Borrowing it
Nothing to install: this file belongs to Kevin7Qi/codex-collab. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Kevin7Qi/codex-collab/main/CLAUDE.mdgit clone --depth 1 https://github.com/Kevin7Qi/codex-collabWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/kevin7qi/codex-collab/claude-md)<a href="https://agentmods.dev/instructions/kevin7qi/codex-collab/claude-md"><img src="https://agentmods.dev/badge/instructions/kevin7qi/codex-collab/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/kevin7qi/codex-collab/claude-md"><img src="https://agentmods.dev/badge/instructions/kevin7qi/codex-collab/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01320 | $0.01320 |
| Opus 5.5 | $0.00528 | $0.00528 |
| Sonnet 5.5 | $0.00264 | $0.00264 |
| Haiku 4.5 | $0.00132 | $0.00132 |
Grade A, and why
codex-collab CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 29d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.
codex-collab
CLI tool for Claude + Codex collaboration via the Codex app server JSON-RPC protocol.
Stack: TypeScript, Bun, OpenAI Codex CLI (app server protocol)
Development
./install.sh --dev # symlink for live iteration
bun run src/cli.ts --help
codex-collab health
bun run test:ci # what CI runs, the way it runs it (no claude on PATH) — before every push
Key Files
| File | Purpose |
|---|---|
src/cli.ts |
CLI router, argument parsing, signal handlers |
src/client.ts |
JSON-RPC client for Codex app server (spawn, handshake, request routing) |
src/commands/ |
CLI command handlers (run, review, threads, kill, config, approve; send with its detached receiver, task/tasks, peers with peers stop and the reaper entry point) |
src/threads.ts |
Thread index, run ledger, short ID mapping |
src/turns.ts |
Turn lifecycle (runTurn, runReview), event wiring |
src/events.ts |
Event dispatcher (progress lines, log writer, output accumulator) |
src/approvals.ts |
Approval handler abstraction (auto-approve, interactive IPC) |
src/questions.ts |
Ask-channel mailbox (Codex asks mid-turn via ask, fail-open on timeout; markers, temp-space mailbox) |
src/types.ts |
Protocol types (JSON-RPC, threads, turns, items, approvals) |
src/config.ts |
Configuration constants, workspace resolution |
src/broker.ts |
Shared app-server lifecycle (connection pooling) |
src/peer.ts |
Native peer messaging (Claude session-registry entries, messaging sockets, consult bridge, per-thread peers) |
src/claude-sessions.ts |
Codex's side of peer messaging: the Claude Code sessions peers lists and send reaches, sessions send starts (claude --bg), their records and reaper |
src/claude-transcript.ts |
Reads a Claude Code session's own transcript for why a turn failed (API errors); fails open, undocumented format |
src/claude-tasks.ts |
Task records for send: one per message, written by a detached receiver, read by task status|wait|result and tasks |
src/broker-client.ts |
Socket-based client for connecting to the broker server |
src/shared-server.ts |
Attach to Codex's shared app-server over its control socket (WebSocket client, attach/spawn decision) |
src/models.ts |
Model and effort defaults shared by the CLI and the peer |
src/broker-server.ts |
Detached broker server process (multiplexes JSON-RPC between clients and app-server) |
src/process.ts |
Process spawn/lifecycle utilities |
src/lock.ts |
Advisory file locks (sync/async, single-winner stale breaking) |
src/git.ts |
Git operations (default-branch detection for reviews) |
src/skill.ts |
Installed-skill rendering for both skills (embedded SKILL.md sources), the opt-in Codex exec-policy rule (CODEX_RULES_SOURCE), drift detection, unified diff |
src/update.ts |
Release checking, update notices (skill sync / update commands live in src/commands/update.ts) |
SKILL.md |
Claude Code skill definition |
codex-skill/SKILL.md |
Codex-side skill (claude-collab): how Codex reaches Claude Code sessions (peers, send, task, peers stop) |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 29d ago Changed · +5 lines · +258 tokens per session 2e489e907d4c
- 1mo ago Changed · +3 lines · +224 tokens per session 2d68eb59c96b
- 1mo ago Changed · +2 lines · +111 tokens per session 6191a505bae6
- 1mo ago First seen · 53 lines · 727 tokens per session scan A 62dbf351fd84
codex-collab CLAUDE.md is an instructions file published in the GitHub repository Kevin7Qi/codex-collab (98 stars, last pushed 6d ago), licensed MIT. It adds 1,320 tokens to every session, about $0.0053 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
vscode model-prompts.instructions.md
Model-specific prompt authoring and registry guidelines.