What is boundedrelay-setup?

A procedure for checking and explaining a local BoundedRelay connection used by Claude Code. BoundedRelay is a local service that lets Claude Code connect to selected Codex capabilities within approved workspace limits.

Use it to run the required health checks, inspect available worker capabilities and workspace access, identify the intended repository, and report blockers without exposing secrets.

It helps diagnose connection, authentication, version, access, and capability problems without changing the configured model provider or silently enabling proposal features.

boundedrelay-setup — Skill for Claude Code by mohammad19974

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add mohammad19974/bounded-relay --skill setup

Clone the repo

git clone --depth 1 https://github.com/mohammad19974/bounded-relay

Made for: Claude Code.

Or install boundedrelay, the plugin that ships this one along with the rest of its 2 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/mohammad19974/bounded-relay/setup/github.svg)](https://agentmods.dev/skills/mohammad19974/bounded-relay/setup)

Your own site

<a href="https://agentmods.dev/skills/mohammad19974/bounded-relay/setup"><img src="https://agentmods.dev/badge/skills/mohammad19974/bounded-relay/setup/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/mohammad19974/bounded-relay/setup"><img src="https://agentmods.dev/badge/skills/mohammad19974/bounded-relay/setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 27 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 345 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00027	$0.00345
Opus 5.5	$0.00011	$0.00138
Sonnet 5.5	$0.00005	$0.00069
Haiku 4.5	$0.00003	$0.00034

Measured 1mo ago against content hash 0013de0fcfd1, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

boundedrelay-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

integrations/claude-code-plugin/skills/setup/SKILL.md · 34 lines

What it actually says

Set up BoundedRelay

Use this skill when the user wants to connect or diagnose BoundedRelay.

Confirm Node.js satisfies the version declared by the installed BoundedRelay package and that boundedrelay resolves on PATH.
Run boundedrelay doctor. Report the observed Codex CLI, authentication, allowed roots, model allowlist, proposal state, limits, and blockers. Never print tokens or inherited environment.
Confirm the MCP server exposes codex_worker_capabilities, codex_worker_workspace, codex_worker_sdd_route, and codex_worker_sdd_review. Proposal support is optional and must be explicitly enabled by the user.
Resolve the intended consumer repository through codex_worker_workspace. Never widen allowed roots merely to make a check pass.
Keep Claude Code's current host model. This plugin intentionally has no model override. Report a Claude model label only when the host supplies trustworthy metadata; otherwise say unavailable.
For Spec Kit, direct the user to the adjacent integrations/spec-kit/README.md. Do not initialize Spec Kit, install an extension, edit .gitignore, or create commits without matching authority.

BoundedRelay is a one-way local boundary: Claude coordinates and may call Codex. Codex cannot call Claude through this plugin. Jobs are process-memory state and disappear when the MCP server exits.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 34 lines · 27 tokens per session scan A 0013de0fcfd1

Subscribe to this mod's changes

boundedrelay-setup is a skill published in the GitHub repository mohammad19974/bounded-relay (1 stars, last pushed 15d ago), licensed MIT. It adds 27 tokens to every session and 345 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Building agents ai-tools claude claude-code-plugin codex codex-cli codex-plugin

decision-report

Generate a portable stakeholder decision report for a CV deployment decision. TRIGGER when: user explicitly asks for a decision report, manager report, or stakeholder doc after a cost crossover has been computed; phrases: "write me a decision report", "generate a report for my manager", "I need a stakeholder doc"…

Borda/vision-delivery · 124 tokens

deliver-cv-project

Turn an independently evaluated CV model or pipeline into a verified delivery handoff without copying volatile platform recipes. TRIGGER when: user has a working model, Workflow, OCR pipeline, or tracker and asks to export it, run locally, integrate an app/camera/RTSP source, deploy, productionize, monitor drift, add…

Borda/vision-delivery · 166 tokens

estimate-economics

Estimate CV annotation, training, deployment, and operations economics. TRIGGER when: user invokes $estimate-economics or /sentinel:estimate-economics, asks labeling/training cost, managed vs self-hosted, build-vs-buy, scale economics, deployment crossover, or selects managed-at-scale after a passing proof. SKIP when…

Borda/vision-delivery · 137 tokens

classify-or-flag

Produce one whole-image verdict: pass/fail, category, compliance, or anomaly. TRIGGER when: user asks whether an image is defective/compliant; to flag bad parts, classify product images, run image-level quality control, detect an anomaly, or build binary/multi-class classification. SKIP when: user asks how many…

Borda/vision-delivery · 144 tokens

detect-and-analyze

Detect instances and analyze boxes, counts, crops, regions, or metadata. TRIGGER when: user asks to count/detect objects, report the number of defects, build a model that counts trucks, tally boxes/pallets on a conveyor, find workers lacking PPE, crop detections, extract an ROI, estimate box-relative size, or report…