007
無料Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
WHAT: Generate Codex-authored HTML insights from local Codex sessions and telemetry. WHEN: Use when the user asks for Codex usage analytics, workflow patterns, session summaries, prompting help, or recommendations for improving how they use Codex.
インストールする前に、エージェントに与えられる指示の中身を確認できます。
Generate a local Codex usage report where Codex is the only narrative insight writer. The Python runner collects evidence and renders HTML; Codex writes the analysis JSON.
~/.codex/sessions/.~/.agents/otel-collector/ when available.--days N (default: 7).codex unless using --prepare-only.${INSIGHT_REPORT_USAGE_DIR:-$HOME/.codex/usage-data}/insight-evidence.json${INSIGHT_REPORT_USAGE_DIR:-$HOME/.codex/usage-data}/INSIGHT_PROMPT.md${INSIGHT_REPORT_USAGE_DIR:-$HOME/.codex/usage-data}/insights.generated.jsonfile://${INSIGHT_REPORT_USAGE_DIR:-$HOME/.codex/usage-data}/report.htmlREPORT_URL= in the Codex in-app browser when available.The report includes:
python3 Infrastructure/references/deferred-skill-context/agent-ops-insight-report/scripts/run_insight_report.py --days 7
Process:
~/.codex/sessions/.insight-evidence.json.INSIGHT_PROMPT.md.codex exec --sandbox read-only and pass the prompt on stdin.insights.generated.json.report.html from the deterministic metrics and Codex-written insights.REPORT_URL= in the Codex in-app browser.Use --prepare-only when this live Codex session should write the insight JSON manually instead of invoking codex exec:
python3 Infrastructure/references/deferred-skill-context/agent-ops-insight-report/scripts/run_insight_report.py --prepare-only --no-open
Use --render-only after editing or regenerating insights.generated.json:
python3 Infrastructure/references/deferred-skill-context/agent-ops-insight-report/scripts/run_insight_report.py --render-only --no-open
After the HTML report is completed, read the runner output line:
REPORT_URL=file://$HOME/.codex/usage-data/report.html
Then use the Browser plugin's in-app browser workflow to open that URL. Prefer the Codex browser over macOS open when this skill is running inside Codex.
If Browser tooling is unavailable, report the REPORT_URL clearly and leave the file on disk.
Do not claim the browser launch happened until the Codex browser has actually navigated to the REPORT_URL.
Codex must return only valid JSON with these top-level sections:
metadataat_a_glanceproject_areasinteraction_stylewhat_worksfriction_analysisprompting_helpsuggestionson_the_horizonactionable_fixesfun_endingThe writer must:
metadata.limitations.Stop at the first failed gate. Do not continue to report rendering, browser launch, or final summary if evidence generation, prompt writing, Codex JSON generation, JSON validation, or HTML generation fails.
insights.generated.json exists and is valid JSON.REPORT_URL= was opened in the Codex in-app browser, or Browser unavailability was disclosed../bin/ask skills audit Skills/agent-ops/insight-report --level strict --json
No session data found:
No session data found in ~/.codex/sessions/
Run Codex for a few sessions first, then regenerate the report.
Codex CLI unavailable:
Use --prepare-only, then ask the current Codex session to read INSIGHT_PROMPT.md, write insights.generated.json, and rerun with --render-only.
Codex returned invalid JSON:
Open INSIGHT_PROMPT.md, ask Codex to repair the JSON shape, save insights.generated.json, and rerun --render-only.
--prepare-only intentionally does not render HTML; it only writes the evidence bundle and prompt for Codex-authored analysis.$HOME/.codex/usage-data/; do not commit generated reports or prompts to agent-skills.REPORT_URL= is not proof that the Codex in-app browser opened it.codex exec is invoked with --sandbox read-only.| Anti-pattern | Safer behavior |
|---|---|
| Asking another model or local service to write the narrative | Use the Codex writer path only, or stop in --prepare-only for this Codex session to write it |
| Guessing insights when sessions are missing or sparse | State the evidence gap in metadata.limitations and keep claims conservative |
| Passing user-supplied shell commands into the report runner | Use the fixed codex exec --sandbox read-only invocation |
| Repeating secrets, tokens, or private prompt fragments from session logs | Summarize the pattern without exposing sensitive strings |
| Saying the report opened in the Codex browser before navigation succeeds | Report the REPORT_URL and disclose Browser unavailability or failure |
| Turning report suggestions into automatic cleanup commands | Keep recommendations copyable and non-destructive unless the user explicitly asks for follow-up implementation |
Standard weekly review with browser launch:
python3 Infrastructure/references/deferred-skill-context/agent-ops-insight-report/scripts/run_insight_report.py --days 7
After the runner prints REPORT_URL=file://..., open that URL in the Codex in-app browser and mention the local path in the summary.
Prepare artifacts for this Codex conversation to write:
python3 Infrastructure/references/deferred-skill-context/agent-ops-insight-report/scripts/run_insight_report.py --prepare-only --no-open
Render after Codex-written JSON exists:
python3 Infrastructure/references/deferred-skill-context/agent-ops-insight-report/scripts/run_insight_report.py --render-only --no-open
Infrastructure/references/deferred-skill-context/agent-ops-insight-report/scripts/run_insight_report.pyreferences/configuration.mdreferences/codex-writer.mdreferences/report-format.md$HOME/.codex/usage-data/| Skill | When to use |
|---|---|
| [[codex-automation-architect]] | Convert recommendations into Codex automations |
| [[skill-refactor]] | Analyze skill usage and improvement opportunities |
| [[ubiquitous-language]] | Extract terminology Jamie can reuse in future prompts |
Topic map: [[agent-ops]]
まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
日本語の概要は準備中です。原文の説明を表示しています。
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。
Run a health check on an existing project: dependency audit, security scan, test runner detection, CI/CD evaluation, and missing configuration analysis. Maps the three execution gates (pre/in/post) from /10x-bootstrapper to an assessment framework for existing codebases. Reads optional context/foundation/stack-assessment.md from /10x-stack-assess to focus checks on identified gaps. Writes context/foundation/health-check.md with findings, prioritized fixes, and an agent-readiness verdict. Use when the user has an existing project and wants to verify its health before working with an agent. Trigger phrases: "health check", "check my project", "audit my project", "is my project healthy", "sprawdź projekt", "audyt projektu", "health-check", "project health". Use AFTER /10x-stack-assess (brownfield chain), BEFORE agent onboarding (m1-l4).
日本語の概要は準備中です。原文の説明を表示しています。
You MUST use this when building projects end-to-end. Orchestrates all 12 team roles — automatically switches between CTO, architect, PM, engineers, SRE, security, DBA, QA, and EM based on the current phase of work. Starts with brainstorming before any implementation.
日本語の概要は準備中です。原文の説明を表示しています。
Use when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchmarking (JMH) — through a consultative, modular step-by-step approach that only adds what you actually need. This should trigger for requests such as Add Maven plugins in pom.xml; Improve Maven plugins in pom.xml. Part of cursor-rules-java project
日本語の概要は準備中です。原文の説明を表示しています。