feat(codex): allowlist the computer skill's codex exec command

[jeffh]

Summary

• Add allowed-tools: Bash(codex exec --enable computer_use --dangerously-bypass-approvals-and-sandbox *) to the codex:computer skill frontmatter so its invocation is pre-approved.
• Reorder the documented codex exec flags: the three fixed flags first, then -m / -c model_reasoning_effort / -C.
• Document why the order matters — permission allowlists match on the command prefix, so anything user-configurable has to come after the fixed flags.

Test plan

• Run /codex:computer and confirm the codex exec call matches the allowlist and does not trigger a permission prompt.

---

Note

Medium Risk
Pre-approves Bash runs that bypass sandbox and approvals for Computer Use; scope is limited to the documented prefix but still grants autonomous UI control without per-action confirmation.

Overview
The codex:computer skill now declares an allowed-tools entry that pre-approves Bash(codex exec --enable computer_use --dangerously-bypass-approvals-and-sandbox *), so invocations matching that prefix should skip extra permission prompts.

The documented codex exec example is reordered: --enable computer_use, --dangerously-bypass-approvals-and-sandbox, and --skip-git-repo-check come first, then -m, -c model_reasoning_effort, and -C. New text explains that allowlists match on the command prefix, so user-configurable flags must stay after the fixed ones for the allowlist to still match.

^{Reviewed by Cursor Bugbot for commit 554a363. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Approved. Cursor Bugbot completed successfully with no findings that need human review, so no reviewers were assigned.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}