Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/yanchuk/claude-plugin-codex/claudenpx skills add yanchuk/claude-plugin-codex --skill claudegit clone --depth 1 https://github.com/yanchuk/claude-plugin-codexWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yanchuk/claude-plugin-codex/claude)<a href="https://agentmods.dev/skills/yanchuk/claude-plugin-codex/claude"><img src="https://agentmods.dev/badge/skills/yanchuk/claude-plugin-codex/claude.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00095 | $0.02894 |
| Opus 5 | $0.00048 | $0.01447 |
| Sonnet 5 | $0.00019 | $0.00579 |
| Haiku 4.5 | $0.00010 | $0.00289 |
Grade A, and why
claude scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 251 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Claude Code Advisor
Use this skill to route Codex work to the local Claude Code CLI through the bundled companion runtime. Codex remains the orchestrator. Claude Code is the advisor, checker, or reviewer.
Invocation Contract
Canonical forms:
$claude setup
$claude advise [--max-turns <n>] <question>
$claude do [--background] [--write] [--model sonnet|opus] [--max-turns <n>] <prepared task>
$claude rescue [--background] [--write] [--resume] [--model sonnet|opus] [--max-turns <n>] <task>
$claude review [--base <ref>]
$claude adversarial-review [--base <ref>] [focus]
$claude monitor [job-id]
$claude status [job-id]
$claude result [job-id]
$claude cancel [job-id]
$claude resume-candidate
If Codex passes slash-style text through to this skill, normalize it before routing:
/claude <subcommand> <args> -> $claude <subcommand> <args>
/claude:setup -> $claude setup
/claude:advise <question> -> $claude advise <question>
/claude:do <prepared task> -> $claude do <prepared task>
/claude:rescue <task> -> $claude rescue <task>
/claude:review [--base <ref>] -> $claude review [--base <ref>]
/claude:adversarial-review [focus] -> $claude adversarial-review [focus]
/claude:monitor [job-id] -> $claude monitor [job-id]
/claude:status [job-id] -> $claude status [job-id]
/claude:result [job-id] -> $claude result [job-id]
/claude:cancel [job-id] -> $claude cancel [job-id]
Do not add or depend on undocumented plugin manifest fields for custom slash
commands. The guaranteed Codex surface is the $claude skill mention.
Hard Rules
- Always call the bundled companion at
<plugin root>/scripts/claude-companion.mjsusing an absolute path. The plugin root is theclaude-code-advisordirectory that contains.codex-plugin/,skills/, andscripts/. - Do not call
claudedirectly from the skill instructions. - Return a concise human summary unless the user asks for raw JSON.
- Review and adversarial-review are read-only.
- Write-capable Claude work requires explicit
--write. - Every default companion launch must be non-interactive. Keep the runtime's
MCP isolation flags:
--mcp-config '{"mcpServers":{}}' --strict-mcp-config --no-chrome. These are essential for unattended runs; without them Claude Code can stop at the MCP permission picker instead of producing an answer. - Do not use project MCP servers unless the user explicitly asks for MCP.
Background mode must refuse the current directory and ancestor directories
with
.mcp.jsonunless--allow-mcpis explicit. Use--allow-mcponly after that explicit user approval. - Keep read-only prepared local tasks (
doandrescue) on local tools by default:Read,Glob,Grep.advisemay use web tools. Fordoandrescue, enableWebFetchorWebSearchonly when the task needs web access and--allow-webis explicit. - Do not pass
--model sonnetfor advice, review, adversarial-review, rescue, or monitor work unless the user explicitly asks for Sonnet. Let Claude Code use the user's configured default model. - Pass
--effort xhighfor advice, review, adversarial-review, rescue, and background jobs unless the user explicitly asks for another effort. - Sonnet is reserved for explicit junior-agent delegation governed by the
tasks-for-sonnetskill. Never send Sonnet a vague task. - Before
$claude do --model sonnet, loadtasks-for-sonnetand prepare the task from that skill. The prompt must include the role, absolute paths or a pinned commit, a word cap, "What Must Be True", "Known Constraints", and "Mechanical Verification". - Use
$claude do --model opusfor complex/high-judgment Claude tasks when the user asks for or agrees to a stronger Claude worker. Treat Opus as the Claude-side choice for tasks you would not hand to a junior agent. - Foreground
advise,do, andrescueuse a larger default max-turn budget for prepared work.reviewandadversarial-reviewstay tight and structured with one default turn. If a foreground prepared task hits the max-turn limit, rerun with--max-turns <higher>or narrow the task. - Do not auto-resume a Claude job when the companion says explicit selection is required.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 251 lines · 95 tokens per session scan A d7924ed7c14a
claude is a skill published in the GitHub repository yanchuk/claude-plugin-codex (18 stars, last pushed 3mo ago), licensed MIT. It adds 95 tokens to every session and 2,894 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
design
Set visual and interaction direction for any UI surface (web, React, TUI, CLI, desktop, Qt, design-system tokens) before any UI code. Direction-first: generates 3-4 distinct directions via verbalized sampling, picks one via per-axis single-select, then derives palette, typography, spacing, motion budget. Loads when…
askme
Verbalized Sampling (VS) protocol for intent exploration before planning, mode-aware. Default exhaustive runs full VS; collaborative runs tip-sharing dialogue; adversarial walks the design tree one fork at a time. Auto-detects from phrasing ("help me refine" → collaborative, "poke holes" → adversarial); override via…
git-branchless
Enforce idiomatic git-branchless during planning and executing tasks — detached-HEAD-first work, in-memory rebase via git move, event-log recovery via git undo, deferred branch creation, speculative-merge git sync for base updates. Use when planning or executing multi-commit work, history rewrites, stack edits…
grill-ai-mastery
Hybrid interview that probes AI-engineering mastery by tip-vocabulary depth — entity referencing, loop closure, observability, harness improvement — not by token usage or LOC. Start collaborative (two-way tip exchange), escalate to adversarial probing when depth is lacking. Trigger when the user says "interview me on…
grill-me
Adversarial relentless interview against any plan or design until shared understanding is reached. Walk the decision tree, resolve dependencies one answer at a time, recommend a default per question. Trigger when the user says "grill me", "stress-test this", "interview me about this design", or otherwise asks for…
proof-driven
Proof-driven development. Use when implementing with formal verification using property-based testing, theorem proving, or proof tactics; zero unproven property policy enforced.