SkillFoxx

Type a name, a task or a service

Match with Foxx AI

Codex ChatGPT Bridge skill

A Codex skill hands planning and review to ChatGPT over a local MCP bridge and keeps execution and checks in Codex

  • 292 ★ on the repository
  • Last commit
  • MIT
Skill

Broad access

Why this level

  • After authorization ChatGPT gets file read and write and command execution on the user's machine
  • While the bridge is on, its public address remains an external attack surface
  • The Cloudflare token and bridge profile are stored locally and contain paths and tunnel addresses
All reasons and checks

zhenyu98/codex-chatgpt-bridgeAuthor:Zhenyu98

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add skills/codex-chatgpt-bridge

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • After authorization ChatGPT gets file read and write and command execution on the user's machine
  • While the bridge is on, its public address remains an external attack surface
  • The Cloudflare token and bridge profile are stored locally and contain paths and tunnel addresses

This is third-party code. Review the repository files before installing.

What it does

Codex ChatGPT Bridge is a Codex skill for Windows that splits work between Codex and ChatGPT. Planning, code reading and review go to ChatGPT, while edits, tests, builds and git stay with Codex. The MCP bridge itself is not part of the repository: it is the external DevSpace project (`@waishnav/devspace` on npm), which after OAuth authorization opens a chosen project folder to ChatGPT. The skill teaches the agent when to hand a task to ChatGPT and adds bridge control scripts. There are three modes. In NORMAL, ChatGPT acts as a strong reviewer. In TOKEN_SAVING, Codex mostly orchestrates and reading and review go to ChatGPT. In CHATGPT_ARCHITECT, ChatGPT writes the spec, splits the work and reviews the result while Codex executes one small task at a time. ChatGPT's rights are described as levels from L0 (reasoning only) to L5 (irreversible external actions), and L4 and L5 need human approval. The `bridge_controller.ps1` script turns the bridge on, off and restarts it, and verifies that it answers. An optional Windows scheduled task brings the bridge up from outside when the agent can no longer reach it. To keep the ChatGPT app URL stable across restarts, the scripts put a fixed Worker in front of a Cloudflare tunnel.

Who it is for. Codex users on Windows who bring ChatGPT in as a second participant to cut Codex token use and get an independent review of large tasks.

Good fit when

  • Codex quota goes into planning and re-reading code, and part of that work can move to ChatGPT
  • A large change needs an independent view: ChatGPT reads a narrow project folder and Codex verifies its advice locally
  • A long build runs in CHATGPT_ARCHITECT mode: ChatGPT keeps the spec and breakdown, Codex executes tasks one by one
  • A quick tunnel address changes on every restart and the ChatGPT app has to be reconfigured each time
  • The bridge hung and the agent lost access to it: the scheduled Reboot task restarts it from outside

Not a fit when

  • The machine is not Windows: the scripts are PowerShell and the installer puts the skill in `%USERPROFILE%\.codex\skills`
  • You cannot open the project to an external service: after authorization the bridge gives ChatGPT file read and write and command execution on your machine
  • The working folder contains secrets: levels L0–L5 stay a policy for ChatGPT, and the bridge does not enforce them
  • Tasks are small and quick: every handoff to ChatGPT crosses the bridge with a noticeable delay

Example request

Hand the authentication module review to ChatGPT at the L1_READ_ONLY level and make the edits and run the tests yourself once the comments arrive.

Limitations

  • The scripts are PowerShell for Windows 10 and 11.
  • The bridge is a separate project, DevSpace, installed through npm with `npm install -g @waishnav/devspace`. The repository does not fork or patch it.
  • Levels L0–L5 are a policy Codex passes to ChatGPT, not a bridge restriction: `run_shell` is not confined to the root folder, so an authorized app effectively runs code as your user.
  • A stable link needs a Cloudflare account. A minimum-scope token is stored in Windows DPAPI.

How to disable. `bridge_controller.ps1 -Action Off` closes the bridge and records an intentional shutdown. To revoke issued OAuth tokens and re-key the owner password, run `local_bridge.ps1 -Action Rotate`. Remove the skill itself from `%USERPROFILE%\.codex\skills\codex-chatgpt-bridge`.

FAQ

How do I install Codex ChatGPT Bridge?

Clone the repository and run `powershell -ExecutionPolicy Bypass -File .\install.ps1` from its folder: the skill is copied to `%USERPROFILE%\.codex\skills\codex-chatgpt-bridge`. Then restart Codex and run the Doctor action of `local_bridge.ps1`, which reports whether the DevSpace CLI is present.

