Menu

#840 by GitHub stars

openqodex/openqodex

Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.

Claude CodeCodexEngineering

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

plugins/claude-code/skills/openqodex/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Instructions only → After Instructions only

6d879d65de94 → 9227da68eba6

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → 6d879d65de94

No earlier version was observed for comparison.

Compare on GitHub

plugins/codex/skills/openqodex/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Instructions only → After Instructions only

6d879d65de94 → 9227da68eba6

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → 6d879d65de94

No earlier version was observed for comparison.

Compare on GitHub

skills/openqodex/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Instructions only → After Instructions only

6d879d65de94 → 9227da68eba6

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → 6d879d65de94

No earlier version was observed for comparison.

Compare on GitHub

View on GitHubAdd to my skills

Verified commit 9227da68eba65fa52c1efe71b0acc2818324b7e7

git clone --filter=blob:none --no-checkout https://github.com/openqodex/openqodex.git .hotskills/openqodex-openqodex && git -C .hotskills/openqodex-openqodex checkout --detach 9227da68eba65fa52c1efe71b0acc2818324b7e7 # Copy each selected skill directory from .hotskills/openqodex-openqodex into .claude/skills/<skill-name>/
git clone --filter=blob:none --no-checkout https://github.com/openqodex/openqodex.git .hotskills/openqodex-openqodex && git -C .hotskills/openqodex-openqodex checkout --detach 9227da68eba65fa52c1efe71b0acc2818324b7e7 # Copy each selected skill directory from .hotskills/openqodex-openqodex into .agents/skills/<skill-name>/
1.1kGitHub stars
-15stars in 7 days
3skills in this repository
1.1kcommits in 30 days

Heat

1.3
  • Star growth, last 7 daysAhead of 1% of tracked repositories
  • Star growth, last 24 hoursAhead of 0% of tracked repositories
  • Rank movement, last 7 daysAhead of 3% of tracked repositories
  • Commits, last 30 daysAhead of 99% of tracked repositories
  • Accounts asking about it through MCP, last 7 daysNot available
  • Hot votes this weekAhead of 0% of tracked repositories

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Sep 27, 2026Nov 6, 20261,170

Individual skills in this repository

How it works

openqodex

When your agent uses it

Code review for the current change, before it is pushed. One command runs the security, secret, dependency and lint scanners that fit the changed files, a separate reviewer that checks every scanner finding and is given every changed line, and prints a short receipt with the path of the full report. Use before every git push, when asked for a code review, a security scan, or to review changes, a diff or a pull request, and when a push was blocked or warned by OpenQodex.

What it loads into context

Frontmatter

110 tokens

Always available to the agent

SKILL.md

2,688 tokens

When the skill is activated

Reference documents

0 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

  1. When to run
  2. Who reviews
  3. Procedure
  4. Reviewing a branch or a pull request
  5. Rules
  6. Reading the report
  7. Inside a sandbox
  8. More

Files

  • ../../../../.claude-plugin/marketplace.jsonasset410 bytes
  • ../../../../.claude-plugin/marketplace.jsonasset410 bytes
  • ../../../../packages/cli/templates/codex/hooks.jsonasset302 bytes
  • ../../.claude-plugin/plugin.jsonasset1,224 bytes
  • ../../assets/avatar-1024.pngasset13,205 bytes
  • ../../hooks/hooks.jsonasset271 bytes
  • SKILL.mdcore10,905 bytes
Read SKILL.md

# OpenQodex: review the change before it is pushed

OpenQodex reviews a change in one command. It takes a frozen copy of the change, runs the deterministic scanners that fit the changed files (gitleaks, semgrep, bandit, hadolint, shellcheck, actionlint, osv-scanner and others), keeps what they report on changed lines, and starts its own reviewer: a separate Claude Code or Codex process that reads only that copy. The reviewer checks every scanner finding, is given every changed line and answers in a fixed shape; OpenQodex checks the answer with scripts and prints one report. No key and no account are needed beyond the developer's Claude Code or Codex login. The code goes to the model that login uses. The reviewer can also search the web and open web pages unless `reviewer_web: off` is set in `~/.openqodex/config.yaml`. Four scanners go online, and none sends code. semgrep downloads its rule packs from the Semgrep registry on each run. When the change touches a dependency file, osv-scanner sends the names and versions of the dependencies to osv.dev. kubeconform downloads Kubernetes schemas. cargo-deny downloads the RustSec advisory database. `--offline` skips semgrep, osv-scanner, kubeconform and cargo-deny.

## When to run

- Before any `git push`.
- When the developer asks you to review their changes.
- When a push was blocked or warned by the OpenQodex hook.
- After fixing findings, to check the change again.

