No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by jMerta · Codex Skill · ★ 130
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is codex-skills safe to install? View the security audit →
Codex skills catalog Personal Codex skills (drop-in folders under ). Catalog: https://jmerta.github.io/codex-skills/ How it works Codex discovers skills from (user scope) and in repos (repo scope). The standard is (repo) and (user). Legacy is still supported. Only , , and the SKILL.md path are injected into context; bodies and are not auto-loaded (Codex can open/read them when needed). Enable skills (Codex CLI) Check: (look for ) Enable for the current run: Enable permanently: add to : Global AGENTS.MD ledger (not a skill) Codex also supports a single, global ledger file that applies across projects. This is not a skill and does not live in the skills catalog. Create it Location (Codex home directory): macOS/Linux: Windows (PowerShell): Working with the ledger Keep exactly one ledger at so it applies to all projects. At the start of each assistant turn: open the ledger and refresh it with the current goal, constraints/assumptions, decisions, and state. Update it again whenever any of these change: goal, constraints/a
| Stars | 130 |
| Forks | 15 |
| Language | TypeScript |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 66.9261031109751/100 |
| Open Issues | 4 |
| Last Updated | 2026-08-18 |
| Created | 2025-12-14 |
| Platforms | cli, codex, node |
| Est. Tokens | ~16k |
Looking for a codex-skills alternative? If you're comparing codex-skills with other codex skill tools, these 2 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
开源了Codex Skills等集合，大部分是自己实际需要搞得，需要的自取。欢迎star
Skills for agentic development on Solana
Explore other popular codex skill tools:
codex-skills is Codex CLI skills catalog. It is categorized as a Codex Skill with 130 GitHub stars.
codex-skills is primarily written in TypeScript.
You can find installation instructions and usage details in the codex-skills GitHub repository at github.com/jMerta/codex-skills. The project has 130 stars and 15 forks, indicating an active community.
codex-skills is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to codex-skills on Agent Skills Hub include skills, solana-dev-skill. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: