosure

No bundle files exist, and the ~205-line body is organized into clear, well-labeled ## / ### sections that are easy to navigate, fitting 'good structure; most content appropriately placed; minor organization gaps'. Not 5 because there is no overview-to-detail split and the 'Related Skills' section references codex-cli, codex-auth, codex-chat, codex-review, and codex-git, which do not exist in this bundle; not 3 because structure and navigation are genuinely clear for a single-file skill of this size.

4 / 5

Total

15

/

20

Passed

Description

63%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description has a clear what-and-when structure with third-person voice and several named action categories, but its trigger terms are repetitive automation variants lacking natural synonyms, and its broad claim over the whole Codex CLI creates overlap risk with the sibling skills it references.

Suggestions

Add natural trigger phrases and synonyms users would actually say, e.g. 'Use when running codex exec non-interactively, automating CLI tasks from scripts or CI, or batching file changes across a project.'

Narrow the scope to distinguish this skill from siblings like codex-cli, codex-git, and codex-review — e.g. emphasize non-interactive execution and automation patterns rather than 'Execute and manage Codex CLI tools' generally.

Replace the jargon-y 'full automation with permission bypass' trigger with concrete user-facing terms such as 'headless Codex runs' or 'sandboxed vs. full-auto execution modes'.

DimensionReasoningScore

Specificity

The description lists several action categories in third person — 'file operations, shell commands, web search, and automation patterns' — matching the anchor for several specific actions with minor gaps. It falls short of a 5 because the actions are category-level names rather than multiple concrete operations, and exceeds a 3 because more than 1-2 actions are explicitly named.

4 / 5

Completeness

It has a clear 'what' ('Execute and manage Codex CLI tools including file operations, shell commands, web search, and automation patterns') and an explicit 'Use for...' clause, satisfying both requirements. Not a 5 because the 'when' lacks concrete trigger phrases — 'full automation with permission bypass' is jargon rather than a phrase a user would naturally say; not a 3 because the trigger guidance is explicitly present.

4 / 5

Trigger Term Quality

Terms like 'automated workflows', 'tool orchestration', and 'automation' are relevant and natural, but coverage is repetitive (three 'automation' variants) and misses common variations users would say, such as 'codex exec', 'run Codex from the command line', or 'CI automation'. This fits 'some relevant keywords but missing common variations or synonyms' rather than the good-coverage anchor.

3 / 5

Distinctiveness Conflict Risk

'Codex CLI tools' names a specific domain, but 'Execute and manage Codex CLI tools including file operations, shell commands, web search' broadly overlaps the closely related sibling skills the body itself references (codex-cli, codex-git, codex-review), so generic Codex queries could trigger the wrong skill. This fits 'somewhat specific but could still overlap with similar skills' rather than 'mostly distinct with minor overlap'.

3 / 5

Total

14

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

fernandezbaptiste/Skrillz

Path

skills/codex-tools/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.