record-and-replay

record-and-replay is a skill for Claude Code, Codex from distsystem/codex-desktop-linux. It costs 38 tokens per session (942 once invoked), scanned A, a copy of record-and-replay, MIT.

A workflow recorder that captures Linux desktop or browser activity and turns repeatable tasks into reusable coding-agent skills. It uses an event stream rather than a simple mouse-and-keyboard macro.

In plain words
What is it for?
Use it to inspect desktop activity, record a repeatable workflow, review captured events, manage exclusions, and package the result as a skill.
Why use it?
It preserves the intent and context of a workflow so it can be reused, while providing checks for recording readiness and sensitive apps or websites.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/distsystem/codex-desktop-linux/record-and-replay
Any agent
npx skills add distsystem/codex-desktop-linux --skill record-and-replay
Clone the repo
git clone --depth 1 https://github.com/distsystem/codex-desktop-linux

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for record-and-replay

README.md
[![agentmods](https://agentmods.dev/badge/skills/distsystem/codex-desktop-linux/record-and-replay.svg)](https://agentmods.dev/skills/distsystem/codex-desktop-linux/record-and-replay)
Your own site
<a href="https://agentmods.dev/skills/distsystem/codex-desktop-linux/record-and-replay"><img src="https://agentmods.dev/badge/skills/distsystem/codex-desktop-linux/record-and-replay.svg" alt="Measured on agentmods" height="20"></a>
Per session 38 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 942 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00038 $0.00942
Opus 5 $0.00019 $0.00471
Sonnet 5 $0.00008 $0.00188
Haiku 4.5 $0.00004 $0.00094

Measured 4d ago against content hash 40c1c8091090, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

record-and-replay scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to record-and-replay — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

linux-features/record-and-replay/plugin-template/skills/record-and-replay/SKILL.md · 75 lines

How it starts

The opening of the file, as written. The whole thing — 75 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Record & Replay

Record the user's Linux workflow, inspect the event stream, and turn the repeatable intent into a reusable Codex skill. This is the same bundled Record & Replay product shell backed by a Linux-native event-stream server, not a raw pointer or keyboard macro recorder.

The bundled plugin launches ./bin/SkyLinuxComputerUseClient event-stream mcp. That helper is the Linux equivalent of the macOS Sky Computer Use event-stream client, implemented by the Rust codex-record-replay-linux backend.

Flow

  1. Call doctor when readiness is uncertain. If Computer Use cannot observe the desktop, explain the blocker and offer the diagnostics/setup path before recording.
  2. Call skysight_start when recent activity context should keep accumulating before or during the demo, or skysight_snapshot when you only need a point-in-time local activity summary. Use skysight_pause and skysight_resume to stop or continue Chronicle-compatible resources without losing the active session, and use skysight_status to find the resource paths and local OCR availability. Respect skysight_list_exclusions and update exclusions before recording sensitive apps or domains. Treat OCR as local screen evidence metadata; do not copy raw OCR text into durable skill drafts unless it is necessary for the reusable workflow and safe to retain.
  3. Call event_stream_start with a short goal when matching the upstream Record & Replay flow, or start when you need Linux-specific options. The Linux app should show the active Record & Replay recording HUD while the shared runtime status is active. Native Linux audio evidence is opt-in and requires both include_audio: true and an affirmative CODEX_RECORD_REPLAY_AUDIO setting; normal workflow recording should rely on transcript speech_context instead. Tell the user that recording is active, that they should perform the workflow normally, and that they can say done when finished.
  4. During the demonstration, call desktop_snapshot at meaningful app/window changes, such as after the user opens Chrome or arrives on a target site. Call mark only for meaningful intent boundaries that will help the future skill, such as "source page opened" or "finished selecting rows".
  5. When transcript text is explicitly available during the recording, call speech_context with the transcript. Treat the speech as user intent/context, not as audio to replay or Chronicle-compatible resources. Do not hijack the composer dictation UI as the recording architecture.
  6. For browser workflows, call browser_trace when browser/CDP trace evidence is available. Treat the trace as semantic evidence for drafting the skill, not as a click/coordinate replay script.
  7. Use event_stream_status or status if you need to confirm which bundle is active. When the user says they are done, asks to stop, or the HUD sends "I'm done recording.", call event_stream_stop or stop if the bundle is still active.
  8. If the user discards the recording or the HUD cancel control is used, call event_stream_cancel or cancel with discarded: true and treat the bundle as canceled evidence only.
  9. Call validate_bundle, then draft_skill_prompt.
  10. Use the draft prompt and the bundle evidence to create or update a normal SKILL.md. Prefer stable app names, URLs, semantic UI labels, and data shape descriptions over literal coordinates.
  11. Call inspect_skill before import. Call import_skill only after the user approves the generated skill.

Read the full file on GitHub · 75 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 75 lines · 38 tokens per session scan A 40c1c8091090

Subscribe to this mod's changes

record-and-replay is a skill published in the GitHub repository distsystem/codex-desktop-linux (12 stars, last pushed 1mo ago), licensed MIT. It adds 38 tokens to every session and 942 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to record-and-replay, differing in 0 lines, and is treated as a copy.

Related

Other skills, from other repositories

use-agent-browser-for-airi

Test AIRI display-model imports with agent-browser across stage-tamagotchi Electron, stage-web, and stage-pocket mobile web layouts. Use when uploading and verifying contributor-supplied Live2D ZIP, VRM, or MMD ZIP/PMX/PMD files through AIRI's model selector, including onboarding bypass, format-specific import…

moeru-ai/airi · 87 tokens

opencli-sitemap-author

Use when creating or maintaining OpenCLI site sitemaps: agent-facing navigation, page-state, action, workflow, API-reference, pitfall, and fallback knowledge for a website. Use after browser exploration discovers durable site context, when a sitemap is stale, or when promoting local site knowledge into the repo.

jackwener/OpenCLI · 67 tokens

webapp-testing

Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.

every-app/open-seo · 35 tokens

interactive-login

How to complete browser/interactive logins (aws / gh / glab / gcloud). The platform backgrounds the login poller so it survives the human's browser round-trip — and when that does NOT work.

yc-software/qm · 46 tokens

pinchtab-mcp

Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.

pinchtab/pinchtab · 52 tokens

google-safe-browsing

Prevent and fix Google Safe Browsing "Dangerous site" flags. Use when launching a public web app, buying/picking a domain, building a login or signup page, or when any site shows a red "Dangerous site" / "Deceptive site" warning in Chrome, Brave, Safari, Firefox, or Edge. Triggers on "dangerous site", "deceptive…

davidondrej/skills · 105 tokens