CodexHost is a desktop application that lets users run coding-agent harnesses such as Pi and Claude Code inside Codex Desktop. It is for people who want to choose among multiple agents and have them delegate tasks to one another while staying in one workspace.
Borrowing it
Nothing to install: this file belongs to BytePioneer-AI/codex-host. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/BytePioneer-AI/codex-host/main/.agents/skills/codexhost-add-harness/SKILL.mdgit clone --depth 1 https://github.com/BytePioneer-AI/codex-hostWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bytepioneer-ai/codex-host/codexhost-add-harness)<a href="https://agentmods.dev/skills/bytepioneer-ai/codex-host/codexhost-add-harness"><img src="https://agentmods.dev/badge/skills/bytepioneer-ai/codex-host/codexhost-add-harness/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bytepioneer-ai/codex-host/codexhost-add-harness"><img src="https://agentmods.dev/badge/skills/bytepioneer-ai/codex-host/codexhost-add-harness.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00066 | $0.02239 |
| Opus 5 | $0.00033 | $0.01120 |
| Sonnet 5 | $0.00013 | $0.00448 |
| Haiku 4.5 | $0.00007 | $0.00224 |
Grade A, and why
codexhost-add-harness scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 119 lines — stays where its author put it; the contents beside it link to each section on GitHub.
新增 codexhost Harness 插件
目标:交付一个通过公共契约工作的独立插件,而不是在 Host 中增加一套 Harness 专用流程。插件是交付与加载单元,HarnessAdapter / HarnessSession 是运行时接口;不要求继承基类,也不要求使用 ACP。
本文代码路径以仓库根目录为基准,references/ 链接相对于本 Skill。接口签名、字段限制和当前行为以源码为准;参考文档是实现与验收清单,不是第二份接口定义。
当前架构边界
Host
├─ 发现 Manifest、读取显式启用配置、调用插件工厂
├─ 通过 HarnessAdapter / HarnessSession 执行业务
└─ 拥有 Thread 映射、持久化事务、委派和 Desktop 协议投影
│ 公共契约
▼
插件
├─ Manifest:身份、版本、展示信息、入口
├─ 工厂:把 Host Context 转成原生构造参数
├─ HarnessAdapter:检查、打开 Session、关闭共享资源
└─ HarnessSession:执行、输出、状态、历史、关闭
│ 插件内部
▼
原生 SDK / RPC / 服务 / CLI
- 七个既有 Harness 和用户插件共用动态加载器,Host 不静态依赖具体 Adapter 包。新 ID 使用共享插件路由。
- 公共工具仍可复用:例如
harness-discovery实现搜索机制,插件声明命令名、环境变量和安装目录策略。 - 完整产品去专属化尚未完成:Renderer 仍有固定 Agent 名单、配置字段和展示接线;旧路由、部分恢复策略、Credits、导入、Broker 与远程配置仍有历史特例。插件加载成功不等于自动出现在 Desktop。
- 既有特例是兼容负担,不是新 Harness 的实现模板。公共契约无法表达真实需求时,记录缺口并在当前任务范围内设计公共扩展;不得通过新 Harness 专用 Host 分支绕过契约。
1. 确定交付范围和能力
从用户请求判断范围;只有会影响实现边界的歧义才询问,不默认扩展为全产品改造。
| 交付范围 | 必须完成 | 不自动包含 |
|---|---|---|
| 插件后端 | 原生适配、Manifest/工厂、可运行依赖、隔离目录加载、公共行为测试 | 仓库预装、Desktop UI |
| 预装发行 | 插件后端 + Workspace 构建、预装清单、独立 Bundle、许可与发行验收 | Renderer 自动发现 |
| Desktop 产品接入 | 插件后端 + Picker、配置、恢复、展示及 UI 验收 | 必须成为预装插件 |
普通持久化 Thread 和完整委派要求可写 resume。原生系统不支持时,可以交付明确受限的后端,但不能把它称为完整产品接入;当前没有自动 ephemeral Thread 降级。
先读取以下权威入口:
packages/harness-adapter/src/text-session.ts:Adapter、Session、命令、事件和可选接口。packages/harness-adapter/src/plugin.ts:工厂和 Context。packages/shared-contracts/src/harness-models.ts:Catalog、能力和检查结果。packages/shared-contracts/src/harness-plugins.ts:Manifest、描述与启用配置。docs/harness-plugin-runtime.md:已实现边界、安装、信任和发行规则。
核对目标 Harness 的当前原生接口、版本、认证和运行方式。实际可行时优先原生 SDK、RPC 或服务接口;只有原生接口不可用或确有理由时使用 ACP,并记录能力差异。不要以 CLI 名称相似推断协议兼容。
使用 实现导航 按传输和能力选参考,不整包复制。输出简短计划:
交付:插件后端 / 预装发行 / Desktop(可组合)
原生接口与版本:……
支持:create、resume、Turn、取消、历史、工具、Question……
不支持或受限:Fork、权限仅创建时设置……
待验证:……(不能当作不支持,也不能声明已实现)
参考模块:……
预计修改:插件目录;其他位置逐项说明原因
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/cross-harness-delegation.md 7.1 KB
- references/current-harness-implementations.md 6.2 KB
- references/output-and-interactions.md 7.3 KB
- references/public-adapter-contract.md 7.6 KB
- references/registration-and-validation.md 9.9 KB
- references/renderer-product-integration.md 7.7 KB
- references/thread-lifecycle-and-history.md 6.5 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed a2a40197ecb6
- 6d ago Changed · +54 lines · -17 tokens per session d8bfc580ace1
- 12d ago First seen · 65 lines · 83 tokens per session scan A 3f8ee2945c6f
codexhost-add-harness is a skill published in the GitHub repository BytePioneer-AI/codex-host (2,209 stars, last pushed today), licensed MIT. It adds 66 tokens to every session and 2,239 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
dg-piagent
A development guide for the pi-agent software kit, used to build and customize coding agents. It covers agents, tools, prompts, sessions, models, authentication, and connected files.
record-and-replay
Use when the user wants Codex to record a Linux desktop or browser workflow and turn it into a reusable skill. Requires the Record & Replay event-stream MCP server.
manage-taskboard
Manage Codex Taskboard / e-taskboard work with taskctl. Use for taskboard issue IDs, status sync, comments, or taskctl cloud setup—not for unrelated product docs.
chronicle-skysight
Use when recent Linux desktop activity memory would help answer a question or when the user asks to inspect or control Chronicle or Skysight.
smell
Detect software architecture bad smells, algorithmic complexity hotspots, and anti-patterns in a codebase. Produces a detailed markdown report identifying violations of architectural principles, design patterns, code quality, and performance complexity. Triggers on: smell, code smell, architecture smell, find…
modern-go
A Go code modernizer that updates source code to use language features and standard-library patterns supported by the project’s declared Go version.