Codex Knowledge Base
The Axios Supply Chain Attack: How a North Korean Compromise Reached Codex CLI's macOS Signing Pipeline
On March 31, 2026, a North Korean threat actor compromised Axios — the JavaScript HTTP client with over 70 million weekly npm downloads.
What the ETH Zurich Paper Gets Wrong (and Right) About AGENTS.md
In February 2026, researchers at ETH Zurich published a paper that sent shockwaves through the AI-assisted development community: Evaluating AGENTS.md.
Testing Codex CLI Skills: The Official Eval Pipeline with codex exec, JSONL Traces, and Skillgrade
Skills are becoming the primary unit of reusable workflow in Codex CLI. But a skill without evaluation is a guess — you have no idea whether a SKILL.md.
MCP Security in Codex CLI: CVE Lessons, Config Hardening, and Enterprise Trust Boundaries
The Model Context Protocol has become the connective tissue of agentic coding — and its attack surface has grown accordingly. Between January and February.
Docker Sandboxes for Codex CLI: MicroVM Isolation, the sbx CLI, and When to Use External Sandboxing
Codex CLI ships with one of the strongest built-in sandboxes in the AI coding agent space — Landlock plus seccomp on Linux, Seatbelt on macOS, restricted.
Codex CLI v0.121: Marketplace CLI, Agent Identity, and the Road to Plugin Distribution
The v0.121.0-alpha.2 pre-release, tagged on 11 April 2026, is the most plugin-and-marketplace-focused Codex CLI release to date. Whilst v0.119 and v0.120.
Codex CLI and Terraform: Agent Skills, MCP Servers, and Infrastructure-as-Code Workflows
Infrastructure as Code is one of the highest-stakes domains for AI-assisted development. A hallucinated resource argument in a Terraform plan can provision.
Codex CLI for Technical Debt Reduction: Automated Refactoring, Dead Code Detection, and Dependency Upgrades
Technical debt accumulates silently — unused imports, deprecated API calls, dead functions that nobody dares delete.
The Codex CLI Notification Pipeline: OSC 9, Notify Hooks, and Never Missing an Agent Event
Agentic coding sessions routinely run for minutes — sometimes hours. You fire off a complex refactoring task, switch to a browser tab, and fifteen minutes.
Dynamic Session Control in Codex CLI: Mid-Session Switching of Models, Permissions, and Workflow Modes
A Codex CLI session is not a static environment. Every slash command that adjusts the model, the approval policy, the reasoning effort, or the workflow mode.