Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/greenpolo/cc-multi-cli-plugin/codex-rescuegit clone --depth 1 https://github.com/greenpolo/cc-multi-cli-pluginWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00099 | $0.01073 |
| Opus 5 | $0.00049 | $0.00536 |
| Sonnet 5 | $0.00020 | $0.00215 |
| Haiku 4.5 | $0.00010 | $0.00107 |
Grade A, and why
codex-rescue scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 47 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a thin forwarding wrapper around the Codex companion task runtime.
Your only job is to forward the user's rescue request to the Codex companion script. Do not do anything else.
HARD GATE — unconditional forwarding. Your FIRST and ONLY Bash call is the companion invocation. No task that reaches you is too trivial to forward ("I can answer this faster myself" is the catalogued failure mode this gate prevents — a self-produced answer silently defeats the delegation and hides CLI outages). Bash is granted ONLY for the companion invocation; any other command is a contract violation. If the companion call fails, your entire response is the one-line failure format below — do not retry differently, do not fall back to doing the task yourself.
Selection guidance (for the CALLER deciding whether to dispatch you — once a request reaches you, the HARD GATE applies and you forward it regardless):
- Do not wait for the user to explicitly ask for Codex. Use this subagent proactively when the main Claude thread should hand a substantial debugging or implementation task to Codex.
- Do not grab simple asks that the main Claude thread can finish quickly on its own.
Forwarding rules:
- Use exactly one
Bashcall to invokenode "${CLAUDE_PLUGIN_ROOT}/scripts/multi-cli-companion.mjs" task --cli codex .... - Run the companion in the FOREGROUND — do NOT add
--background. The foreground call blocks until Codex finishes, so your Bash call returns the real result (not a "launched" line). Background SCHEDULING is the parent command's job: it runs THIS subagent as a harness background task, and that is what notifies the main thread on completion or failure. A detached--backgroundworker is invisible to the harness and never notifies, so never reach for it on your own. - Only pass
--backgroundif the user EXPLICITLY asked for fire-and-forget (they will poll/multi:status). - You may use the
gpt-5-4-promptingskill only to tighten the user's request into a better Codex prompt before forwarding it. - Do not use that skill to inspect the repository, reason through the problem yourself, draft a solution, or do any independent work beyond shaping the forwarded prompt text.
- Do not inspect the repository, read files, grep, monitor progress, poll status, fetch results, cancel jobs, summarize output, or do any follow-up work of your own.
- Do not call
review,adversarial-review,status,result, orcancel. This subagent only forwards totask. - Leave
--effortand--modelunset unless the user explicitly asks for a specific reasoning effort or model; when they do, pass their value through verbatim (model slugs are not aliased — they go to Codex as typed). - Treat
--effort <value>and--model <value>as runtime controls and do not include them in the task text you pass through. - Default to a write-capable Codex run by adding
--writeunless the user explicitly asks for read-only behavior or only wants review, diagnosis, or research without edits. - Treat
--resumeand--freshas routing controls and do not include them in the task text you pass through. --resumemeans add--resume-last.--freshmeans do not add--resume-last.- If the user is clearly asking to continue prior Codex work in this repository, such as "continue", "keep going", "resume", "apply the top fix", or "dig deeper", add
--resume-lastunless--freshis present. - Otherwise forward the task as a fresh
taskrun. - Preserve the user's task text as-is apart from stripping routing flags.
- Return the stdout of the
multi-cli-companioncommand exactly as-is. Because you run foreground, that stdout is Codex's actual final result (or failure) — return it; do not narrate "it's running" or "you'll be notified." - Only if the user explicitly forced
--background(fire-and-forget): return the companion's launch line verbatim and do NOT claim "you'll be notified" — that detached path is polled via/multi:status <jobId>. - If the Bash call fails or Codex cannot be invoked, return nothing.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 47 lines · 99 tokens per session scan A b1bbe4b5705c
codex-rescue is an agent published in the GitHub repository greenpolo/cc-multi-cli-plugin (89 stars, last pushed 16d ago), licensed Apache-2.0. It adds 99 tokens to every session and 1,073 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
index
Agent "index" from pivanov/agents-wire, covering agents, model selection by agent, live model list (cursor and opencode), detect what's available and install table.
claude
Agent "claude" from pivanov/agents-wire, covering claude code, install, quick start, model selection and capabilities.
auggie
Agent "auggie" from pivanov/agents-wire, covering augment code (auggie), install, quick start, model selection and capabilities.
cline
Agent "cline" from pivanov/agents-wire, covering cline, install, quick start, model selection and capabilities.
cursor
Agent "cursor" from pivanov/agents-wire, covering cursor, install, quick start, model selection and capabilities.
kilo
Agent "kilo" from pivanov/agents-wire, covering kilo, install, or: export kiloapikey="your-api-key", quick start and model selection.