majiayu000 Diff Review via Codex
Have Codex review git changes for a second perspective on code quality.
CRITICAL: Instruct Codex
Every prompt sent to Codex MUST include these instructions:
"You are running non-interactively as part of a script. Do not ask questions or wait for input. Do not make any changes. Provide your complete feedback immediately."
Codex is a consultant. Claude Code handles all file modifications.
Quick Start (MCP)
If the codex MCP tool is available, first save the diff then review:
git diff --cached > codex-review.diff
mcp__plugin_codex_cli__codex({
"prompt": "You are running non-interactively as part of a script. Do not ask questions or wait for input. Do not make any changes. Provide your complete feedback immediately.\n\nReview the code changes at codex-review.diff for bugs, security issues, and style problems.",
"sandbox": "read-only",
"model": "gpt-5.2"
})
rm codex-review.diff
Fallback (Bash)
If MCP is unavailable, use shell commands:
git diff --cached > codex-review.diff
codex exec "You are running non-interactively as part of a script. Do not ask questions or wait for input. Do not make any changes. Provide your complete feedback immediately.
Review the code changes at codex-review.diff for issues." --sandbox read-only -m gpt-5.2-codex 2>&1
rm codex-review.diff
Or use the built-in review command:
codex review --uncommitted 2>&1
Note: The review command is scoped to diffs and doesn't support --sandbox.
Patterns
Staged changes:
mcp__plugin_codex_cli__codex({
"prompt": "You are running non-interactively as part of a script. Do not ask questions or wait for input. Do not make any changes. Provide your complete feedback immediately.\n\nReview codex-review.diff for:\n1. Bugs or logic errors\n2. Security vulnerabilities\n3. Style inconsistencies\n4. Missing error handling",
"sandbox": "read-only",
"model": "gpt-5.2"
})
Security focus:
mcp__plugin_codex_cli__codex({
"prompt": "You are running non-interactively as part of a script. Do not ask questions or wait for input. Do not make any changes. Provide your complete feedback immediately.\n\nSecurity review of codex-review.diff. Check for:\n- XSS vulnerabilities\n- SQL/command injection\n- Sensitive data exposure\n- Authentication/authorization issues",
"sandbox": "read-only",
"model": "gpt-5.2"
})
Performance focus:
mcp__plugin_codex_cli__codex({
"prompt": "You are running non-interactively as part of a script. Do not ask questions or wait for input. Do not make any changes. Provide your complete feedback immediately.\n\nPerformance review of codex-review.diff. Check for:\n- Inefficient algorithms\n- N+1 queries\n- Memory leaks\n- Blocking operations",
"sandbox": "read-only",
"model": "gpt-5.2"
})
Performance
- MCP diff review: ~5-30 seconds
- MCP with source context: ~1-2 minutes
- Bash fallback: ~2-3 minutes
Notes
- Always use
sandbox: "read-only"to prevent file modifications - NEVER use
sandbox: "danger-full-access"- this is forbidden - Tool name may vary by installation. Check available tools for exact name.
- Save diff to project root before review (Codex can read project files)
- Clean up diff file after review
- MCP is preferred; Bash fallback requires
dangerouslyDisableSandbox: true - See
references/setup.mdfor troubleshooting