Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add strzhao/autopilot --skill autopilot-doctor-codexgit clone --depth 1 https://github.com/strzhao/autopilotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/strzhao/autopilot/autopilot-doctor-codex)<a href="https://agentmods.dev/skills/strzhao/autopilot/autopilot-doctor-codex"><img src="https://agentmods.dev/badge/skills/strzhao/autopilot/autopilot-doctor-codex/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/strzhao/autopilot/autopilot-doctor-codex"><img src="https://agentmods.dev/badge/skills/strzhao/autopilot/autopilot-doctor-codex.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00053 | $0.00459 |
| Opus 5.5 | $0.00021 | $0.00184 |
| Sonnet 5.5 | $0.00011 | $0.00092 |
| Haiku 4.5 | $0.00005 | $0.00046 |
Grade A, and why
autopilot-doctor-codex scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Autopilot Doctor for Codex
这是 Claude 版 autopilot-doctor 的 Codex 兼容入口。
基线文件
把以下文件当作详细评分与检查基线:
plugins/autopilot/skills/autopilot-doctor/SKILL.md
读取基线后,按本技能的 Codex 覆盖规则执行。
Codex 覆盖规则
- 诊断报告写入
.codex/doctor-report.md - 不写入
.claude/doctor-report.md - 额外检查本仓库的 Codex readiness:
.codex/AGENTS.md是否存在.agents.md是否存在.codex/config.toml是否存在,且已启用codex_hooks与project_doc_fallback_filenames.agents/skills/是否存在并包含 Codex 技能.codex/hooks.json是否存在且 JSON 合法- 是否仍在依赖旧的 bridge、watcher、plugin-sync、软链接共享目录方案
- 当用户传入
--fix:- 只修复用户明确同意的项
- 优先修复 Codex 自身目录下的问题
- 不要为了 Codex 适配去改现有 Claude 插件文件,除非用户明确要求
输出要求
- 评分维度、加权总分、Top 问题、Top 建议沿用基线格式
- 明确区分:
- Claude readiness
- Codex readiness
- 最终把完整报告写到
.codex/doctor-report.md - 对用户的聊天摘要要短,重点给:
- 总分
- 最影响 autopilot 的 3 个问题
- 最先做的 3 个改进项
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 45 lines · 53 tokens per session scan A 30e6d64eefee
autopilot-doctor-codex is a skill published in the GitHub repository strzhao/autopilot (32 stars, last pushed 6d ago), licensed MIT. It adds 53 tokens to every session and 459 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
fix-bug
Diagnoses and fixes bugs using a test-first workflow (reproduce, diagnose, fix). Use this skill whenever the user reports a bug, describes unexpected behavior, or asks to investigate or fix a defect. Even if the user says "something's broken", "this isn't working", "fix this bug", or "why does X happen", load this…
debug
Debug issues with iterative fix loop. Gathers problem description, investigates, then enters fix-verify cycle. Triggers on "debug", "fix this", "troubleshoot". Use when the goal is to fix a specific reported issue. For exploration or new features, use brainstorm or plan-creation.
doctor
Diagnose Polisade Orchestrator project health.
resolve-diagnostics
Resolves IDE diagnostics (inspections and analyzer findings) at the warning or higher severity level for a given set of files. Use this skill when a workflow's refactoring step calls for resolving diagnostics, or when the user asks to fix warnings, inspections, or static analysis findings in specific files.
defect
A command for registering a software defect, meaning behavior that does not work as intended, and creating a task to fix it. The defect and its fix task receive tracked IDs and are stored in the project's backlog and task folders.
defect-hunting
Use when reviewing code, auditing an app, writing a guard rule or test, or certifying any threshold/constant/formula. Finds the defects a diff review structurally cannot see — the second write path, the mis-calibrated constant, the rule that cannot fail. Triggers from code-reviewer, /app-audit, qa-engineer…