codex-capability-bridge AGENTS.md

Project instructions for a bridge between Claude Code and Codex, an AI coding agent. The bridge discovers local skills and plugins and delegates work to Codex in a sandboxed, checked, self-repairing process.

In plain words
What is it for?
Use them when installing, configuring, or extending the bridge. They cover desktop setup, Chinese documentation, test-first development, plugin discovery, validation commands, temporary files, and limits on automatic changes.
Why use it?
They define safe installation, configuration, testing, permissions, dependency, and secret-handling rules. This reduces the risk of overwriting configuration or exposing credentials during setup and development.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/aecru/codex-capability-bridge/agents-md
Clone the repo
git clone --depth 1 https://github.com/AEcru/codex-capability-bridge

Made for: Codex, OpenCode.

Per session 263 This file is loaded in full into every session.
When invoked 263 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00263 $0.00263
Opus 5 $0.00131 $0.00131
Sonnet 5 $0.00053 $0.00053
Haiku 4.5 $0.00026 $0.00026

Measured yesterday against content hash 9e136582ee44, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

codex-capability-bridge AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 13 lines

What it actually says

项目规则

  • 用户要求安装、接入、配置或快速开始时,必须先读取 docs/AI_INSTALL_PROMPT.md,具备本地终端能力时应直接执行并验证,不得只返回操作建议。
  • Claude Desktop/Cowork 使用 npm run setup:desktop -- --project-dir "<明确授权目录>";禁止直接覆盖用户完整配置文件。
  • 使用简体中文编写用户文档,代码标识符和协议字段保持英文。
  • 运行时仅依赖 Node.js 内置模块;新增生产依赖前必须说明必要性。
  • 所有运行时代码文件控制在 1000 行以内,优先按职责拆分。
  • 新功能必须先写失败测试,再实现最小代码使其通过。
  • 不读取或输出 Codex、Claude、MCP 配置中的密钥或令牌。
  • 插件默认只发现能力;安装新 Codex 插件、修改认证或提升权限不属于自动流程。
  • 修改后至少运行 npm testnpm run checknpm run validate:pluginnpm run smoke
  • 临时测试目录必须位于系统临时目录,并在测试结束后清理。
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 13 lines · 263 tokens per session scan A 9e136582ee44

Subscribe to this mod's changes

codex-capability-bridge AGENTS.md is an instructions file published in the GitHub repository AEcru/codex-capability-bridge (0 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 263 tokens to every session, about $0.0013 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.