## Who reviews

OpenQodex starts its own reviewer process for every review, with no memory of this session. You do not start a subagent for it and you do not review the change yourself: run the command and show what it prints.
View the complete source on GitHub

Skills included

  • openqodex
  • openqodex
  • openqodex

Repository facts

License
Apache-2.0
Created
Oct 2, 2026
Last pushed
Nov 5, 2026
Forks
78
Open issues
76
Project activity
Active

Rank over the last 12 weeks

Now #840 · best #786 · up 139 in 30 days

  1. #816 on Nov 1
  2. #806 on Nov 2
  3. #803 on Nov 3
  4. #786 on Nov 4
  5. #826 on Nov 5
  6. #840 since Nov 6
28 earlier periods
  1. #912 on Sep 27
  2. #897 on Oct 2
  3. #912 on Oct 4
  4. #931 on Oct 5
  5. #919 on Oct 6
  6. #947 on Oct 7
  7. #979 on Oct 8
  8. #939 on Oct 9
  9. #908 on Oct 10
  10. #909 on Oct 11
  11. #922 on Oct 12
  12. #915 on Oct 13
  13. #902 on Oct 14
  14. #882 on Oct 15
  15. #873 on Oct 16
  16. #847 on Oct 17
  17. #824 on Oct 18
  18. #863 on Oct 19
  19. #875 on Oct 20
  20. #879 on Oct 21
  21. #848 on Oct 22
  22. #853 on Oct 23
  23. #807 on Oct 24
  24. #990 on Oct 25
  25. #840 on Oct 28
  26. #836 on Oct 29
  27. #822 on Oct 30
  28. #818 on Oct 31

Before you install

Instructions only

Automated signals, not a guarantee

Checked Nov 6, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 3 notes
  • .claude-plugin/marketplace.json:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • .claude-plugin/marketplace.json:1 Plugin-wide analysis incomplete; see repository notes
  • .claude-plugin/marketplace.json:1 Plugin-wide analysis incomplete; see repository notes
  • No broad tool permissions
  • No dangerous shell commands
  • No hidden or obfuscated text
  • No instruction overrides
  • No executable scripts
  • No access to secrets
  • No requests to vote in Hot
Show all 9 signals by file

plugins/claude-code/.claude-plugin/plugin.json

  • Network accessline 6
    "author": {     "name": "Qodex",     "url": "https://qodex.ai"
  • Network accessline 7
    "name": "Qodex",     "url": "https://qodex.ai"   },
  • Network accessline 8
    "url": "https://qodex.ai"
  • Network accessline 9
    },   "homepage": "https://qodex.ai/openqodex",   "repository": "https://github.com/openqodex/openqodex",
  • Network accessline 10
    "homepage": "https://qodex.ai/openqodex",
  • Network accessline 11
    "repository": "https://github.com/openqodex/openqodex",
  • Network accessline 24
    ],   "icon": "./assets/avatar-1024.png",   "privacyPolicyUrl": "https://github.com/openqodex/openqodex/blob/main/docs/privacy.md"
  • Network accessline 25
    "icon": "./assets/avatar-1024.png",   "privacyPolicyUrl": "https://github.com/openqodex/openqodex/blob/main/docs/privacy.md" }
  • Network accessline 26
    "privacyPolicyUrl": "https://github.com/openqodex/openqodex/blob/main/docs/privacy.md"

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

No combined signals at this commit.

Works with

Agent compatibility, from the files in this repository
AgentStatusEvidenceInstall to
Claude CodeNativeManifest .claude-plugin/marketplace.json.claude/skills/<skill-name>/
CodexNativeManifest AGENTS.md.agents/skills/<skill-name>/
CursorCompatibleStandard SKILL.md plugins/claude-code/skills/openqodex/SKILL.md.cursor/skills/<skill-name>/
Gemini CLICompatibleStandard SKILL.md plugins/claude-code/skills/openqodex/SKILL.md.gemini/skills/<skill-name>/
GitHub CopilotCompatibleStandard SKILL.md plugins/claude-code/skills/openqodex/SKILL.md.github/skills/<skill-name>/
OpenCodeCompatibleStandard SKILL.md plugins/claude-code/skills/openqodex/SKILL.md.opencode/skills/<skill-name>/
  • Native The repository ships a manifest, folder or frontmatter field for this agent.
  • Compatible A standard SKILL.md that this agent can read.
  • Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

You might also use

Romandredan/1c-quality-gate

Контроль качества 1С-разработки для Claude Code: стандарты, принципы ООП и паттерны, XML метаданных, блокирующие гейты и проверяемый след прогона · Claude Code plugin for 1C:Enter…

49GitHub stars

Maksim-Burtsev/punchcard

Architecture-level code review for any coding agent — Claude Code, Codex, Cursor, Gemini CLI and 100+ more. One verdict, every blocker demonstrated by running the code.

2GitHub stars

google/elephant-goldfish-model

Open-source skills for designing and reviewing software with AI agents

13.1kGitHub stars

NoobyGains/godmode

Engineering discipline for AI coding agents: question the request, verify against current docs, plan, build test-first on the cheapest capable model, review with a second model fa…

118GitHub stars

AsyrafHussin/agent-skills

Skills for AI coding agents — Laravel, PHP, React, TypeScript, testing, security, and code quality.

102GitHub stars

bjcoombs/ai-native-toolkit

Claude Code plugin & Agent Skills for AI-native development: codebase readiness scoring (/assess), Six Thinking Hats deliberation (/huddle), AI-slop removal (/deslop), skill harde…

32GitHub stars

Add this badge to your README

It updates every night and links to this page.

openqodex/openqodex: #840 on hotskills, 1.1k stars

[![openqodex/openqodex on hotskills](https://hotskills.dev/badge/openqodex-openqodex.svg)](https://hotskills.dev/skill/openqodex-openqodex/)