codex-workflow

codex-workflow is a skill for Claude Code, Codex from KingGyuSuh/ultracodex. It costs 280 tokens per session (4,653 once invoked), scanned A, original, Apache-2.0.

A skill for building workflows that combine Claude orchestration with headless Codex commands. A workflow is a sequence or group of automated tasks, and headless means Codex runs without an interactive chat.

In plain words
What is it for?
Use it to add Codex nodes to Claude workflows for adversarial verification, judge panels, and second opinions.
Why use it?
It lets one AI model generate or coordinate work while another independently checks it, reducing the chance that both the work and its review share the same mistake.

Skill for Claude CodeCodex

Written for Claude Code and Codex: shipped in a Claude Code plugin, but also runs codex exec. Also seen: mentions subagents; mentions Codex.

Part of the ultracodex plugin — 1 skill shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/kinggyusuh/ultracodex/codex-workflow
Any agent
npx skills add KingGyuSuh/ultracodex --skill codex-workflow
Clone the repo
git clone --depth 1 https://github.com/KingGyuSuh/ultracodex

Made for: Claude Code, Codex.

Or install ultracodex, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for codex-workflow

README.md
[![agentmods](https://agentmods.dev/badge/skills/kinggyusuh/ultracodex/codex-workflow.svg)](https://agentmods.dev/skills/kinggyusuh/ultracodex/codex-workflow)
Your own site
<a href="https://agentmods.dev/skills/kinggyusuh/ultracodex/codex-workflow"><img src="https://agentmods.dev/badge/skills/kinggyusuh/ultracodex/codex-workflow.svg" alt="Measured on agentmods" height="20"></a>
Per session 280 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,653 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00280 $0.04653
Opus 5 $0.00140 $0.02327
Sonnet 5 $0.00056 $0.00931
Haiku 4.5 $0.00028 $0.00465

Measured 6d ago against content hash 7efe40b371bc, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

codex-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/ultracodex/skills/codex-workflow/SKILL.md · 322 lines

How it starts

The opening of the file, as written. The whole thing — 322 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Codex-in-Workflow (Pattern A)

Authoring custom Workflows with the Workflow tool (agent(), pipeline(), parallel(), phase(), schemas, loop-until-dry, etc.) is assumed knowledge. This skill is the know-how for mixing Codex headless into one so that the orchestration stays Claude's but selected nodes run on a different model family.

Mental model

A Workflow's agent() normally spawns a Claude subagent. Pattern A keeps every orchestration primitive exactly as-is and only changes who does the work at chosen nodes: a "codex node" is a normal agent() whose subagent does nothing but shell out to codex exec and relay its output back.

Workflow (Claude JS orchestration)
 ├─ find / generate ............... Claude agent()  ← Claude is broad, fast, cache-warm
 └─ verify / judge / 2nd-opinion .. codex node      ← GPT, independent failure modes

The value is diversity, not replacement. Two model families disagree in different places, so a Codex verifier catches Claude's correlated false positives (and vice versa) in a way that N more Claude verifiers cannot. The single highest-ROI use is adversarial verification: Claude finds, Codex tries to refute.

Prerequisites — preflight before trusting any codex node

This skill assumes the Codex CLI is installed and authenticated in the environment running the Workflow. Do NOT assume a specific version or default model — confirm them, because they change between installs. Run the preflight (CLI present, auth live, structured-output path works) from references/codex-headless.md once before relying on any node; if it errors on auth, the user must codex login (interactive) — that cannot be done headlessly.

Step 0 — should this task even use Codex?

Don't bolt Codex on for its own sake; each node costs a separate Codex/OpenAI run plus a Claude wrapper turn. Route a node to Codex only when a second, independent model materially de-risks the result:

  • Yes: verifying findings/claims, judging candidates, an independent attempt in a diverse panel, sanity-checking a risky Claude conclusion.
  • No / don't blend when:
    • it's bulk throughput work (Claude subagents are cheaper, faster, cache-warm);
    • it's a correlated check — Codex would only re-derive from the same evidence Claude already used, with no independent angle (an echo, not a second opinion);
    • it's a blind check — the node can't give Codex what it needs to verify independently (no files/tools in read-only, and the evidence isn't inline);
    • there's no verifiable/judgeable artifact (pure open-ended ideation) — diversity adds noise, not signal.

Read the full file on GitHub · 322 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 322 lines · 280 tokens per session scan A 7efe40b371bc

Subscribe to this mod's changes

codex-workflow is a skill published in the GitHub repository KingGyuSuh/ultracodex (12 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 280 tokens to every session and 4,653 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

provider-integration

Adds new AI providers to claude-council, configures provider API settings, troubleshoots provider connections, and documents the provider script interface. Covers creating provider shell scripts, setting API keys, and validating connectivity. Triggers on "add provider", "new AI agent", "provider not working", "API…

hex/claude-council · 74 tokens

update-lid

Configure or reconcile a project for linked-intent development (LID). Dispatches on project state — fresh bootstrap, append directives to an existing agent-instructions file (AGENTS.md or CLAUDE.md), add missing mode marker, reconcile convention drift, or run mode transitions. Invoked as /update-lid. For fresh…

jszmajda/lid · 105 tokens

arrow-maintenance

Navigation and audit overlay for linked-intent development. Use when working with docs/arrows/ — orienting via index.yaml, auditing spec-to-code coherence, detecting reverse orphans and drift, splitting/merging/renaming/re-parenting segments. Dual-mode: ambient guidance when the overlay is present…

jszmajda/lid · 85 tokens

map-codebase

Bootstrap LID in an existing (brownfield) codebase. Deep-reads every file in the declared scope, offers lens-based clustering options, generates skeleton LLDs/HLD/EARS bottom-up, then creates arrow docs and prompts the user to flesh out the skeletons. Token-intensive by design. Use when asked to map a codebase…

jszmajda/lid · 92 tokens

superbrain-distill

Internal SuperBrain skill — run by the detached capture child to distill a session-event delta into routed Obsidian notes. Not for direct user invocation.

m3talux/superbrain · 36 tokens

recursive-decomposition

Handle tasks that exceed the context window by decomposing them: size and filter the input, chunk it, run recursive sub-agents on independent parts, verify on small windows, and synthesise programmatically, following the Recursive Language Models (RLM) research by Zhang, Kraska and Khattab (2025). Use when a task…

massimodeluisa/recursive-decomposition-skill · 151 tokens