Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add RayFernando1337/rayfernando-skills --skill waves-codexgit clone --depth 1 https://github.com/RayFernando1337/rayfernando-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rayfernando1337/rayfernando-skills/waves-codex)<a href="https://agentmods.dev/skills/rayfernando1337/rayfernando-skills/waves-codex"><img src="https://agentmods.dev/badge/skills/rayfernando1337/rayfernando-skills/waves-codex.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00127 | $0.08992 |
| Opus 5 | $0.00063 | $0.04496 |
| Sonnet 5 | $0.00025 | $0.01798 |
| Haiku 4.5 | $0.00013 | $0.00899 |
Grade A, and why
waves-codex scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- Run tests, validators, `curl`, screenshots, parsers, or smoke checks as How it starts
The opening of the file, as written. The whole thing — 698 lines — stays where its author put it; the contents beside it link to each section on GitHub.
WAVES — Workers · Aggregate · Verify · Extend (Codex)
Run wave-based orchestration with Codex subagents. A wave is a bounded round of isolated workers in parallel, then a round that verifies what came back, then a deliberate decision to build on it — not an open-ended loop. Use this skill when a task is too broad for one clean linear pass but can be split into independent slices. You are the manager: discover the problem shape, stage and verify coverage, decompose it, spawn bounded Codex workers, collect one structured handoff from each worker, verify important claims, and synthesize the final deliverable.
The shape of every wave — WAVE: Workers fan out across disjoint slices -> Aggregate their handoffs -> Verify the evidence (the moat) -> Extend into another wave only when warranted. A loop doesn't know when to stop; a wave does, because verification is the stop function. (Invoke deliberately - a run spawns more agents than usual.)
Current Codex docs checked on 2026-07-19: Codex subagents are enabled by default
in current releases, built-in roles include default, worker, and explorer,
custom agents live in ~/.codex/agents/ or .codex/agents/ (TOML; project
agents load in trusted projects only), and subagent limits live under [agents]
in config.toml. Official docs no longer enumerate the collaboration tool
names; the current (multi-agent V2) surface exposes spawn_agent,
send_message, followup_task, wait_agent, interrupt_agent, and
list_agents, while threads created before the V2 runtime resume on the legacy
V1 set (spawn_agent, send_input, resume_agent, wait_agent,
close_agent) — read the live tool registry rather than assuming one set.
Spawning an unknown agent_type fails with an error rather than silently
falling back (fallback in Step 2). V2 delegation payloads are encrypted between
model calls, so don't build workflows that inspect spawn prompts from rollout
history. spawn_agents_on_csv is documented as experimental; use it when it is
exposed in the active Codex surface, and fall back to normal subagent waves
when it is not. No current Codex doc confirms a general-purpose claim-verifier
or critic hook; use a verifier subagent, CSV verification pass, tests,
validators, or codex exec --output-schema instead.
Native delegation on GPT-5.6 (how this skill plugs in): Sol and Terra run the
V2 multi-agent runtime, and the delegation mode is derived from reasoning
effort per turn -- ultra means proactive (the model spawns on its own
judgment), every other effort means explicit-request-only, where the
documented triggers are direct user asks and "applicable AGENTS.md or skill
instructions" -- this skill's spawn instructions are that sanctioned
channel, at any effort, no ultra required. Avoid ultra for wave runs:
proactive spawning happens outside your manifest, and its children inherit the
parent's model and effort (an ultra parent breeds ultra children -- the
runaway-cost failure mode). Native V2 spawns also fork the parent's history
by default (fork_turns defaults to all; filtered, but the child sees
your conversation), and full-history forks inherit the parent's agent type /
model / effort and reject overrides -- so for disjoint wave slices, request
fresh-context workers (no history fork), which is also the only spawn
shape that can be routed to a different model or effort. V2 ignores
agents.max_depth; its binding limit is concurrent agent slots (4 including
the manager by default; agents.max_threads + 1 when set) -- batch wider
waves accordingly.
Read these references when using the skill:
references/handoff-format.mdfor the exact worker handoff contract.references/verification.mdfor verification gates and verifier-worker playbooks.references/examples.mdfor decomposition recipes.references/recommended-config.mdfor Codex config and custom agent snippets.references/adaptation-notes.mdfor Cursor-to-Codex translation notes.
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 670 B
- evals/evals.json 7.5 KB
- evals/files/handoff-chunk-1.md 1.4 KB
- evals/files/handoff-chunk-2.md 1.3 KB
- evals/files/handoff-research.md 1.6 KB
- evals/files/support-tickets.csv 3.0 KB
- evals/README.md 4.6 KB
- references/adaptation-notes.md 18 KB
- references/examples.md 17 KB
- references/handoff-format.md 7.1 KB
- references/recommended-config.md 11 KB
- references/verification.md 12 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 698 lines · 127 tokens per session scan A b412aee55ca0
waves-codex is a skill published in the GitHub repository RayFernando1337/rayfernando-skills (128 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 127 tokens to every session and 8,992 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
extract-source-sample
Given the path to a finished content-goose ad-run folder, extract everything that defines that ad — recipe shot list, VO script, characters, voices, world, atom-skills, master mp4 — and emit a source-sample.json in the exact shape the upload-ad-sample skill writes to the Goose Ads library. Also links every character…
create-video-seedance-2-fal
Generate a single 4-15s vertical video clip with ByteDance Seedance 2.0 reference-to-video via fal.ai. Multi-image reference (avatar + product + setting), native lip-synced VO + ambient audio (generate-audio on by default), internal multi-cut handling within one render. Routes through the GooseWorks FAL proxy (bills…
comprehensive-enrichment
Enrich any person or company from any identifier — email, name, LinkedIn URL, domain, company name, Twitter/X handle. Use when asked to enrich, look up, or research a lead, contact, person, or company.
google-search-ads-builder
End-to-end Google Search Ads campaign builder. Performs deep keyword research (competitor SEO, review language mining, Reddit/HN community terminology, site audit), builds keyword architecture with funnel mapping and intent classification, creates ad group structure, generates headline/description variants, builds…
create-chatgpt-mockup
Render pixel-accurate ChatGPT mobile (iOS) screen mockups in light mode from a thread JSON. Supports user text bubbles, user image attachments, assistant markdown prose, citation chips, the OpenAI spiral logo, the Apps-SDK GPT chip in the composer, and three header styles (model-tag, plain title, "Get Plus"). Fixed…
create-workflow-diagram
Create FigJam/Miro-style workflow diagrams as high-quality PNG images from plain-text workflow descriptions. Renders beautiful HTML diagrams with connected nodes, arrows, and labels, then screenshots them for sharing.