What is codex-cli-permissions-and-session-resume?

Instructions for checking Codex's access mode and continuing or branching an earlier command-line session. A session is one Codex conversation, while resuming continues it and forking starts a separate branch.

Using /permissions, choosing the documented full-access command-line option, resuming the latest session, and finding a session ID from local Codex files.

It removes guesswork when checking permissions or recovering a previous session. It also distinguishes full access from the more limited workspace-write mode.

How kissrosecicd-hub/agents-evolution configures Codex

Reuse

Borrowing it

Nothing to install: this file belongs to kissrosecicd-hub/agents-evolution. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/kissrosecicd-hub/agents-evolution/main/.agents/skills/codex-cli-permissions-and-session-resume/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/kissrosecicd-hub/agents-evolution

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/kissrosecicd-hub/agents-evolution/codex-cli-permissions-and-session-resume/github.svg)](https://agentmods.dev/skills/kissrosecicd-hub/agents-evolution/codex-cli-permissions-and-session-resume)

Your own site

<a href="https://agentmods.dev/skills/kissrosecicd-hub/agents-evolution/codex-cli-permissions-and-session-resume"><img src="https://agentmods.dev/badge/skills/kissrosecicd-hub/agents-evolution/codex-cli-permissions-and-session-resume/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/kissrosecicd-hub/agents-evolution/codex-cli-permissions-and-session-resume"><img src="https://agentmods.dev/badge/skills/kissrosecicd-hub/agents-evolution/codex-cli-permissions-and-session-resume.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 53 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,611 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00053	$0.01611
Opus 5	$0.00026	$0.00805
Sonnet 5	$0.00011	$0.00322
Haiku 4.5	$0.00005	$0.00161

Measured 10d ago against content hash 0da384c9d2d1, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

codex-cli-permissions-and-session-resume scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/codex-cli-permissions-and-session-resume/SKILL.md · 193 lines

How it starts

The opening of the file, as written. The whole thing — 193 lines — stays where its author put it; the contents beside it link to each section on GitHub.

codex-cli-permissions-and-session-resume

Use this skill when:

the user asks whether Codex currently has full access
the user mentions /permissions, FullAccess, or similar access-mode wording
the user wants to continue a previous Codex dialog immediately
the user asks how to use codex resume
the user asks how codex fork differs from codex resume
the user wants the latest session id from local Codex session files

Scope

This is a global Codex workflow, not a project-local one. It belongs in ${CODEX_HOME:-$HOME/.codex}/skills/ because the commands and session layout are reusable across repos.

Access-mode reminders

In the interactive Codex UI, /permissions is the fast check for the current access mode.
In the CLI help, the explicit full-open flag is --dangerously-bypass-approvals-and-sandbox.
--full-auto is not the same thing. It still uses workspace-write.
resume and fork accept the same global execution flags as a normal interactive launch.
Prefer documented flags from codex --help over undocumented aliases.

Fast resume commands

Prefer these:

codex resume <SESSION_UUID>
codex resume --last
codex fork <SESSION_UUID>
codex fork --last
codex resume --dangerously-bypass-approvals-and-sandbox <SESSION_UUID>
codex resume --dangerously-bypass-approvals-and-sandbox --last

Important:

codex resume officially accepts a session UUID or thread name
codex fork officially accepts a session UUID and creates a new branch of that prior session
codex resume also accepts the same global execution flags such as --dangerously-bypass-approvals-and-sandbox
prefer the UUID, not the .jsonl filename
if the filename is rollout-2026-03-21T22-54-32-019d122d-9c09-7572-addf-ee59fab48e1b.jsonl, the preferred resume command is:

codex resume 019d122d-9c09-7572-addf-ee59fab48e1b

If you want the resumed session to stay in full-open style, use:

codex resume --dangerously-bypass-approvals-and-sandbox 019d122d-9c09-7572-addf-ee59fab48e1b

Read the full file on GitHub · 193 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

10d ago First seen · 193 lines · 53 tokens per session scan A 0da384c9d2d1

Subscribe to this mod's changes

codex-cli-permissions-and-session-resume is a skill published in the GitHub repository kissrosecicd-hub/agents-evolution (31 stars, last pushed 5mo ago), licensed MIT. It adds 53 tokens to every session and 1,611 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Productivity

orbit-notion

Open Orbit briefing skill — selected by the Orbit pipeline when Notion is the user's only connected connector, or when the user explicitly scopes their daily digest to Notion. Pulls the past 24 hours of document edits, comments, mentions, and database row changes from the user's authenticated Notion connection and…

nexu-io/open-design · 117 tokens

Cortex

Operate Cortex, the LifeOS memory system — the typed Knowledge Archive (People, Companies, Ideas, Research with typed related: links) plus recall of prior work sessions, ISAs, and conversations. Search, add, harvest, develop, ingest, distill, graph-navigate, recall. USE WHEN cortex, knowledge, knowledge base, search…

danielmiessler/LifeOS · 196 tokens

pinchtab-mcp

Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.

pinchtab/pinchtab · 52 tokens

agents-evolution: Skill for Codex