codex-workflows

Why this score

Popularity score: 63/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit 16524bea870a, with Cisco's open-source skill-scanner.

What its code does:

• Runs shell commands Common for dev tools. Read the commands it runs.bin/codex-workflows.js:13, runner/bin/fleet.js:25, runner/bin/run-workflow.js:14 and 6 more
• Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.runner/src/codexVersion.js:15, runner/src/runModel.js:89, runner/src/runWorkflow.js:45 and 1 more

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Nothing from another maker does quite the same job yet.