Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add mcp/nexu-io/codex-slides/codex_slidesgit clone --depth 1 https://github.com/nexu-io/codex-slidesGrade A, and why
codex_slides scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"codex_slides": {
"title": "Codex Slides",
"description": "Run a Browser-first guided deck workflow with durable projects, checkpoints, Design Files, brand systems, editing, presenting, and export from Codex.",
"command": "node",
"args": [
"./scripts/start-mcp.mjs"
],
"cwd": "."
}
}What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 11 lines scan A 1e7a22f3c061
codex_slides is an MCP server published in the GitHub repository nexu-io/codex-slides (859 stars, last pushed 1mo ago), licensed MIT. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other mcp servers, from other repositories
image_context_runtime
MCP server "imagecontextruntime" as configured in shixinnt/codex-image-context-runtime. Runs ./mcp/server.mjs with node.
memi
Memi is the design layer for agentic AI. Runs locally from the @memi-design/cli npm package.
claude-code-docs
MCP server "claude-code-docs", hosted remotely at code.claude.com, as configured in SepineTam/mcp-for-stata.
treework
MCP server "treework" as configured in Johnny-xuan/TreeWork. Launched with bash ./scripts/start-mcp.sh.
woven
MCP server "woven" as configured in Ducksss/LifeHack-2026. Runs ./node_modules/tsx/dist/cli.mjs with node. Needs 2 environment variables to run.
omnimodal-capture-page
MCP server "omnimodal-capture-page" as configured in good-boy4069/Deepseek-omnimodal. Runs locally from the . Python package.