codex-cli

codex-cli is a skill for Claude Code, Codex from scarletkc/agents. It costs 96 tokens per session (2,639 once invoked), scanned B, original, Apache-2.0.

Guidance for using Codex CLI, a separate coding agent running on the same computer, to review or carry out work. It explains when a second model is worth the time and cost.

In plain words
What is it for?
Use it to decide when to request an independent code review or hand off a bounded implementation task to Codex CLI, including choices about the model, reasoning effort, and sandbox access.
Why use it?
It helps avoid relying only on the model that wrote the code, especially when the change is complex or important. It also clarifies how to limit runs and handle permissions.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions Claude Code; reads ~/.codex paths; runs codex exec.

Good fit Use it to decide when to request an independent code review or hand off a bounded implementation task to Codex CLI, including choices about the model, reasoning effort, and sandbox access.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/scarletkc/agents/codex-cli
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add scarletkc/agents --skill codex-cli
Clone the repo
git clone --depth 1 https://github.com/scarletkc/agents

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for codex-cli

README.md
[![agentmods](https://agentmods.dev/badge/skills/scarletkc/agents/codex-cli/github.svg)](https://agentmods.dev/skills/scarletkc/agents/codex-cli)
Your own site
<a href="https://agentmods.dev/skills/scarletkc/agents/codex-cli"><img src="https://agentmods.dev/badge/skills/scarletkc/agents/codex-cli/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for codex-cli

Your own site · 80×15
<a href="https://agentmods.dev/skills/scarletkc/agents/codex-cli"><img src="https://agentmods.dev/badge/skills/scarletkc/agents/codex-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 96 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,639 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 4 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Agent Snooping · line 25
    Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.
    Fix: Remove all code or instructions that access agent configuration directories (.claude/, .codex/, .gemini/). If configuration values are needed, pass them explicitly as parameters or environment variabl
  • medium Rogue Agent · line 14
    Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
    Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
  • medium Agent Snooping · line 57
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
  • medium Agent Snooping · line 77
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00096 $0.02639
Opus 5.5 $0.00038 $0.01056
Sonnet 5.5 $0.00019 $0.00528
Haiku 4.5 $0.00010 $0.00264

Measured 1mo ago against content hash cc72db26486e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

codex-cli scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

in `~/.codex/config.toml`. If the binary is missing, auth has expired, or a
skills/codex-cli/SKILL.md · 195 lines

How it starts

The opening of the file, as written. The whole thing — 195 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Codex CLI

Codex is a second agent on the same machine, with its own model behind it. That is the entire reason to reach for it: a model that did not write the code has no memory of intending it to work. Everything below follows from that one asymmetry — who wrote it, who reads it, and how much thinking each step is worth paying for.

This skill is for the supervising agent, not for Codex. If you are Codex, this does not apply — calling yourself buys nothing but a second opinion from the same mind. Claude Code is the intended caller.

It also assumes the machine is already set up: codex on PATH, the user logged in, and whatever MCP servers and tools they want available configured in ~/.codex/config.toml. If the binary is missing, auth has expired, or a run dies on permissions, report that plainly and stop — quietly falling back to doing it yourself hides the fact that the review the user asked for never happened.

Concrete flags belong to codex --help, which is authoritative and moves faster than this file. What follows is the judgment.

When to reach for it

Every invocation is a second model spending the user's money and your wall-clock time. It earns that when the problem is hard enough that another model changes the outcome — not as a reflex after every edit. Doing the work yourself and checking it with the project's own tests remains the normal path.

  • When the user asks for it. They have already made the call; don't re-litigate it. Match the model and effort to the task and go.
  • After writing something complex or expensive to get wrong. Your own review of your own diff is the weakest review available, because you are checking the code against the intent you already have in your head rather than against what it says. That weakness only matters when the defect would be costly — concurrency, migrations, security-adjacent paths, platform assumptions, anything on a compatibility surface. A routine edit that the suite already covers is not worth a review pass. Counter-example: an agent changed one side of a path comparison to a normalized form and left the other side platform-native; every test it wrote passed, because it wrote them against the same wrong mental model.
  • When a demanding change is bounded well enough to describe in a prompt. A hand-off is worth it when you can state the goal, the files, and the acceptance check in a paragraph. That paragraph is also the honest test of whether you understand the change — if you cannot write it, delegating it just moves the confusion downstream. What "bounded" means is scoped-change, and it binds Codex exactly as it binds you: pass the boundary along in the prompt, because Codex cannot infer where the user drew it.
  • When the work is long, mechanical, and verifiable. Wide renames, repetitive migrations, and mass edits with a green suite proving them buy throughput rather than insight, and they are cheap to check.
  • When you are stuck. After two failed attempts on the same defect, a third attempt from the same context tends to repeat the second. A fresh agent with the symptom and the reproduction, and none of your accumulated theory, is a better use of the next few minutes.

Read the full file on GitHub · 195 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 195 lines · 96 tokens per session scan B cc72db26486e

Subscribe to this mod's changes

codex-cli is a skill published in the GitHub repository scarletkc/agents (225 stars, last pushed today), licensed Apache-2.0. It adds 96 tokens to every session and 2,639 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

maintaining-windows-health

Hands-on playbook for Windows 11 disk cleanup, dev-machine optimization, and proactive health alerting. Use when the PC is full or slow, when a BSOD / Kernel-Power 41 / crash dump / commit-memory pressure happened, when the user asks to free disk space, audit storage, set up disk/memory alerts, or restore the same…

CodeAlive-AI/ai-driven-development · 191 tokens

prompt-engineering

Universal prompt engineering techniques for any LLM. Use when crafting, optimizing, or reviewing prompts for AI models. Triggers on requests like "improve this prompt", "write a system prompt", "optimize my instructions", "help me prompt engineer", "audit this prompt", "review my prompt", or when building agentic…

CodeAlive-AI/ai-driven-development · 76 tokens

installing-cli-tools

Install, upgrade, configure, and verify developer CLI tools safely. Use when a user asks to install a new CLI, command-line app, SDK tool, package-manager binary, GitHub release binary, language runtime tool, or AI/vendor CLI; configure shell PATH/completions; run first login; set API keys, tokens, or env variables…

CodeAlive-AI/ai-driven-development · 94 tokens

repo-activity-summary

Summarize a repository's recent engineering activity from git history — technologies, work types, churn hotspots, contributor patterns, and velocity. Use when asking "what has this repo been working on", "is this project active", "who contributes what", "where are the hotspots", or before onboarding onto an unfamiliar…

CodeAlive-AI/ai-driven-development · 70 tokens

fetch-url-as-markdown

Fetch a web page (URL) and return clean Markdown via local trafilatura, with Exa MCP as a fallback for JS-rendered or anti-bot pages. Use when the user asks to read, fetch, scrape, summarize, or quote a URL — prefer this over the built-in WebFetch tool. Don't use for binary files (PDFs, images, archives) or for…

CodeAlive-AI/ai-driven-development · 90 tokens

clipboard

Copy text to clipboard with optional rich formatting. Triggers on "copy to clipboard", "copy that", "pbcopy", "copy formatted", "copy rich text".

CodeAlive-AI/ai-driven-development · 36 tokens