Who it is forA maintainer whose repo receives pull requests from Codex, Claude Code or Copilot and who wants routine problems caught before human review.
The problemAgent-written PRs often arrive with leftover TODO comments, hardcoded keys, WIP commit subjects and failing CI, which wastes reviewer time.
The outcomeAgent PRs get annotated findings and a summary comment automatically, and the Codex Guard status check can block merges once you turn on enforcement.
What you need first
- A GitHub repository with Actions enabled and permission to add a workflow file
- Node.js with npx available on your machine
- A Git working copy of the repository (the init command runs from its root)
- Permission to change branch protection settings if you want the check to block merges
Steps
- Run
npx --yes codex-guard initfrom the root of your Git repository. - Run
git add .github/workflows/codex-guard.yml. - Run
git commit -m "ci: add Codex Guard"and push the branch. - Open a test pull request from a codex/ branch and check the Codex Guard report. (inferred, check the README)
- Set
preset: 'balanced'in the workflow, then add Codex Guard under Settings, Branches, Require status checks.
Prompt for your agent
In the repository Akimiya-z/codex-guard style Git repo at <repo-path>, run `npx --yes codex-guard init` and then add and commit .github/workflows/codex-guard.yml. Expected output: the workflow file exists and is staged. Verify that the file contains `uses: Akimiya-z/codex-guard@v1`.
Caveat. The installer starts in observe mode, so findings are reported but do not fail the workflow until you choose a stronger preset.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for Akimiya-z/codex-guard and "Gate AI-generated PRs before they merge to main"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer