com.codexguild由 codexguild.com 发布官方发布者v1.17.0更新于 Oct 29, 2026
What changed in your stack since the model's cutoff, error fixes, and security-scanned skills/MCPs
CodexGuild 的托管 MCP 服务（api.codexguild.com），由 codexguild.com 发布；需要 API 密钥；Streamable HTTP；7 个工具。
暂无 AI 概览：以下信息来自注册中心条目和服务本身。
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/com.codexguild%2Fcodexguild/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"codexguild": {
"type": "http",
"url": "https://api.codexguild.com/v1/mcp",
"headers": {
"Authorization": "Bearer <YOUR_TOKEN>"
}
}
}
}Security-audit the skills installed on THIS machine (~/.claude/skills, Claude plugins, ~/.codex/skills, ~/.agents/skills, ~/.hermes/skills, project skills…). Detects pipe-to-shell, credential exfiltration, hidden unicode, prompt injection, agent-config tampering and safety bypasses. Runs locally — nothing is uploaded.
pathsverboseLint the agent instruction files in this project (AGENTS.md, CLAUDE.md, GEMINI.md, .cursorrules…): size per session, missing build/test commands, README copy, generic advice, secrets, machine-specific paths, prompt-injection and other scanner findings. Runs locally — file contents are not uploaded.
filesSecurity-review the GitHub Actions workflows in this project that run coding agents (claude-code-action, run-gemini-cli, codex, opencode, aider…): triggers outside contributors control (pull_request_target, issue_comment, issues) combined with secrets, issue/PR text interpolated into prompts or shells (prompt injection), unrestricted agent tools, broad permissions, unpinned agent actions. Runs locally — nothing is uploaded.
filesFind deprecated and removed APIs in this project's code for the exact versions it runs (from the lockfiles): e.g. `app.mount` deprecated in hono 4.13, with the replacement and where it is used (file:line). Only package names and versions are sent to CodexGuild; the code is searched locally and never uploaded. codexguild_sync runs this automatically.
cwdPattern-scan this project's OWN code for common vulnerability classes (OWASP/CWE): hardcoded secrets, SQL injection via string concatenation, eval/shell injection, insecure deserialization, weak crypto, SSRF, path traversal, and IDOR-prone lookups — with file:line and a fix for each. Pattern matching, not proof: read a finding before changing code. Runs locally — nothing is uploaded. Run this before finishing a feature/PR that touches routes, queries, auth, serialization or file/network I/O; codexguild_sync also runs it once at session start.
cwdScore how well THIS repository is set up for a coding agent (0–100): instruction file quality and whether it names the build/test commands, test and type-check commands, lockfile, secrets kept out of git, CI, safe agent workflows, CodexGuild hooks — with the fixes worth doing, biggest first. Runs locally — nothing is uploaded.
cwdReview this project's recent agent sessions (Claude Code / OpenClaude transcripts on this machine) for where time was lost: the same error hit repeatedly, retry loops, refused tool calls (with allowlist suggestions), edits that missed, files re-read many times, compactions, sessions that ended with unchecked code, MCP servers that never get used — and what to change. Use it when the user asks how to make the agent work better here. Runs locally — transcripts are not uploaded.
allcwddays已满足适用检查项的 75%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
请声明包含 README 的 GitHub 仓库，或在 OAuth 受保护资源元数据中提供 resource_documentation。
请在仓库或注册中心条目中声明许可证。