Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/athola/claude-night-marketnpx agentmods add skills/athola/claude-night-market/codex-delegationWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/athola/claude-night-market/codex-delegation)<a href="https://agentmods.dev/skills/athola/claude-night-market/codex-delegation"><img src="https://agentmods.dev/badge/skills/athola/claude-night-market/codex-delegation/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/athola/claude-night-market/codex-delegation"><img src="https://agentmods.dev/badge/skills/athola/claude-night-market/codex-delegation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.01024 |
| Opus 5 | $0.00020 | $0.00512 |
| Sonnet 5 | $0.00008 | $0.00205 |
| Haiku 4.5 | $0.00004 | $0.00102 |
Grade C, and why
codex-delegation scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Harvests environment variableshighData exfiltration
Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.
printenv OPENAI_API_KEY | codex login --with-api-key Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Homebrew and a curl installer are also documented upstream. How it starts
The opening of the file, as written. The whole thing — 143 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Table of Contents
- Overview
- When To Use
- When NOT To Use
- Prerequisites
- Quick Start
- Smart Delegation
- Codex-Specific Details
- Exit Criteria
Codex CLI Delegation
Overview
OpenAI's Codex CLI ships as npm @openai/codex and installs a codex
binary. Its headless entry point is codex exec, which takes the
prompt as a positional argument and reuses saved CLI credentials.
When To Use
delegation-coreselectedcodexfor the task- OpenAI credentials are already configured on the machine
- The work suits a second opinion from a non-Anthropic, non-Google model
When NOT To Use
- The host is headless and
codex loginhas never succeeded there. See the login caveat below - The job checks out untrusted repository code. OpenAI's own docs warn against exposing the key as a job-level environment variable in that case
Prerequisites
Installation
npm install -g @openai/codex
Homebrew and a curl installer are also documented upstream.
Authentication
Either persist an API key or log in interactively:
printenv OPENAI_API_KEY | codex login --with-api-key
Verification runs codex login status, which reports one of "Logged
in using an API key", "Logged in using ChatGPT", "Logged in using
Agent Identity", or "Not logged in". The service uses that probe
rather than checking a single variable, because either credential
path is valid and only the probe sees both.
CODEX_API_KEY scopes a credential to a single codex exec run.
Quick Start
Using the shared delegation executor
uv run python scripts/delegation_executor.py codex "Explain this module" \
--files src/
Through the Makefile
make -C plugins/conjure delegate-codex PROMPT='Explain this module'
Direct CLI usage
codex exec "Explain the retry logic in this package"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 143 lines · 40 tokens per session scan C 178610801a75
codex-delegation is a skill published in the GitHub repository athola/claude-night-market (337 stars, last pushed today), licensed MIT. It adds 40 tokens to every session and 1,024 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it C with 2 findings (harvests environment variables, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
python-repl
Interactive Python REPL automation with common helpers and best practices.
unbroker
Autonomously remove your info from data-broker sites.
obsidian-bases
Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries. Use when working with .base files, creating database-like views of notes, or when the user mentions Bases, table views, card views, filters, or formulas in Obsidian.
json-canvas
Create and edit JSON Canvas files (.canvas) with nodes, edges, groups, and connections. Use when working with .canvas files, creating visual canvases, mind maps, flowcharts, or when the user mentions Canvas files in Obsidian.
obsidian-cli
Interact with Obsidian vaults using the Obsidian CLI to read, create, search, and manage notes, tasks, properties, and more. Also supports plugin and theme development with commands to reload plugins, run JavaScript, capture errors, take screenshots, and inspect the DOM. Use when the user asks to interact with their…
defuddle
Extract clean markdown content from web pages using Defuddle CLI, removing clutter and navigation to save tokens. Use instead of WebFetch when the user provides a URL to read or analyze, for online documentation, articles, blog posts, or any standard web page. Do NOT use for URLs ending in .md — those are already…