runtime-bridge-sync

A bridge synchronisation tool for keeping selected coding-agent skill links aligned between Windows Codex Desktop and WSL, the Windows Linux environment.

In plain words
What is it for?
Use it to preview, apply, or validate the curated set of shared skill links.
Why use it?
It shows planned link changes before applying them and avoids silently replacing ordinary files. This helps detect or correct differences between the two environments.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/cloud99277/kitclaw/runtime-bridge-sync
Any agent
npx skills add cloud99277/KitClaw --skill runtime-bridge-sync
Clone the repo
git clone --depth 1 https://github.com/cloud99277/KitClaw

Made for: Claude Code, Codex.

Per session 93 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 392 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00093 $0.00392
Opus 5 $0.00046 $0.00196
Sonnet 5 $0.00019 $0.00078
Haiku 4.5 $0.00009 $0.00039

Measured 2d ago against content hash 7bb7d50af7a5, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

runtime-bridge-sync scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 2 executable files (scripts/bridge_sync.py, tests/test_bridge_sync.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

core-skills/runtime-bridge-sync/SKILL.md · 53 lines

What it actually says

Runtime Bridge Sync

runtime-bridge-sync keeps the Windows Codex Desktop bridge in sync with the canonical WSL runtime manifest.

It is intentionally narrow:

  • it manages only the curated Codex skill symlinks
  • it does not touch L2 whiteboard data
  • it does not touch OpenClaw-private skills

Quick Start

python3 ~/.ai-skills/runtime-bridge-sync/scripts/bridge_sync.py
python3 ~/.ai-skills/runtime-bridge-sync/scripts/bridge_sync.py --json
python3 ~/.ai-skills/runtime-bridge-sync/scripts/bridge_sync.py --apply

What It Manages

  • ~/.codex/skills/<skill>
  • target symlink sources under ~/.agents/skills/<skill>
  • idempotent reapplication of the curated bridge list from the manifest

Design Constraints

  • dry-run by default
  • stdlib only
  • refuse to silently overwrite non-symlink files
  • report exact link targets and planned changes
Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 53 lines · 93 tokens per session scan A 7bb7d50af7a5

Subscribe to this mod's changes

runtime-bridge-sync is a skill published in the GitHub repository cloud99277/KitClaw (5 stars, last pushed 4mo ago), licensed MIT. It adds 93 tokens to every session and 392 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

achieving-cmmc-level-2-compliance

Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when…

mukul975/Anthropic-Cybersecurity-Skills · 255 tokens

bridge

Use when the user wants hyperflow's behavioral rules to apply outside the terminal CLI — in Claude Code Desktop, claude.ai web, or IDE extensions that don't load CLI plugins. Writes a managed doctrine block into the project's CLAUDE.md so autonomy + intent-routing + commit cadence + role separation + file-first rules…

jeremylongshore/tons-of-skills-marketplace · 126 tokens

escalation-governance

Assess whether to escalate models. Use when evaluating reasoning depth.

athola/claude-night-market · 19 tokens

agt-policy-authoring

Create and validate a minimal AGT Copilot CLI policy tailored to the repository being inspected.

microsoft/agent-governance-toolkit · 23 tokens

silicon-throne

硅基圣座总控核心,以神谕式统御把零散任务压成 末将-first 之文明工程.

linkerlin/PUAX · 34 tokens

wallet-cli

Operate the TypeScript TRON wallet CLI for accounts, transfers, staking, governance, contracts, signing, chain queries, and password input with wallet-cli 4.12.0. Refuse wallet passwords in argv and require the supported stdin channel. For Java REPL requests, refuse that entry and offer the TypeScript one-shot CLI…

BofAI/skills · 82 tokens