mex: Skill for Codex

.agents/skills/mex-relay/SKILL.md

mex-relay is a skill for Codex from mex-memory/mex. It costs 107 tokens per session (867 once invoked), scanned A, original, MIT.

A workflow for preparing durable handoffs between engineers, called Relays, so another person can continue the work.

In plain words
What is it for?
Use it at the end of a session or when handing work to a person or team, with known files, code, commits, or links attached as context.
Why use it?
It gathers the current status, completed and unfinished work, blockers, decisions, and next actions in one structured handoff.

Skill for Codex

Written for Codex: agents/openai.yaml present. Also seen: installed under .agents/ (shared by several agents); $skill-name invocation.

This is mex-memory/mex's own configuration. It tells Codex how to work on mex itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything mex configures →

About the project

mex is a repository-local knowledge system for AI coding agents that turns codebase discoveries into connected Markdown documentation and a code graph. It helps agents and developers retain architectural decisions, conventions, edge cases, and project context across coding sessions while detecting documentation affected by code changes. The catalogue skills and instructions are add-ons for using mex with coding agents.

mex-memory/mex · 1,779 stars · on GitHub · mexmemory.com

Reuse

Borrowing it

Nothing to install: this file belongs to mex-memory/mex. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/mex-memory/mex/main/.agents/skills/mex-relay/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/mex-memory/mex

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mex-relay

README.md
[![agentmods](https://agentmods.dev/badge/skills/mex-memory/mex/mex-relay/github.svg)](https://agentmods.dev/skills/mex-memory/mex/mex-relay)
Your own site
<a href="https://agentmods.dev/skills/mex-memory/mex/mex-relay"><img src="https://agentmods.dev/badge/skills/mex-memory/mex/mex-relay/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mex-relay

Your own site · 80×15
<a href="https://agentmods.dev/skills/mex-memory/mex/mex-relay"><img src="https://agentmods.dev/badge/skills/mex-memory/mex/mex-relay.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 107 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 867 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00107 $0.00867
Opus 5.5 $0.00043 $0.00347
Sonnet 5.5 $0.00021 $0.00173
Haiku 4.5 $0.00011 $0.00087

Measured 1mo ago against content hash 186d1d19c4b5, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mex-relay scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/mex-relay/SKILL.md · 40 lines

How it starts

The opening of the file, as written. The whole thing — 40 lines — stays where its author put it; the contents beside it link to each section on GitHub.

MEX Relay

Prepare durable team handoffs that another engineer can continue from. Never represent a Relay as a sent message or notification.

Prepare a Relay draft

  1. Infer the useful session state: a concise summary, current position, completed work, in-progress work, blockers, unresolved questions, next actions, and relevant decisions, files, code, commits, or external links.
  2. For “whoever picks this up,” choose open-to-team. It includes future active project Members; no Member lookup is needed to save this local draft. If the user names people, retain named-recipient intent and resolve exact IDs only when needed. An unresolved named draft may stay recipient-free locally; do not silently publish it to everyone.
  3. Default to a standalone Relay. Use the local-save shortcut for a new draft; keep the structured preview/apply path for exact updates and canonical actions.
  4. Include an existing relevant Workstream only as typed evidence. Never invent one or turn saving a handoff into Workstream creation.
  5. Add optional typed context references only when the referenced IDs, paths, commits, or URLs are known. Never invent provenance.
  6. Resolve the action-scoped runtime contract. For a new draft, mex relay draft save --from <draft.json> --json performs the exact local preview/apply internally. For an update, build and preview the structured request.
  7. An explicit create/save/draft request authorizes that local write without another confirmation. Publication remains separate.
  8. Return /relays?view=drafts&draft=<id> and state that the draft is checkout-local and nothing has been delivered or shared.

Read references/cli-workflows.md before executing any Relay mutation. Load only the operation being performed.

Apply the approval policy

  • Proceed with read-only member, Workstream, draft, and Relay resolution.
  • Treat an explicit create/save/draft request as authorization only for the local draft preview and exact apply.
  • Preview a local draft deletion, explain its consequence, and obtain fresh confirmation before applying.
  • For publish, take, or close: generate a semantic preview, explain the local-versus-Git-tracked effect, and wait for fresh explicit confirmation. Apply the exact preview unchanged only after confirmation.
  • Keep Git commit, push, pull, and staging separate from every MEX authorization.
  • Never publish, take, or close merely because this skill activated.

Read the full file on GitHub · 40 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +1 lines 186d1d19c4b5
  2. 1mo ago First seen · 39 lines · 107 tokens per session scan A 70fa6eb78222

Subscribe to this mod's changes

mex-relay is a skill published in the GitHub repository mex-memory/mex (1,779 stars, last pushed yesterday), licensed MIT. It adds 107 tokens to every session and 867 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.