菜单
Check native Codex .app.json names, developer-mode app ids, plugin linkage, authentication boundaries, and discovery. Use before bundling, installing, or changing app mappings.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Start here for the nddev-builder toolkit. Indexes the Codex artifact families and the creator, checker, reviewer, and workflow skill that owns each, points at the single reference for schemas and current (Beta, experimental, or under-development) surfaces, and routes the task to the right skill. Use first whenever building, checking, reviewing, or releasing a Codex artifact, or when unsure which builder skill applies.
A guided first run of the nddev-builder toolkit — from zero to a working, checked Codex artifact in ordered steps. Use when new to nddev-builder, onboarding, or unsure which builder skill to start with.
Create or revise a Codex marketplace catalog with valid plugin sources, categories, installation policy, and authentication policy. Use when publishing local or remote plugin collections.
Check a managed Codex requirements.toml layer for supported keys, permission-profile consistency, and a valid lower-layer default. Use before delivering managed /etc/codex or MDM requirements.
Create a managed Codex requirements.toml layer that constrains permission profiles and other admin policy. Use when authoring the /etc/codex or MDM-delivered managed requirements a lower config layer must satisfy.
Install and iterate on a Codex plugin locally in developer mode: the install, reinstall, and cachebuster test loop for a plugin under development, run against an isolated install and never live state. Use when running or iterating on a plugin, its skills, MCP, hooks, or bundled app locally.
| name | codex-app-checker |
| description | Check native Codex .app.json names, developer-mode app ids, plugin linkage, authentication boundaries, and discovery. Use before bundling, installing, or changing app mappings. |
Resolve every ../../scripts and ../../references path relative to this SKILL.md directory, never the caller working directory.
Verify that every app mapping is source-backed, linked, and safe to distribute.
Read ../../references/codex-artifact-contracts.md and locate the plugin-root .app.json.
Run:
python3 ../../scripts/check_codex_artifact.py app .app.json
Check unique app keys, source-backed developer-mode ids, conservative fields, and absence of placeholder values.
Confirm the plugin manifest points to the actual .app.json and do not infer undocumented standalone schema requirements.
Reject tokens, cookies, account identifiers, MCP transport duplication, and machine-local state.
Install in an isolated supported ChatGPT task and exercise the connected app when credentials are available.
Return PASS only when the mapping, linkage, and available runtime checks succeed. Otherwise return FAIL with app key, field, impact, and correction.