What is codex-workflows?

A system for running repeatable workflows in Codex, where a workflow is a defined sequence of tasks that may be shared across multiple agents. It supports large fan-out jobs, reviews, sweeps, and multi-agent coordination.

Use it for release-difference reviews, security reviews, bug sweeps, adversarial checks, and other repeatable multi-agent jobs.

It removes the need to coordinate many similar coding-agent tasks manually. Saved workflows can be checked before they are run.

codex-workflows — Skill for Codex by robzilla1738

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add robzilla1738/Codex-Workflows --skill codex-workflows

Clone the repo

git clone --depth 1 https://github.com/robzilla1738/Codex-Workflows

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/robzilla1738/codex-workflows/codex-workflows/github.svg)](https://agentmods.dev/skills/robzilla1738/codex-workflows/codex-workflows)

Your own site

<a href="https://agentmods.dev/skills/robzilla1738/codex-workflows/codex-workflows"><img src="https://agentmods.dev/badge/skills/robzilla1738/codex-workflows/codex-workflows/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/robzilla1738/codex-workflows/codex-workflows"><img src="https://agentmods.dev/badge/skills/robzilla1738/codex-workflows/codex-workflows.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 39 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 950 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00039	$0.00950
Opus 5.5	$0.00016	$0.00380
Sonnet 5.5	$0.00008	$0.00190
Haiku 4.5	$0.00004	$0.00095

Measured 1mo ago against content hash dab80f7b2c83, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

codex-workflows scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks the agent to reveal its instructionslowSystem prompt leakage

Directions to print, repeat or translate the system prompt extract configuration the operator did not intend to expose.

- `promptSuffix` appends user-specific output instructions to every worker.

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

plugins/codex-workflows/skills/codex-workflows/SKILL.md · 78 lines

How it starts

The opening of the file, as written. The whole thing — 78 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Codex Workflows

Use this skill when the user asks to run a workflow, fan out many agents, perform release diff review, run a security or bug sweep, or save a repeatable multi-agent process.

Workflow

Prefer existing saved workflows under .codex-workflows/workflows/ or the built-in workflows under workflows/.
Validate or preview unfamiliar workflows with workflow_validate or workflow_preview before launch.
Start the workflow through the codex-workflows MCP server when available.
Expect workflow_run to open the live terminal dashboard automatically in the user's default terminal. Pass openTui: false only when the user asks for a headless run.
Use adapter: "auto" for real Codex runs unless the user explicitly asks for sdk, exec, or simulate. Auto tries SDK first and falls back to codex exec when SDK cannot launch.
When the user names subagent models, pass them as Codex model slugs:
- model sets the default worker model and overrides workflow-file models.
- reasoning sets default Codex reasoning effort.
- modelMap maps phase id, agent id, or phase:agent to a model.
- promptSuffix appends user-specific output instructions to every worker.
- If the user gives shorthand such as 5.4-mini, use the full Codex slug if known, such as gpt-5.4-mini. The runtime validates model names before fanout and will return a clear error if the model is unavailable.
For read-only review, do not pass approval: "deny". That denies workflow launch. Rely on read-only worker sandboxing and explicit no-mutation instructions in promptSuffix.
Use the system-default/wide terminal defaults unless the user asks otherwise: terminalApp: "default", terminalColumns: 190, terminalRows: 42. The plugin accepts explicit terminal sizes up to 500 columns by 120 rows.
Store normal bug-hunt run artifacts in Codex home by default. Use storageScope: "project" only when the user asks for project-local run logs or when saving a reusable workflow.
If MCP is unavailable in an installed plugin, ask the user to restart Codex or reinstall/enable the plugin before running workflows. Use the repo-local pnpm cwf CLI only when working inside the codex-workflows source repo.
Keep the main Codex thread concise. Poll status and summarize progress instead of pasting raw worker logs. The dashboard shows recent worker activity live, but exact token totals may remain pending until Codex emits usage metadata.
For bug finding, default to the bounded workflows/bug-sweep.workflow.js. Use workflows/bug-sweep-deep.workflow.js only when the user explicitly asks for a larger or deeper fanout.
For release review, default to workflows/release-diff-review.workflow.js.
For security review, default to workflows/security-auth-review.workflow.js.
Before write-capable workflows, state the sandbox mode and ask for approval.

Read the full file on GitHub · 78 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

agents/openai.yaml 428 B

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 78 lines · 39 tokens per session scan A dab80f7b2c83

Subscribe to this mod's changes

codex-workflows is a skill published in the GitHub repository robzilla1738/Codex-Workflows (63 stars, last pushed 4mo ago), licensed MIT. It adds 39 tokens to every session and 950 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (asks the agent to reveal its instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Building agents Multi-Agent Planning Workflows codex codex-plugin mcp

crewai-multi-agent

Multi-agent orchestration framework for autonomous AI collaboration. Use when building teams of specialized agents working together on complex tasks, when you need role-based agent collaboration with memory, or for production workflows requiring sequential/hierarchical execution. Built without LangChain dependencies…

davila7/claude-code-templates · 61 tokens

swarm-pi-configure

Configure Pi providers, credentials, models, role routing, and shared project policy in the guided local setup. Use for first setup, recovery, provider or model changes, or full reconfiguration; use swarm-pi-project when provider connections must stay unchanged.

JiaWeiXie/swarm-pi-code-plugin · 57 tokens

swarm-pi-implement

Implement an explicitly authorized change, fix, or refactor in an existing repository with Pi. Use for scoped file mutation; route new projects to scaffold, project tooling to setup, and design-only work to plan. Delivery, commit, and push remain separate decisions.

JiaWeiXie/swarm-pi-code-plugin · 59 tokens

codex-workflows

Getting it into your agent

Wrote this? Show the measurements

What it costs to keep this loaded

Grade A, and why

Asks the agent to reveal its instructionslowSystem prompt leakage

How it starts

Codex Workflows

Workflow

What ships with it

What this file has done since we first saw it

Other skills, from other repositories

crewai-multi-agent

crewai-multi-agent

crewai-multi-agent

crewai-multi-agent

swarm-pi-configure

swarm-pi-implement