Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/sd0xdev/sd0x-harness/codex-review-fastnpx skills add sd0xdev/sd0x-harness --skill codex-review-fastgit clone --depth 1 https://github.com/sd0xdev/sd0x-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sd0xdev/sd0x-harness/codex-review-fast)<a href="https://agentmods.dev/skills/sd0xdev/sd0x-harness/codex-review-fast"><img src="https://agentmods.dev/badge/skills/sd0xdev/sd0x-harness/codex-review-fast.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00027 | $0.00318 |
| Opus 5 | $0.00014 | $0.00159 |
| Sonnet 5 | $0.00005 | $0.00064 |
| Haiku 4.5 | $0.00003 | $0.00032 |
Grade A, and why
codex-review-fast scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Codex Review Fast
Thin entry-point skill — routes to the parent skill for full workflow.
Parent Skill
This is the Fast variant of codex-code-review. Full workflow, prompt templates, and review logic are defined in the parent skill.
See @skills/codex-code-review/SKILL.md
Variant
| Property | Value |
|---|---|
| Scope | Diff only |
| Pre-checks | None (no lint/build) |
| Prompt template | @skills/codex-code-review/references/codex-prompt-fast.md |
| Reviewers | Codex alone — no --dual, no secondary. For two reviewers use /codex-review-branch --dual |
| Tier | Inherits the session tier (standard by default). Findings below the tier's blocking severity are logged [NIT_DEFERRED], not fixed |
Trigger
- Keywords: quick review, fast review, diff review, codex-review-fast
When NOT to Use
- Full review with lint + build (use
/codex-review) - Branch-level review (use
/codex-review-branch) - Document review (use
/codex-review-doc) - Security audit (use
/codex-security)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 3ef4e7837710
- yesterday Changed 2ae590c276f1
- 6d ago First seen · 37 lines · 27 tokens per session scan A f2d613d647a3
codex-review-fast is a skill published in the GitHub repository sd0xdev/sd0x-harness (188 stars, last pushed today), licensed MIT. It adds 27 tokens to every session and 318 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
code-review
Two-mode skill: (1) adversarial review — spec compliance + code quality + security, confidence-scored findings with file:line evidence; (2) receiving review — verify-before- agreeing discipline for acting on external/human review feedback.
codebase-hygiene
Two-mode skill: (1) find semantic duplicates — functions doing the same thing under different names, invisible to copy-paste detectors; (2) deepen shallow modules — thin wrappers and pass-through layers that spread complexity. Advisory and read-only; changes route through BUILD with full gates.
evaluator-review-contract
Internal Auto-Harness evaluator skill for sprint contract review before implementation. Use only inside the Evaluator subagent during review mode.
comet-verify
Comet Phase 4: Verify and Close. Invoke with /comet-verify. Verify implementation matches design, handle development branch.
comet-review
手动审查当前 Comet change 的实现差异，只报告正确性、安全和边界问题，不推进工作流。.
comet-github-pr-review
以只读、证据优先的方式审阅 Comet 社区 PR，包括最新 diff、关联 Issue、review thread 状态、可合并性和 CI。用户要求审阅 PR、判断评论是否仍然有效，或准备简洁的合并阻塞评论时使用。.