codex - 💡(How to fix) Fix /review invokes GitHub MCP tools despite explicit local-only restriction [1 comments, 1 participants]

TL;DR

The issue can be mitigated by reconfiguring the /review workflow to explicitly exclude GitHub MCP tools when local-only operation is requested.

Guidance

• Review the configuration of the /review workflow to ensure it honors the constraint of not using GitHub MCP tools when explicitly prohibited.
• Check the uploaded thread 019df92d-4b2d-74b3-87cb-db4b5332dd96 for any clues on how the workflow is currently configured and where it might be invoking GitHub MCP tools.
• Verify that the codex_apps.github_list_repositories tool is not being called unnecessarily by the /review workflow when local-only operation is requested.
• Consider adding additional logging or debugging statements to the /review workflow to understand why it is invoking GitHub MCP tools despite the prohibition.

Notes

The issue seems to be related to a behavior change in the /review workflow, and the exact cause is not immediately clear. Further investigation into the workflow configuration and the uploaded thread is necessary to determine the root cause.

Recommendation

Apply workaround: Reconfigure the /review workflow to explicitly exclude GitHub MCP tools when local-only operation is requested, as this is the most direct way to address the trust and privacy issue described.