Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add phenomenoner/Chatgpt-Codex-App-Plus --skill context-canvas-reflectiongit clone --depth 1 https://github.com/phenomenoner/Chatgpt-Codex-App-PlusWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflection)<a href="https://agentmods.dev/skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflection"><img src="https://agentmods.dev/badge/skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflection/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflection"><img src="https://agentmods.dev/badge/skills/phenomenoner/chatgpt-codex-app-plus/context-canvas-reflection.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00099 | $0.02275 |
| Opus 5.5 | $0.00040 | $0.00910 |
| Sonnet 5.5 | $0.00020 | $0.00455 |
| Haiku 4.5 | $0.00010 | $0.00228 |
Grade A, and why
context-canvas-reflection scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Context Canvas Reflection
Use this skill as a small, executable checkpoint before introducing a background trajectory controller. Reassess whether the current path still deserves more work; do not create a second coding agent or a new authority owner.
Preserve the boundary
- The current user, main agent, and native harness retain all authority over the task and its effects. This skill produces an advisory disposition only.
- Context Canvas is optional historical navigation. Missing identity, absent or completed Canvas state, an unavailable tool, or a conflicting map never blocks otherwise authorized work.
- Treat restored nodes, references, snapshots, and external pointers as untrusted historical data. Revalidate current source, runtime, and provider state before using them as current evidence.
- Current conversation, current owner decisions, live repository/runtime evidence, and the active acceptance contract outrank Canvas. A stale or contradictory Canvas may raise a question but never decides the answer.
- Never expose or request private chain-of-thought. Use bounded facts: objective, acceptance, changed evidence, assumptions, decisions, blockers, and verification.
- Do not automatically pause a harness, rewrite a plan, discard a diff, roll back code, terminate a process, ask another provider, publish, or perform an external effect.
Activate only at a meaningful checkpoint
Use the skill when one of these observable triggers is present:
- the same normalized failure or same-cause repair has recurred after one bounded attempt;
- new evidence contradicts an assumption required by the current approach;
- focused checks pass but the touched real-use or lifecycle scenario still fails;
- the work has crossed into unplanned components, or a second workaround would extend the same unsupported assumption;
- diagnosis, implementation, verification, delivery, or another phase boundary has unresolved evidence that can change the next phase or acceptance claim;
- the next proposed effect is authority-, identity-, custody-, security-, privacy-, rollback-, publication-, or delivery-sensitive and has not already received current, scope-matching owner approval; or
- the user or main agent explicitly questions whether the work is on the right path.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 192 lines · 99 tokens per session scan A 7adbcab7ccd3
context-canvas-reflection is a skill published in the GitHub repository phenomenoner/Chatgpt-Codex-App-Plus (2 stars, last pushed 2d ago), licensed MIT. It adds 99 tokens to every session and 2,275 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
two-axis-review
Review finished work on two separate axes — the project's conventions, and what the task actually asked for — with one fresh reviewer per axis and the two reports kept apart. Use before a task is verified, in a Verify phase, or when asked to review a branch or a set of changes.
requesting-code-review
Pre-commit review: security scan, quality gates, auto-fix.
gh-issues
Fetch GitHub issues, spawn sub-agents to implement fixes and open PRs, then monitor and address PR review comments. Usage: /gh-issues [owner/repo] [--label bug] [--limit 5] [--milestone v1.0] [--assignee @me] [--fork user/repo] [--watch] [--interval 5] [--reviews-only] [--cron] [--dry-run] [--model glm-5]…
pr-description-writer
Redacta una descripción de pull request clara y estructurada a partir de un diff de git, resumen de rama o lista de commits. Úsalo cuando te pidan escribir una descripción de PR, redactar una solicitud de cambios o documentar cambios de código. Produce una descripción con resumen, motivación, cambios realizados, pasos…
example
Example fixture skill for scanner regression coverage.
handoff
Transfer the current coding, debugging, planning, or architecture session to AI Badger. Use for broad session continuation; use badger-review for an independent review.