跳到主要内容
Plugin

codex-guard

Akimiya-z/codex-guard

在 DeepSeek Harness 内做提交前的 Pull Request 卫生检查:扫描当前改动中的 TODO 残留、硬编码密钥与非规范提交信息。

形态
Plugin 插件
安装
通过 profile 安装
需要密钥
是
近月下载
—
最近推送
15 天前更新

项目说明

From README

🤖 Codex Guard Docs site: An automatic quality gate for AI-generated pull requests.Stop TODO leftovers, leaked secrets, sloppy commits and red CI from reaching main — with zero review bandwidth spent on the obvious stuff.

Works with OpenAI Codex (cloud & CLI), Claude Code , Copilot , and any other agent that opens PRs against your repo.🐕 Dogfooding: this repo gates its own AI-generated PRs.See a real failing example on PR 6 and the workflow behind it in .github/workflows/codex-guard.yml .

--- Why AI coding agents are great at writing code and terrible at cleaning up after themselves.

In practice, agent-written PRs tend to arrive with the same handful of problems: - // TODO: handle this comments that were never meant to stay - Hardcoded API keys and connection strings copied from a chat transcript - Commit trails like WIP , fix stuff , more changes — squashed versions of a messy sessi

Original description

Quality gate for AI/Codex-generated pull requests: blocks TODO leftovers, leaked secrets, sloppy commits and red CI before they reach main.

安装方式

通过 profile 安装 · 需要额外配置密钥

README 解析
shell
npx --yes codex-guard init
shell
npx --yes codex-guard doctor
shell
npx --yes codex-guard doctor --json # machine-readable output

安全能力

静态扫描源码得到的权限画像 —— 回答的是「它要动什么」,而不是「它好不好」

  • 执行命令
  • 读取文件
  • 读取环境变量

未发现已知红线(明文传输、安装期执行代码、凭据外传等)。

能力与红线来自 awesome-dsh-plugin 的静态扫描结果(CC0 公有领域),本站未逐行复核源码; 它只覆盖能被静态识别的模式,不等于安全审计结论。

为什么是这个分数

近 15 天内有提交;README 给出了可直接复制的安装命令;运行前需要准备 API Key 或环境变量。

维护活跃
86
实用度
100
生态热度
47
上手便捷
74
信号质量
100
数据置信度
100%
评分怎么算