customize

Instructions for changing which command-line AI tool handles each role in the cc-multi-cli-plugin system. It also covers working around command-line tool quirks with environment variables and configuration files.

In plain words
What is it for?
It helps swap AI tools, add or disable roles, restrict a tool to read-only work, choose a model, and edit the relevant command or agent files.
Why use it?
It provides a clear place to change role assignments or adjust how a tool behaves when its defaults do not fit.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/greenpolo/cc-multi-cli-plugin/customize
Any agent
npx skills add greenpolo/cc-multi-cli-plugin --skill customize
Clone the repo
git clone --depth 1 https://github.com/greenpolo/cc-multi-cli-plugin

Made for: Claude Code, Codex.

Per session 267 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 7,787 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00267 $0.07787
Opus 5 $0.00133 $0.03893
Sonnet 5 $0.00053 $0.01557
Haiku 4.5 $0.00027 $0.00779

Measured 2d ago against content hash b2a31e70f8a3, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

customize scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

- **Per-CLI MCP config files** — when a CLI doesn't pick up MCP servers the way you expect, populate the CLI's own config: Cursor reads `~/.cursor/mcp.json`; Codex reads `~/.codex/config.toml`; Antigravity's `agy` reads
plugins/multi/skills/customize/SKILL.md · 295 lines

How it starts

The opening of the file, as written. The whole thing — 295 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Customize cc-multi-cli-plugin

cc-multi-cli-plugin is a multi-plugin marketplace: one hub plugin (multi) plus one thin plugin per AI CLI the user has wired up. Customization is explicit file edits across those plugins. There is no runtime config layer and no buildPrompt() function — a CLI's behavior is assembled from a few small, separate files, and you edit the one that owns the thing you want to change.

This skill is CLI-agnostic. Every instruction below works for any CLI in the marketplace — the four shipped defaults (Codex, Cursor, Antigravity, OpenCode) and any CLIs added later via the multi-cli-anything skill (Aider, etc.). Concrete examples use specific CLI names for clarity; apply the same pattern to any CLI.

The four moving parts every customization touches

A /<cli>:<action> invocation flows through four artifacts. Each owns one concern. A customization edits whichever one owns what you're changing — usually one or two.

Artifact Path Owns Edit it to…
Slash command plugins/<cli>/commands/<action>.md The user-facing entry point. Dispatches to the subagent via the Agent tool. add/rename/disable a /<cli>:<action> command
Subagent (forwarder) plugins/multi/agents/<cli>-<role>.md The multi:<cli>-<role> forwarder. Loads the multi-cli-runtime skill, optionally frames the prompt, and builds exactly ONE companion Bash call. Its model: is tuned by role (see below). change a role's prompt framing, its model, its tools, or which --cli/--role it forwards to
Adapter plugins/multi/scripts/lib/adapters/<cli>.mjs The CLI's transport, plus the role→flag/sandbox mapping (read-only vs write, mode flags). Registered in registry.mjs. change how a role maps to the CLI's own flags/permissions
Shared contract plugins/multi/skills/multi-cli-runtime/SKILL.md The flag-handling, routing, and failure-line contract every forwarder obeys (--model, --effort, --write/--read-only, --resume, --until-done, --plan, 2>&1, the <CLI> <role> failed: … line). change behavior shared across all CLIs (rare — it affects everything)

Read the full file on GitHub · 295 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 295 lines · 267 tokens per session scan B b2a31e70f8a3

Subscribe to this mod's changes

customize is a skill published in the GitHub repository greenpolo/cc-multi-cli-plugin (89 stars, last pushed 16d ago), licensed Apache-2.0. It adds 267 tokens to every session and 7,787 once invoked, about $0.0013 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

subagent-manager

Use when the user mentions "subagent" commands, wants to coordinate worker agents, or asks to delegate tasks to a team of agents using subagent-cli. Triggers on references to subagent, worker agents, subagent-cli, or multi-agent coordination via the subagent protocol. Also use when the user says things like "チームで進めて"…

otakumesi/subagent-cli · 98 tokens

agentmail

Email infrastructure for AI agents. Create accounts, send/receive emails, manage webhooks, and check karma balance via the AgentMail API.

sickn33/agentic-awesome-skills · 31 tokens

copilot-pr-review-loop

Drive a GitHub pull request through repeated rounds of Copilot code review until convergence. Use when the user asks to "request Copilot review", "run a Copilot review loop", iterate on Copilot feedback, or wants automated triage-and-respond on Copilot PR comments. Covers re-request mechanics, open-thread filtering…

microsoft/intelligent-terminal · 91 tokens

upstream-sync

Periodically sync new commits from microsoft/terminal into this manually-forked intelligent-terminal repo by cherry-picking commit-by-commit onto a dated sync branch, auto-skipping revert pairs and empty commits, auto-resolving known take-upstream files, and stopping cleanly on genuine conflicts. The agent (you…

microsoft/intelligent-terminal · 139 tokens

release-notes

Generate user-facing release notes for Intelligent Terminal. Use when asked to write release notes, changelog, what-is-new summary, or prepare a release. Compares git commits between releases, looks up PR-linked issues and community contributors, then outputs formatted notes with "Verbed + Impact + Scenario" style…

microsoft/intelligent-terminal · 73 tokens

agent-creator

Create and configure AiderDesk agent profiles by defining tool groups, approval rules, system prompts, subagent settings, subagent filtering, and provider/model selection. Use when setting up a new agent, creating a profile, or configuring agent tools, permissions, and subagent behavior.

hotovo/aider-desk · 60 tokens