C

Codex Reviewer

schuettc/codex-reviewer · v0.9.0 · Development & Workflow

by schuettcScan grade: caution

Second-pass review of Claude-driven plans and implementations.

InstallSourceClaim this plugin
Follow0
Trust Score59Security scan59Components2
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Codex Reviewer a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • 2 skills

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and HOL plugin scan. See the evidence
  • 3 medium findings from the scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Codex Reviewer?

Codex Reviewer is a published development & workflow plugin for AI coding agents in the Codex ecosystem, developed by schuettc and distributed through the HOL AI plugin registry. Second-pass review of Claude-driven plans and implementations.

Canonical slug
schuettc/codex-reviewer
Version
v0.9.0 · updated Sep 20, 2026

Registry snapshot

Owner verification
Not verified
Scanner
Registry fallback scan
Security result
Caution
Digest verified
Yes
2 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

59

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64/100
Maintenance
30/100
MCP server setup
100/100
Plugin Security
59/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/schuettc/codex-reviewer
Source commit
b53bd1529fea…
Publisher verified
No
Owner verified
Not owner verified

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Caution
Security result
59
Security score
0
High findings
Provider
registry-broker-fallback
Grade
F · caution
Version
Unknown
cisco-skill-scanner: unknown

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

Install guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install codex-reviewer.

  3. 3

    Check the marketplace is registered

    This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.

    shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "codex-reviewer",
  "version": "0.9.0",
  "description": "External reviewer for feature plans and implementations. Posts reviews directly on GitHub PRs via gh CLI.",
  "author": {
    "name": "schuettc",
    "url": "https://github.com/schuettc"
  },
  "homepage": "https://github.com/schuettc/codex-reviewer",
  "repository": "https://github.com/schuettc/codex-reviewer",
  "license": "MIT",
  "keywords": [
    "review",
    "planning",
    "codex",
    "claude-code"
  ],
  "skills": "./",
  "interface": {
    "displayName": "Codex Reviewer",
    "developerName": "schuettc",
    "shortDescription": "Second-pass review for Claude-driven work.",
    "longDescription": "Review feature plans and implementations with a findings-first Codex pass. Posts reviews directly on GitHub draft PRs.",
    "category": "Productivity",
    "capabilities": [
      "Reviews feature plans before implementation",
      "Reviews feature implementations against the plan",
      "Posts verdicts and inline findings on GitHub draft PRs"
    ],
    "defaultPrompt": [
      "Review the plan at <pr-url> for feature <id>.",
      "Review the implementation at <pr-url> for feature <id>."
    ],
    "brandColor": "#0F766E"
  },
  "registryIndexVersion": 5
}

Marketplace source

Repo URL
https://github.com/schuettc/codex-reviewer
Marketplace path
Unknown
Source path
plugins/schuettc/codex-reviewer
Install policy
AVAILABLE

Skills

2 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • feature-review-impl

    skills/feature-review-impl/SKILL.md

    Implementation Reviewer

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • feature-review-plan

    skills/feature-review-plan/SKILL.md

    Plan Reviewer

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

1,073 bytes

acb8d3d9f3e2276a…

README.md

file

3,470 bytes

0e4968867743efbd…

skills/feature-review-impl/SKILL.md

skill

16,823 bytes

8fab74d92a009a4e…

skills/feature-review-plan/SKILL.md

skill

20,845 bytes

da04ed311ab7490e…

Codex Reviewer — Frequently asked questions

What is Codex Reviewer?
Codex Reviewer is an AI plugin in the HOL registry. Second-pass review of Claude-driven plans and implementations.
How do I install Codex Reviewer?
Install Codex Reviewer in your harness: Codex — codex plugin marketplace add schuettc/codex-reviewer; Any agent — npx [email protected] add schuettc/codex-reviewer. Full step-by-step guidance is on the HOL plugin page.
How do I install Codex Reviewer in Codex?
To install Codex Reviewer in Codex, start with codex plugin marketplace add schuettc/codex-reviewer. The complete step-by-step install guide for Codex is on the HOL plugin page.
How is the Trust Score for Codex Reviewer computed?
Codex Reviewer has a HOL Trust Score of 59 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/schuettc%2Fcodex-reviewer/trust
Who publishes Codex Reviewer?
Codex Reviewer is published by schuettc and listed on HOL.

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Codex Reviewer.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins