CodexBar is a macOS menu bar app that displays usage limits, balances, costs, and reset times for AI coding and related service providers. It is for people who use services such as Codex, Claude Code, Cursor, Gemini, Copilot, or other supported providers and need to monitor their accounts. The catalogue add-ons extend its agent-related workflow.
Borrowing it
Nothing to install: this file belongs to steipete/CodexBar. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/steipete/CodexBar/main/.agents/skills/release-codexbar/SKILL.mdgit clone --depth 1 https://github.com/steipete/CodexBarWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/steipete/codexbar/release-codexbar)<a href="https://agentmods.dev/skills/steipete/codexbar/release-codexbar"><img src="https://agentmods.dev/badge/skills/steipete/codexbar/release-codexbar/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/steipete/codexbar/release-codexbar"><img src="https://agentmods.dev/badge/skills/steipete/codexbar/release-codexbar.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00027 | $0.01574 |
| Opus 5.5 | $0.00011 | $0.00630 |
| Sonnet 5.5 | $0.00005 | $0.00315 |
| Haiku 4.5 | $0.00003 | $0.00157 |
Grade A, and why
release-codexbar scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 142 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CodexBar Release
Use for releasing signed/notarized macOS apps, especially repos with Sparkle appcasts and Homebrew casks.
Start
- Work from the app repo unless asked otherwise.
- Check repo state, current version, latest tag/release, and release docs/scripts.
- Confirm
CHANGELOG.mdis complete, user-facing, deduped, and dated for the release. - Prefer the repo release script; patch small script/test blockers instead of bypassing the release path.
- Never print key material. Keep 1Password references and local key paths as references only.
- Load
$release-privateif it exists before resolving Peter-owned credential locators.
Key Material
Use $one-password for secret handling. op only in tmux/persistent shell; no broad env, set, export -p, or secret scans.
Known App Store Connect shape:
- fields:
private_key_p8,key_id,issuer_id - keep all three fields from the same 1Password item; do not mix with stale values from
~/.profile - resolve Peter-owned item refs from
$release-private
Known Sparkle key:
- resolve the private key file from
$release-private - pass as
SPARKLE_PRIVATE_KEY_FILE
Safe env file pattern:
APP_STORE_CONNECT_API_KEY_P8=<1Password ref from release-private>
APP_STORE_CONNECT_KEY_ID=<1Password ref from release-private>
APP_STORE_CONNECT_ISSUER_ID=<1Password ref from release-private>
SPARKLE_PRIVATE_KEY_FILE=<path from release-private>
Run with op run --account my.1password.com --env-file <file> -- <script>, then delete the temp env file.
CodexBar
Paths:
- repo:
~/Projects/codexbar - release script:
Scripts/release.sh - signing/notarization:
Scripts/sign-and-notarize.sh - appcast:
Scripts/make_appcast.sh,appcast.xml - release assets:
CodexBar-macos-universal-<version>.zip,CodexBar-macos-universal-<version>.dSYM.zip - packaged app:
CodexBar.app - version file:
version.env - changelog:
CHANGELOG.md - Homebrew tap:
~/Projects/homebrew-tap - cask:
~/Projects/homebrew-tap/Casks/codexbar.rb - formula:
~/Projects/homebrew-tap/Formula/codexbar.rb - CLI release workflow:
.github/workflows/release-cli.yml
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 142 lines · 27 tokens per session scan A f2a3699e1888
release-codexbar is a skill published in the GitHub repository steipete/CodexBar (22,829 stars, last pushed today), licensed MIT. It adds 27 tokens to every session and 1,574 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
crow-ci-queue
Serialize the label-gated ci:full suite across the PRs of live Crow sessions — per repo, exactly one session PR holds ci:full, runs the full suite and merges; then the next ready PR is updated from main and labeled. Strips the extras, orders the rest, and waits on a background watcher. Keeps running after a repo…
releasing-plugin-versions
Use when releasing a new plugin version, bumping versions, creating git tags, or publishing GitHub releases for this marketplace.
ios-bump-version
An iOS release helper for changing an app's marketing version, the version number shown to users, and committing the change on the appropriate branch. It first checks the version format, Git state, branch, and current version.
release-announcement
Write a release announcement — changelog, blog post, in-app note, or social post — that leads with user impact, names the audience, and includes upgrade/migration steps without filler.
release
Fully automate a release with version-bump and childhood.
release-notes
Generate user-facing release notes from tickets, PRDs, or changelogs. Creates clear, engaging summaries organized by category (new features, improvements, fixes). Use when writing release notes, creating changelogs, announcing product updates, or summarizing what shipped.