A Claude Code skill that enforces Codex-based code review - Claude must use Codex for all code reviews, then apply fixes based on Codex's feedback.
Code Review Request
↓
┌───────────────────┐
│ Codex Reviews │ ← Claude calls Codex CLI
│ (read-only) │
└───────────────────┘
↓
┌───────────────────┐
│ Codex Feedback │ ← Issues with file:line:severity
└───────────────────┘
↓
┌───────────────────┐
│ Claude Applies │ ← Claude fixes code using Edit tool
│ Fixes │
└───────────────────┘
↓
┌───────────────────┐
│ (Optional) │ ← Codex re-verifies
│ Re-verify │
└───────────────────┘
- Mandatory Code Review: All code reviews MUST go through Codex first
- Guided Fixes: Claude applies fixes based on Codex's specific feedback
- Structured Output: Codex provides file paths, line numbers, and severity levels
- Re-verification: Optional second pass to confirm fixes
# Via npm
npm install -g @openai/codex
# Via Homebrew (macOS)
brew install --cask codexcodex logincp -r claude-codex-skill ~/.claude/skills/codex-agentmkdir -p .claude/skills
cp -r claude-codex-skill .claude/skills/codex-agentWhen you ask Claude to review code, it will:
- Call Codex to perform the review
- Parse feedback from Codex (file, line, severity, issue, fix)
- Apply fixes using Edit tool
- Optionally re-verify with Codex
Review my authentication code and fix any issues
Do a security review of src/api/ and apply the fixes
Review the recent changes and fix problems Codex finds
Claude executes:
codex exec -C /project -s read-only -o /tmp/codex-review.md \
"Review src/auth/. Check for security, performance, code quality.
Provide file paths, line numbers, and specific fixes."Codex outputs structured feedback:
- File: src/auth/login.ts
- Line: 45
- Severity: high
- Issue: SQL injection vulnerability
- Fix: Use parameterized query instead of string concatenation
Claude reads the file, applies the fix with Edit tool:
old_string: `SELECT * FROM users WHERE id = '${userId}'`
new_string: `SELECT * FROM users WHERE id = $1`, [userId]
codex exec -C /project -s read-only \
"Verify fixes in src/auth/login.ts. Confirm SQL injection is resolved."claude-codex-skill/
├── SKILL.md # Main skill with mandatory workflow
├── sandbox-modes.md # Sandbox security documentation
├── examples.md # Usage examples
├── advanced.md # Advanced configuration
├── scripts/
│ ├── codex-wrapper.sh # Helper wrapper script
│ └── check-codex.sh # Installation checker
└── README.md # This file
Add to .claude/settings.local.json:
{
"permissions": {
"allow": [
"Bash(codex:*)"
]
}
}| Mode | Description |
|---|---|
read-only |
No file writes (used for reviews) |
workspace-write |
Write to project directory |
danger-full-access |
Unrestricted (use with caution) |
npm install -g @openai/codexcodex logout
codex loginMIT