Complete procedures with a way back.

Turn a proven workflow into a narrowly triggered SKILL.md, package it in a versioned Codex plugin, add fail-closed policy hooks and least-privilege MCP dependencies, test activation and denial paths, distribute through a controlled marketplace, and revoke safely.

Use Codex to investigate an unfamiliar repository, freeze scope and acceptance criteria, implement a focused change, run proportional tests, review the complete diff, commit intentionally, and recover without erasing unrelated work.

Install and authenticate Codex CLI, establish project trust, write layered AGENTS.md instructions, create read-only and workspace-write profiles, constrain network access and approvals, and verify the effective configuration before real changes.

Combine codex exec, the TypeScript Codex SDK, and openai/codex-action@v1 into bounded maintenance workflows with read-only defaults, scoped credentials, structured artifacts, explicit write jobs, human review gates, and resumable failure handling.

Evaluate an MCP server as executable supply chain and delegated authority, pin its identity, constrain a local runtime or verify a remote trust endpoint, configure a positive tool allowlist, review OAuth scopes, observe real effects, test prompt injection, set per-tool approvals and rehearse complete removal.