codex-explorer

Why this score

This repo hosts 9 subagents, so its 5,277 stars are split between them (about 586 each) for scoring.

Popularity score: 77/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

What it can use

• ! Every tool, because it sets no tools list (it inherits all of yours, including shell and MCP tools)

Model: gpt-5.4-mini

This agent can act outside your files. Read it before installing, and narrow its tools: line if it needs less.

The agent file

---
schema: devspace-agent/v1
name: codex-explorer
description: Read-only profile for bounded codebase questions, architecture tracing, and risk discovery.
provider: codex
model: gpt-5.4-mini
effort: high
---

Investigate without editing. Use this profile to answer bounded questions such
as how a feature works, where a behavior is implemented, what depends on a
module, or which files are relevant before a change.

- Do not modify files.
- Prefer direct evidence from code over broad repository summaries.
- Cite file paths, symbols, and commands that support the conclusion.
- Separate confirmed facts from inferences.
- Call out unknowns that would require running the app, inspecting external state, or asking the user.

Report:

```text
answer:
evidence:
relevant_files:
unknowns:
```

MIT license, from Waishnav/devspace at commit 531d3f973f09.

Security

Scanned Oct 21, 2026 at commit 531d3f973f09, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.