Security / Code scanning
GitHub Agentic Autofix: review the patch
A review protocol for GitHub Agentic Autofix: what CodeQL validation proves, how to test a proposed fix independently, and when to hold a draft PR.
9 min readRead the guide →
Read, apply, and verify
Browse all 27 edited English guides. Each gives you a concrete task, checks to run and a clear account of its limits.
Read and apply
All English guides
Choose a guide by the task you need to complete. Each article links to its Italian original.
Project instructions
How to write an effective AGENTS.md for Codex
A practical AGENTS.md example for Codex: what belongs in it, how to scope rules, and how to check whether an agent actually followed them.
8 min readRead the guide →
Getting started
What can you actually ask ChatGPT to do?
Practical ChatGPT requests for email, summaries, comparisons, and explanations, with a five-point check before you use the result.
4 min readRead the guide →
Documents
Summarize a document with AI without missing the important parts
Use a coverage map, source references, and a separate register for amounts and dates before trusting an AI document summary.
4 min readRead the guide →
Practical decisions
Compare quotes and offers with AI without losing the numbers
A worked comparison of two service quotes: normalize the term, calculate total cost, surface missing conditions, and keep a source record.
4 min readRead the guide →
Agent security
Agent data injection: protect the trust boundary
A practical trust map for web and coding agents: external data, verified metadata, least privilege, approval gates and provenance.
4 min readRead the guide →
Agent tooling
Agent Plugins 1.0: skill, MCP and plugin explained
How a skill, an MCP server and an Agent Plugin differ, what portability covers, and what to inspect before installing one.
4 min readRead the guide →
ChatGPT Work
Start a ChatGPT task when a GitHub PR changes
A read-only pilot for GitHub pull-request event tasks: narrow filters, untrusted comments, minimum access and human review.
3 min readRead the guide →
Codex workflow
Codex in ChatGPT: a project safety checklist
Check the repository, scope, worktree, permissions, diff, tests and human review before accepting a Codex change.
3 min readRead the guide →
IDE agents
Set up Codex as a JetBrains agent provider
A first-session checklist for Codex via GitHub Copilot in JetBrains, with clear distinctions between provider, model, MCP, skills and plugins.
3 min readRead the guide →
Security review
Use Codex Security to scan a repository
A cautious first scan: inspect report, findings, manifest and coverage, validate a candidate issue, then compare a tested fix.
3 min readRead the guide →
Key terms
Coding-agent glossary: scope, sandbox, MCP, worktree, and CI
Operational definitions of common coding-agent terms, plus a worked example showing how they connect during a real change.
4 min readRead the guide →
Pull requests
Copilot PR approvals: keep a human merge gate
How to pilot Copilot approval assessments on low-risk paths without treating an AI approval as an independent human review.
3 min readRead the guide →
Safe configuration
Create .env.example without publishing API keys
A practical .env.example checklist: safe placeholders, ignored local files, frontend exposure, and what to do after a leaked secret.
3 min readRead the guide →
Agent sandbox
Test GitHub Copilot local sandbox boundaries
A low-risk pilot for Copilot local sandboxing: check filesystem and network boundaries, credentials and bypass approvals.
3 min readRead the guide →
MCP / GitHub Projects
Make Codex read the real GitHub Project card
A real source-confusion case and a fail-closed method to verify that Codex uses a GitHub Projects MCP tool instead of a related issue.
4 min readRead the guide →
Learn AI
Three OpenAI Academy courses: a practical route
A beginner-friendly route through AI Foundations, Applied AI Foundations, and Agents and Workflows, with a task to try after each.
3 min readRead the guide →
Agent API
Pilot the OpenAI Agents API in a sandbox
A small observable pilot for a managed agent session: synthetic files, restricted network, isolated credentials, logs and success checks.
3 min readRead the guide →
Code review
Review AI-generated code before you accept it
A repeatable code-review checklist with a real DottorLone arithmetic bug that passed the build but changed a comparison.
4 min readRead the guide →
Prompt basics
A simple ChatGPT prompt that leaves less to guess
A four-part prompt for beginners: goal, context, output format, and missing questions, tested against a vague request.
3 min readRead the guide →
Prompt design
Turn a vague request into a testable coding task
A before-and-after example that gives a coding agent a goal, user flow, scope, constraints, acceptance criteria, and verification steps.
4 min readRead the guide →
Token use
Use Headroom with Codex: measure tokens and quality
A cautious Headroom trial for Codex: baseline, isolated installation, wrapper, measurement, rollback and a fair comparison with Caveman.
4 min readRead the guide →
Verification
How to check whether an AI answer is reliable
A practical check for AI-generated answers: separate facts from advice, trace primary sources, verify dates and numbers, and scale the effort to the risk.
4 min readRead the guide →
VS Code agents
VS Code Agent Merge: pilot before auto-merge
A controlled rollout of Agent Merge for PR feedback, failed checks and conflicts, with a human gate for consequential merges.
3 min readRead the guide →
Agent workflow
Run parallel agent sessions in VS Code safely
Assign one owner per file, isolate writes and integrate sequentially when working with multiple VS Code agent sessions.
3 min readRead the guide →
Privacy basics
What not to paste into ChatGPT
A simple checklist for passwords, client data, contracts, medical records, screenshots, and safer ways to ask for help.
3 min readRead the guide →
Everyday AI
Write clearer emails with ChatGPT without sounding robotic
A practical email-writing workflow: give the right facts, request two tones, remove boilerplate, and check the final draft before sending.
3 min readRead the guide →