session-workflow-miner

session-workflow-miner is a skill for Codex from jscraik/Agent-Skills. It costs 39 tokens per session (2,095 once invoked), scanned A, original, Apache-2.0.

A guide for examining recent Codex work sessions to find manual tasks that happen repeatedly.

In plain words
What is it for?
Use it to review recurring work such as CI failures, pull-request reviews, changelogs, documentation updates, release preparation, and test triage.
Why use it?
It helps decide whether a repeated workflow should become a reusable skill, helper agent, validator, or no new tool.

Skill for Codex

Written for Codex: agents/openai.yaml present. Also seen: mentions subagents; mentions Codex.

Good fit Use it to review recurring work such as CI failures, pull-request reviews, changelogs, documentation updates, release preparation, and test triage.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/jscraik/agent-skills/session-workflow-miner
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add jscraik/Agent-Skills --skill session-workflow-miner
Clone the repo
git clone --depth 1 https://github.com/jscraik/Agent-Skills

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for session-workflow-miner

README.md
[![agentmods](https://agentmods.dev/badge/skills/jscraik/agent-skills/session-workflow-miner/github.svg)](https://agentmods.dev/skills/jscraik/agent-skills/session-workflow-miner)
Your own site
<a href="https://agentmods.dev/skills/jscraik/agent-skills/session-workflow-miner"><img src="https://agentmods.dev/badge/skills/jscraik/agent-skills/session-workflow-miner/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for session-workflow-miner

Your own site · 80×15
<a href="https://agentmods.dev/skills/jscraik/agent-skills/session-workflow-miner"><img src="https://agentmods.dev/badge/skills/jscraik/agent-skills/session-workflow-miner.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 39 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,095 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00039 $0.02095
Opus 5 $0.00019 $0.01047
Sonnet 5 $0.00008 $0.00419
Haiku 4.5 $0.00004 $0.00210

Measured 8d ago against content hash 13a1f91ecada, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

session-workflow-miner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Skills/agent-ops/session-workflow-miner/SKILL.md · 181 lines

How it starts

The opening of the file, as written. The whole thing — 181 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Session Workflow Miner

Find repeated manual asks in recent Codex sessions and convert only the useful ones into durable, small operating artifacts.

Philosophy

Repeated asks are workflow telemetry. The useful response is not to create a bigger catalog; it is to identify the smallest durable owner for the repetition, prove that owner does not already exist, and create nothing when reuse is better.

When To Use

  • Jamie asks what workflows or asks repeat across recent Codex sessions.
  • Jamie asks which repeated tasks should become skills or custom subagents.
  • A session review should focus on practical work such as CI failures, PR review, changelogs, docs updates, release prep, debugging, test triage, Linear state, or delivery-state drift.
  • The desired output is a small set of concrete artifacts, not a broad process rewrite.

Inputs

  • Lookback window, defaulting to recent sessions when Jamie does not specify one.
  • Session collector root, usually ~/.agents/session-collector/.
  • Target repo or workflow focus when provided.
  • Existing skill and custom-agent inventories.
  • Optional memory hits as routing hints, never as current-state proof.

Evidence Sources

Use the freshest available runtime evidence first:

  1. ~/.agents/session-collector/ README and collector entrypoint.
  2. A temporary collector output and bundle, usually under /tmp.
  3. Existing skills under Skills/**, .codex/skills/**, and plugin skill roots.
  4. Existing custom agents under the canonical Codex config source, commonly codex/agents/** in Jamie's configs checkout.
  5. Memory only as a routing hint; verify current file state before claiming an artifact is missing.

Do not treat old session summaries, Slack messages, bot prose, or injected prompt bodies as source-of-truth evidence.

See references/contract.yaml for the compact contract and references/evals.yaml for smoke cases.

Workflow

  1. Run or refresh the session collector into /tmp using a sandbox-safe cache path. Keep the live repo untouched unless the user explicitly asks for persistent reports.
  2. Inspect the generated bundle first: aggregate.json, skillify-candidates.json, skill-refactor-handoffs.json, and any tool or attribution summaries.
  3. Sample raw recent session prompts only when the bundle is too coarse. Filter out system/developer text, injected skill bodies, copied specs, hook prompts, and repeated heartbeat boilerplate unless the repeated heartbeat is itself the workflow under review.
  4. Cluster repeated work by operational job, not by wording:
    • PR, CI, CodeRabbit, and mergeability triage.
    • Docs, changelog, release note, and publish handoff work.
    • Spec/plan review and acceptance-criteria hardening.
    • Test failure ownership and validation evidence.
    • Debugging, reproduction, and runtime-state investigation.
    • Linear, GitHub, and delivery-state synchronization.
    • Repeated human steering that should become a guardrail or validator.
  5. Inventory existing skills and agents before creating anything. Prefer reuse or a narrow extension over duplicate artifacts.
  6. Choose the durable form:
    • Create a skill when the repeated work is a reusable procedure with inputs, workflow, outputs, boundaries, and validation.
    • Create a custom subagent when the repeated work is a bounded role, especially read-only investigation, review, auditing, or state classification.
    • Recommend a validator or CI gate when the repetition is a correctness failure that deterministic checks can prevent.
    • Create nothing when an existing skill or agent already owns the job.
  7. Create only the smallest useful artifact. Avoid broad routers, aspirational governance text, and placeholder scaffolding.
  8. Validate the new artifact with the repo's narrowest available gate, then report what was created, what was deliberately skipped, and which evidence drove the decision.

Read the full file on GitHub · 181 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 181 lines · 39 tokens per session scan A 13a1f91ecada

Subscribe to this mod's changes

session-workflow-miner is a skill published in the GitHub repository jscraik/Agent-Skills (8 stars, last pushed 10d ago), licensed Apache-2.0. It adds 39 tokens to every session and 2,095 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.