Codex skills · skills · 18 picks

Codex and agent skills for repeatable work

Skills, commands, and rules that map well to Codex-style repeatable agent workflows across engineering, docs, deployment, and review.

Curated by @heyclaude-editors Updated 2026-07-18

Skills, commands, and rules that map well to Codex-style repeatable agent workflows across engineering, docs, deployment, and review.

Compared at a glance

The top 5 picks side by side on trust, install, platform support, and disclosed notes — full rationale for each below.

2 trust signals differ across this comparison (Package trust, Source provenance).

Next steps differ across picks — use the actions in the table below to copy install commands and source links per resource.

Field	Codex Automations Orchestrator Capability Pack Skill Expert automation-orchestration capability pack for designing safe, low-noise recurring Codex workflows with clear runbooks. Open dossier	Configure Claude Code Hooks with /hooks Use the built-in /hooks menu to inspect Claude Code hooks and configure them in settings.json so shell commands run deterministically at lifecycle events like PreToolUse, PostToolUse, and Stop. Open dossier	GitHub Actions AI-Powered CI/CD Automation Skill Build intelligent CI/CD pipelines with GitHub Actions, AI-assisted workflow generation, automated testing, and deployment orchestration. Open dossier	Base L2 Smart Contract Launchpad Skill Ship smart contracts on Base with secure deployment, verification, environment management, and production-readiness checklists. Open dossier	Code Review Automation Capability Pack Skill Expert code-review capability pack for deterministic PR audits, risk-ranked findings, and low-noise fix planning without SaaS lock-in. Open dossier
Next stepsDiffers	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing
Trust
Review status	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed
Package trustDiffers	Package verified2026-04-11	Package not verified	Package verified2025-10-16	Package verified2026-04-10	Package verified2026-04-11
Source provenanceDiffers	No submission link	Source-backed	No submission link	No submission link	No submission link
Submitter	—	—	—	—	—
Install risk	Low risk	Review first	Low risk	Low risk	Low risk
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	—	—	GitHub	—	—
Category	skills	commands	skills	skills	skills
Source	First-party	Source-backed	First-party	First-party	First-party
Author	JSONbored	JSONbored	JSONbored	JSONbored	JSONbored
Added	2026-04-11	2025-10-25	2025-10-16	2026-04-10	2026-04-11
Platforms	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI
Harness	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI	Claude Code Codex Windsurf Gemini Cursor CLI
Source repo	—	—	—	—	—
Safety notes	✓Designs and runs automation workflows that can execute commands and trigger external actions; review each automation's permissions and triggers before enabling it.	✓Hooks execute shell commands automatically with your user permissions whenever their event fires. A misconfigured or malicious hook can run destructive commands (file deletion, network calls, credential access) without further confirmation. PreToolUse hooks can allow or deny tool calls and PostToolUse hooks run after tools succeed; review hook commands before committing them to a shared .claude/settings.json so teammates do not inherit unexpected execution. Prefer `.claude/settings.json` for reviewed, team-shared hooks and `.claude/settings.local.json` for personal, gitignored hooks; use `disableAllHooks` to turn off user/project hooks when running untrusted code.	✓Setup downloads and unzips a package, and generated workflows run build/test/deploy commands in CI with repository permissions; review workflow YAML and least-privilege the GITHUB_TOKEN before merging.	✓Do not deploy or transact from generated contract code without independent review, tests, and a dry run; smart contract mistakes can be irreversible. Use local forks or testnets before mainnet and keep deployment wallets and RPC credentials least-privileged.	✓Installs from a downloaded package and may run local commands or scaffold files as part of the workflow; review the package and any generated changes before applying.
Privacy notes	✓Inputs can include source files, prompts, logs, account metadata, repository details, and operational context that may be sent to the configured AI model. Redact secrets, customer data, private URLs, credentials, and proprietary implementation details before sharing prompts, reports, or generated artifacts.	✓Command and HTTP hooks receive event JSON on stdin including `session_id`, `transcript_path`, `cwd`, and tool input (such as file paths and Bash commands); a hook that forwards this data over the network can expose local file contents, paths, or command arguments to third parties. HTTP hooks can include headers with interpolated environment variables (restricted by `allowedEnvVars`); avoid embedding secrets in hook configuration that is committed to a repository.	✓CI workflows read repository code and use secrets (API keys, deploy credentials, model keys); store them in GitHub Actions secrets, never in workflow files or logs, and review what third-party actions can access.	✓Prompts and reports can include contract source, audit findings, addresses, deployment config, and transaction context. Never paste private keys, seed phrases, unreleased exploit details, customer wallet data, or privileged RPC credentials into prompts.	✓Operates on your local project files and any context you share in the session; review what you expose before sharing — nothing is sent beyond the model unless a step calls an external service.
Prerequisites	Automation goals and success metrics Notification channel Operational owner	— none listed	GitHub repository with Actions enabled Test suite (Vitest, Jest, Playwright) Deployment target (Vercel, AWS, GCP, etc.) GitHub account with repository access and Actions enabled (free tier includes 2,000 minutes/month)	Solidity contracts and deployment scripts Base testnet/mainnet environment variables Defined ownership, admin, and upgrade strategy	Repository access and PR diff Security severity policy Test/lint/typecheck commands
Install	`curl -L https://heyclau.de/downloads/skills/codex-automations-orchestrator-capability-pack.zip -o codex-automations-orchestrator-capability-pack.zip && unzip -o codex-automations-orchestrator-capability-pack.zip -d ./codex-automations-orchestrator-capability-pack`	—	`curl -L https://heyclau.de/downloads/skills/github-actions-ai-cicd.zip -o github-actions-ai-cicd.zip && unzip -o github-actions-ai-cicd.zip -d ./github-actions-ai-cicd`	`curl -L https://heyclau.de/downloads/skills/base-l2-smart-contract-launchpad.zip -o base-l2-smart-contract-launchpad.zip && unzip -o base-l2-smart-contract-launchpad.zip -d ./base-l2-smart-contract-launchpad`	`curl -L https://heyclau.de/downloads/skills/coderabbit-lite-pr-review-capability-pack.zip -o coderabbit-lite-pr-review-capability-pack.zip && unzip -o coderabbit-lite-pr-review-capability-pack.zip -d ./coderabbit-lite-pr-review-capability-pack`
Config	—	—	—	—	—
Citations	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationgithub.com Package (SHA-256 pinned)/downloads/skills/codex-automations-orchestrator-capability-pack.zip Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationcode.claude.com Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdocs.github.com Package (SHA-256 pinned)/downloads/skills/github-actions-ai-cicd.zip Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdocs.base.org Package (SHA-256 pinned)/downloads/skills/base-l2-smart-contract-launchpad.zip Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdocs.github.com Package (SHA-256 pinned)/downloads/skills/coderabbit-lite-pr-review-capability-pack.zip Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed	Unclaimed