Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/shiptoday/forge-plugin-codex/forge-workflownpx skills add ShipToday/forge-plugin-codex --skill forge-workflowgit clone --depth 1 https://github.com/ShipToday/forge-plugin-codexWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00203 | $0.09950 |
| Opus 5 | $0.00102 | $0.04975 |
| Sonnet 5 | $0.00041 | $0.01990 |
| Haiku 4.5 | $0.00020 | $0.00995 |
Grade A, and why
forge-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 883 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Manage Workflow
You are helping an organization admin manage custom Forge workflows conversationally — either authoring a new workflow or deleting an existing org- or team-scoped override. You do this conversationally, not as a step-by-step wizard.
Forge is an MCP server; the tools you will call are:
forge__list_skills_catalog— returns the skills, workflows, and the field schema manifest the server considers admin-editable. Workflow rows here have only{id, name, description, scope}— step lists are NOT included.forge__get_workflow— returns a single workflow's full definition (preset + ordered steps with skill metadata). Use this to retrieve the baseline before drafting an override.forge__save_workflow— atomically writes a new workflow (and any new custom skills) to the Forge catalog.forge__delete_workflow— removes an org- or team-scoped preset, so the scope falls back through the cascade (org → system, team → org → system). Note that Forge's built-in workflows ship disabled, so falling back to the system default also stops the workflow running — see the Delete path for how to state this to the admin.
Why this skill is schema-driven
You do not carry a hardcoded list of workflow / step fields. The
catalog response includes a field_schema block that enumerates every
admin-editable field on the workflow preset and its steps. When the
server adds a new column, the manifest grows, and this skill picks it
up automatically — there is no list of fields in this prompt to keep
in sync.
Rule: All field names, types, defaults, examples, and validators come from
field_schemain the catalog response. Never invent field names, never hardcode the editable set, and never assume a field is nullable / required without checking its manifest entry.
Authoring overrides requires the baseline
When an admin wants to override an existing workflow at a narrower
scope (system → org, or org → team), you cannot infer the baseline
steps from the catalog alone. forge__list_skills_catalog returns
workflow rows as {id, name, description, scope} — no step data.
Use forge__get_workflow (Step 3) to retrieve the baseline before
proposing changes. Never draft override steps from a workflow's
description alone — the description is a hint, not a contract.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 883 lines · 203 tokens per session scan A 97bc703a7554
forge-workflow is a skill published in the GitHub repository ShipToday/forge-plugin-codex (2 stars, last pushed 3d ago), licensed MIT. It adds 203 tokens to every session and 9,950 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
manage-taskboard
Manage Codex Taskboard / e-taskboard work with taskctl. Use for taskboard issue IDs, status sync, comments, or taskctl cloud setup—not for unrelated product docs.
prd
Generates a Product Requirements Document from a natural language app description. Asks clarifying questions, researches similar apps, defines scope, stack, architecture, and produces a structured PRD that Archon can decompose into a campaign.
unharness
Safely leave Citadel using the active adoption receipt. Produces a no-write, reviewable plan, preserves a portable archive, removes only exact owned material, and reports modified or externally registered surfaces as retained or unknown. Legacy installs must be imported before exact leave is claimed.
ambient-project
Quietly maintain a useful project view from meaningful work in the current Codex session. Use when work creates a task, bug, decision, idea, risk, milestone, plan, progress update, or explicit completion.
triage
Apply a formal state machine to issues — assign category (bug/enhancement/question/spike) and state (needs-triage → needs-info → ready-for-agent → ready-for-human → wontfix). Issues marked ready-for-agent become inputs to supergraph:plan. Use when processing a backlog, reviewing new issues, or preparing work for…
plan-to-issues
Turns a work plan discussed in the current conversation into a structured set of GitHub issues in the corezoid/corezoid-ai-plugin repo: one parent epic issue plus one child issue per logical task, grouped by a milestone and typed with labels. Use whenever the user says "заведи задачи", "создай issues", "разбей план на…