Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add yohey-w/kagemusha --skill codex-chatgpt-consultgit clone --depth 1 https://github.com/yohey-w/kagemushaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yohey-w/kagemusha/codex-chatgpt-consult)<a href="https://agentmods.dev/skills/yohey-w/kagemusha/codex-chatgpt-consult"><img src="https://agentmods.dev/badge/skills/yohey-w/kagemusha/codex-chatgpt-consult/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yohey-w/kagemusha/codex-chatgpt-consult"><img src="https://agentmods.dev/badge/skills/yohey-w/kagemusha/codex-chatgpt-consult.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.01934 |
| Opus 5.5 | $0.00021 | $0.00774 |
| Sonnet 5.5 | $0.00010 | $0.00387 |
| Haiku 4.5 | $0.00005 | $0.00193 |
Grade A, and why
codex-chatgpt-consult scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 101 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Consult ChatGPT Web from Codex Desktop
Carry one authorized consultation through the standard in-app Browser, preserve the complete final answer, and only then synthesize it. Preparing a prompt or clicking Send is not completion.
Prerequisites and route
- This is a Codex Desktop skill. The current session must list the
browser:control-in-app-browserskill and support the in-app Browser (iab). - Read that Browser skill and the selected browser's complete current documentation before browser interaction. Those instructions are authoritative for setup and UI control.
- Select the in-app Browser explicitly and keep using that same browser binding. Do not substitute Chrome, Edge, Computer Use, standalone Playwright, a private API, CDP, or a custom browser client.
- If the Browser skill, its required runtime, or
iabis unavailable, stop and report which prerequisite is missing.
Authorization boundary
A direct request to consult ChatGPT Web authorizes one scoped consultation message and retrieval of its answer. It does not authorize sending unrelated workspace material, contacting another person or service, changing account or security settings, or starting an additional consultation. A request to draft or review a prompt without sending does not authorize Send.
When an authorized enclosing workflow such as $codex-pro-plan-build invokes this skill, that workflow may authorize multiple consultation messages within its approved purpose and information scope. This skill still handles exactly one outbound message per invocation. Its exactly-once send and uncertain-retry rules prevent duplication of that message; they are not a cap on the enclosing workflow. Honor explicit count, cost, or time limits, and return to the user before the workflow expands its purpose or the information sent.
Follow all higher-priority local outbound restrictions. If a local rule requires separate approval, queue, or user action, stop at that boundary. Never weaken a hook, browser control, account protection, or other security setting to make the consultation work.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 14d ago Changed 39e1a6eebf49
- 25d ago First seen · 101 lines · 52 tokens per session scan A 15de65c266bf
codex-chatgpt-consult is a skill published in the GitHub repository yohey-w/kagemusha (16 stars, last pushed 5d ago), licensed MIT. It adds 52 tokens to every session and 1,934 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-21.
Other skills, from other repositories
tencent-ima-wiki
A browser-automation workflow for reading articles from a logged-in Tencent ima knowledge base. It extracts article links and text from the ima.qq.com/wikis site, including pages whose details are not directly visible in the webpage.
chrome-devtools
Chrome DevTools browser automation via MCP - control a live Chrome browser.
gated-reach
Read a Reddit thread or single tweet the host cannot fetch — 'what does this Reddit thread say', 'top comment on this post', 'what does this tweet say' — when reddit.com is refused or x.com 402s.
ui-harness-cli
Run the Agentweaver persona-driven Playwright UI evidence harness. Use for a specific persona's deployed browser flow, end-to-end UI validation, or investigation of a UI-reported issue.
apify-collect
Collect fresh job-posting URLs into /.dear-hiring-manager/urls.txt by running an Apify job scraper — the discovery source for /batch. Runs a configured Apify actor via the Apify API (Bearer-header auth) with a search built from the profile's desired titles + level + location, extracts the direct application URL per…
batch
Batch job-application filler. Given several job URLs (or a urls.txt file), run the assisted-apply flow for each in its own browser tab — fit-gate, fill-or-flag, stop before Submit — skipping stale or low-fit postings, then present one combined review table so the human can approve each tab one by one. Use for /batch…