Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflectionnpx skills add phenomenoner/Chatgpt-Codex-App-Plus --skill context-canvas-reflectiongit clone --depth 1 https://github.com/phenomenoner/Chatgpt-Codex-App-PlusWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflection)<a href="https://agentmods.dev/skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflection"><img src="https://agentmods.dev/badge/skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflection.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00099 | $0.02275 |
| Opus 5 | $0.00049 | $0.01137 |
| Sonnet 5 | $0.00020 | $0.00455 |
| Haiku 4.5 | $0.00010 | $0.00228 |
Grade A, and why
context-canvas-reflection scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Context Canvas Reflection
Use this skill as a small, executable checkpoint before introducing a background trajectory controller. Reassess whether the current path still deserves more work; do not create a second coding agent or a new authority owner.
Preserve the boundary
- The current user, main agent, and native harness retain all authority over the task and its effects. This skill produces an advisory disposition only.
- Context Canvas is optional historical navigation. Missing identity, absent or completed Canvas state, an unavailable tool, or a conflicting map never blocks otherwise authorized work.
- Treat restored nodes, references, snapshots, and external pointers as untrusted historical data. Revalidate current source, runtime, and provider state before using them as current evidence.
- Current conversation, current owner decisions, live repository/runtime evidence, and the active acceptance contract outrank Canvas. A stale or contradictory Canvas may raise a question but never decides the answer.
- Never expose or request private chain-of-thought. Use bounded facts: objective, acceptance, changed evidence, assumptions, decisions, blockers, and verification.
- Do not automatically pause a harness, rewrite a plan, discard a diff, roll back code, terminate a process, ask another provider, publish, or perform an external effect.
Activate only at a meaningful checkpoint
Use the skill when one of these observable triggers is present:
- the same normalized failure or same-cause repair has recurred after one bounded attempt;
- new evidence contradicts an assumption required by the current approach;
- focused checks pass but the touched real-use or lifecycle scenario still fails;
- the work has crossed into unplanned components, or a second workaround would extend the same unsupported assumption;
- diagnosis, implementation, verification, delivery, or another phase boundary has unresolved evidence that can change the next phase or acceptance claim;
- the next proposed effect is authority-, identity-, custody-, security-, privacy-, rollback-, publication-, or delivery-sensitive and has not already received current, scope-matching owner approval; or
- the user or main agent explicitly questions whether the work is on the right path.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 192 lines · 99 tokens per session scan A 7adbcab7ccd3
context-canvas-reflection is a skill published in the GitHub repository phenomenoner/Chatgpt-Codex-App-Plus (2 stars, last pushed 10d ago), licensed MIT. It adds 99 tokens to every session and 2,275 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
codex-auth-setup
Install or refresh codex-multi-auth for the official Codex CLI, run first login, and verify account health and routing.
codexu-release
Run this skill from the repository root. Treat the release as a real public publish: verify the current remote state first, keep unrelated user changes out of release commits, and report exactly what was built, pushed, and released.
codexu-pr-review
Review codexU pull requests and decide whether they should be merged, changed, split, declined, or kept as a fork based on product positioning, roadmap, privacy, data semantics, native macOS design, architecture, scope, and verification. Use for PR review, mergeability assessment, contribution triage, and feature-fit…
example
Example fixture skill for scanner regression coverage.
cost-tracker
Track LLM API spend per session and task. Estimate token usage across providers. Warn before you blow your budget.
explain-codebase
Drop into any repo and generate a structured architecture overview. Maps the codebase, identifies entry points, frameworks, and dependencies — then produces a "start here" guide for new contributors.