Install Any of 20 Codex Workflow Skills with One npx Command

Codex can run skills, but getting a curated set of them usually means hunting repos one by one. The 131-star jMerta/codex-skills catalog fixes the packaging: 20 workflow skills, browsable on a catalog site, installable with a single npx command.

Why This Skill Matters

The repo describes itself as "reusable engineering, product, documentation, review, and operations workflows for Codex". The catalog's skills.json (updated August 17, 2026) breaks the 20 skills into five categories: development (9), review (5), documentation (3), product (2), and operations (1).

The development set covers the Git-and-CI grind — branch-cleaner for listing, auditing, and pruning local or remote branches; bug-triage for reported bugs, regressions, and failing builds; ci-fix for failing GitHub Actions checks on a pull request; commit-work for staging and splitting work into logical commits; create-pr; dependency-upgrader for Java, Kotlin, Gradle, Maven, Node, or TypeScript dependency bumps; focused-tdd; rebase-assistant; and regex-builder. The review category is five pre-PR diff reviewers scoped by surface — architecture-crossing changes, backend controllers and APIs, frontend API clients and authentication, security and privacy, and test coverage. Documentation contributes docs-sync, pr-visual-explainer (an HTML walkthrough of a pull request), and release-notes; product contributes manage-product-ideas and write-ui-copy; operations contributes vps-checkup, a read-only health and security checkup.

The descriptions follow a trigger-first pattern — "Use when the user…" — which is what lets Codex pick the right skill from a described request rather than an explicit call.

Installation

The CLI requires Node.js 18 or newer. List the catalog from the terminal, then install one skill for the current user:

npx codex-skills list
npx codex-skills install bug-triage

Install every published skill at once, or install into a repository instead:

# install every published skill
npx codex-skills install-all

# install one skill in a repository
npx codex-skills install bug-triage --dir .agents/skills

Run npx codex-skills help for the full command reference. You can also browse the catalog with descriptions and install instructions at the project's GitHub Pages site.

Real Workflow: Install and Invoke a Skill

Codex discovers skills installed in ~/.agents/skills/ and repository-local .agents/skills/ directories. Invoke a skill explicitly with $skill-name, or describe a request that matches its purpose and let Codex pick it — for example, reporting a failing build in a repository where bug-triage is installed.

Codex normally detects installed changes automatically. Restart it if a new or updated skill does not appear.

Real Workflow: Standardize a Repository's Workflow

Installing into the repository with --dir .agents/skills puts the skill definitions in the project itself, so a clone carries the workflows the project expects — the review skills in particular fit as pre-PR gates: run review-backend-change over a diff before opening the pull request, then review-security-privacy for anything touching auth.

Tips

• Start with the five review skills — they share a shape (pre-PR, diff-scoped), so one installs-and-tries cleanly and the rest follow the same pattern.
• npx codex-skills list shows names and descriptions without installing anything — cheaper than the web catalog when you already have a terminal open.
• The catalog page also documents a global AGENTS.MD ledger and third-party scripts — worth a read before you script around the catalog.
• The repo's contributing checks (unit tests, skill validation, invisible-character checks, CLI audit) tell you the catalog entries are machine-validated, which is more than most skill lists can say.

When Not to Use This

The catalog targets Codex — the documented discovery directories and invocation style are Codex's, so Claude Code and other runtimes are outside what the README covers. Everything is engineering-workflow shaped; if you need media, design, or domain skills, this is not that catalog. And the CLI needs Node.js 18+, which rules out locked-down machines without a current runtime.

See the leaderboard for more skills.