What does ChatGPT get after authorization?

File read and write and command execution on your machine: `run_shell` is not confined to the root folder. The L0–L5 split stays an agreement, so turn the bridge off when idle and keep its root narrow and free of secrets.

What is the Reboot mode for?

Reboot restarts the bridge and refreshes the address behind a stable Worker, so the ChatGPT app needs no reconfiguration after a restart. It runs as one verified transaction.

What access levels does ChatGPT get?

L0 to L5: L0 is reasoning with no tools, L1 reads in one folder, L2 runs safe diagnostic commands, L3 writes in the workspace, L4 does privileged actions and L5 irreversible external ones. L4 and L5 need human approval by default.

Is a Cloudflare account required?

Only for a stable link: the Worker mode needs an account and a token. Without it a Cloudflare quick tunnel with a changing address remains.

Discussion

No questions or reviews yet.

Skills

CodexPro

codexpro

A local MCP server that gives ChatGPT in developer mode tools for reading, searching, editing and checking the repositories you allow

MCP serverBroad access2.1K

Nine skills turn a repository of agent workflows into a validated, deterministically packaged ChatGPT or Codex plugin

SkillExtended access118

Codex Settings skills

Codex CLI Skills & Profiles

A Codex CLI plugin with twelve skills: deep research, pull request review, image generation and session handoff

PluginBroad access248
Needs a VPN

An MCP server that sends tasks to Codex CLI from Claude Code and Cursor: code review via @ refs, a sandbox, patch edits, ideas

MCP serverBroad access176
Official

An MCP server on your machine that lets ChatGPT and Claude edit code, run tests and check Git in a local repository

MCP serverBroad access2.5K

61 small skills for Codex across 13 areas: codebase orientation, tests, migrations, security, CI and pull request review

SkillMinimal access167

README in short

The README explains the split of roles between DevSpace, the skill and the control layer, compares work before and after installation and gives a Windows quick start. Next come routing modes, controller commands, the stable-link scheme through a Worker, a security model section where the author states the trust boundary plainly, and an FAQ.

README badge

Original SKILL.md

---
name: codex-chatgpt-bridge
description: Use when Codex needs to coordinate ChatGPT, Chrome, Cloudflare tunnels, verified bridge Restart/Reboot recovery, or task routing between local code execution and ChatGPT reasoning/review. Handles the bridge controller and scheduled task, start/off/status/doctor/rotate flows, Worker KV refresh, ChatGPT app setup, permission levels, token-saving handoffs, large-context review, visual/PDF review, complex bug routing, and human approval gates.
---

# Codex ChatGPT Bridge

Use this skill as the single entrypoint for coordinating Codex, ChatGPT, a scoped local MCP bridge, Chrome, and optional Cloudflare tunnels.

Core principle:

- Codex is the execution owner.
- ChatGPT is the reasoning and review partner.
- The local bridge is a scoped local access bridge.
- Chrome is the message transport.

Default posture:

- Codex owns source edits, tests, builds, git operations, local verification, and final reporting.
- ChatGPT owns high-depth reasoning, broad review, visual/PDF/screenshot analysis, and independent go/no-go critique.
- The local bridge defaults to one narrow workspace, read-only access, and no secrets.
- ChatGPT recommendations are advice until Codex verifies them locally.

## Choose The Mode

Use bridge operations when the user asks to start, stop, inspect, repair, or configure ChatGPT access to a local project through the bridge.

Read `references/bridge-operations.md` for:

- `local_bridge.ps1` start, stop, status, and doctor flows
- Cloudflare Quick Tunnel and Worker-proxy setup
- ChatGPT app/OAuth setup through Chrome
- on/off semantics that preserve ChatGPT configuration without leaving the workspace reachable
- service lifecycle and common failure handling

Use task routing when the user asks whether Codex, ChatGPT, subagents, or the local bridge should handle a task.

Read `references/router-policy.md` for:

- `NORMAL` and `TOKEN_SAVING` operating modes
- route classes
- permission levels
- ChatGPT Task Packet format
- ChatGPT Action Manifest format
- Codex ingestion rules

Report a problem

Foxx AICodex ChatGPT Bridge
Foxx AI

I am Foxx AI and I have already vetted this tool. Ask about install, setup or anything else, and I will keep it simple.