Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zjp1997720/zhijian-skills --skill codex-theme-studiogit clone --depth 1 https://github.com/zjp1997720/zhijian-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zjp1997720/zhijian-skills/codex-theme-studio)<a href="https://agentmods.dev/skills/zjp1997720/zhijian-skills/codex-theme-studio"><img src="https://agentmods.dev/badge/skills/zjp1997720/zhijian-skills/codex-theme-studio/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zjp1997720/zhijian-skills/codex-theme-studio"><img src="https://agentmods.dev/badge/skills/zjp1997720/zhijian-skills/codex-theme-studio.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00113 | $0.01161 |
| Opus 5 | $0.00056 | $0.00580 |
| Sonnet 5 | $0.00023 | $0.00232 |
| Haiku 4.5 | $0.00011 | $0.00116 |
Grade A, and why
codex-theme-studio scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 62 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Codex Theme Studio
Turn a visual direction, brand system, or supplied image into a reversible Codex Desktop theme through loopback-only Chrome DevTools injection.
Modes
- Design: prepare a portable theme directory and validate it without installing or restarting Codex.
- Apply: run the safety preflight, install the runtime, and import or create a theme. Obtain explicit authorization before restarting a running Codex app.
- Verify or repair: reproduce the affected route, run deterministic tests, Doctor, and live Verify, then repair only selector or layout failures supported by evidence.
- Pause or restore: Pause removes the active styling. Restore also stops the managed CDP session and returns Codex to the official appearance.
Workflow
- Read capability-boundary.md. Confirm the official macOS host, authorization boundary, and excluded targets.
- For design work, read design-workflow.md, theme-schema.md, and preset-policy.md. For layout changes, also read compatibility-policy.md.
- Run
./tests/run-tests.sh. Repair failures before proceeding. - For design-only work, build outside the installed Skill and validate the prepared directory with
./scripts/injector.mjs --check-payload --theme-dir <theme-directory>. - For installation, read safety-and-rollback.md, then run
./scripts/install-dream-skin-macos.sh --no-launch. - For a bundled preset, run
./scripts/list-presets.mjs, then import it without applying:./scripts/import-preset-macos.sh --id <preset-id> --no-apply. - For user-supplied artwork, use
./scripts/customize-theme-macos.sh; never overwrite bundled Skill assets. If new raster artwork is required, invoke$imagegenwhen available and follow imagegen-assets.md. - Restart only with explicit authorization by running the installed
scripts/start-dream-skin-macos.sh --prompt-restart. Persistence through the resident manager requires separate explicit authorization. - Follow verification-contract.md. Verify the home route, task route, New Task transition, normal window, and full screen. Inspect screenshots for overlap, overflow, weak contrast, crop errors, and missing native controls.
- If verification fails, use troubleshooting.md, repair one defect class at a time, and restore before reporting a failed outcome.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/interface.yaml 246 B
- agents/openai.yaml 294 B
- assets/base-codex-theme.txt 295 B
- assets/dream-skin.css 20 KB
- assets/generic-workflow.png 58 KB
- assets/generic-workflow.svg 2.1 KB
- assets/renderer-inject.js 13 KB runs code
- assets/theme.json 1.0 KB
- evals/history/2026-09-04-v1.2.0.json 780 B
- evals/output/cases.jsonl 2.9 KB
- evals/trigger_cases.json 754 B
- LICENSE 1.1 KB
- manifest.json 1.1 KB
- NOTICE.md 1.8 KB
- package-lock.json 250 B
- package.json 233 B
- presets/graphite-paper/generic-workflow.png 58 KB
- presets/graphite-paper/preset.json 201 B
- presets/graphite-paper/theme.json 1.0 KB
- presets/zhijian-ai/portal-hero-v2.png 1715 KB
- presets/zhijian-ai/preset.json 408 B
- presets/zhijian-ai/theme.json 1.0 KB
- references/asset-provenance.md 2.8 KB
- references/capability-boundary.md 1.5 KB
- references/compatibility-policy.md 1.4 KB
- references/design-workflow.md 3.0 KB
- references/imagegen-assets.md 2.9 KB
- references/operator-runbook.md 3.4 KB
- references/output-eval-baseline.md 1.2 KB
- references/preset-policy.md 1.2 KB
- references/provenance.md 852 B
- references/qa-inventory.md 3.5 KB
- references/safety-and-rollback.md 3.4 KB
- references/theme-schema.md 1.6 KB
- references/troubleshooting.md 2.7 KB
- references/verification-contract.md 2.6 KB
- scripts/audit-skill-package.mjs 2.8 KB runs code
- scripts/base-theme-state.mjs 6.3 KB runs code
- scripts/common-macos.sh 21 KB runs code
- scripts/customize-theme-macos.sh 4.6 KB runs code
- scripts/doctor-macos.sh 3.0 KB runs code
- scripts/import-preset-macos.sh 1.6 KB runs code
- scripts/injector.mjs 50 KB runs code
- scripts/install-dream-skin-macos.sh 6.7 KB runs code
- scripts/install-resident-manager-macos.sh 2.9 KB runs code
- scripts/list-presets.mjs 1.5 KB runs code
- scripts/load-image-theme-macos.sh 4.0 KB runs code
- scripts/pause-dream-skin-macos.sh 2.3 KB runs code
- scripts/resident-manager-macos.sh 2.1 KB runs code
- scripts/restore-dream-skin-macos.sh 2.2 KB runs code
- scripts/restore-version-macos.sh 1.5 KB runs code
- scripts/start-dream-skin-macos.sh 4.7 KB runs code
- scripts/status-dream-skin-macos.sh 3.0 KB runs code
- scripts/switch-theme-macos.sh 2.0 KB runs code
- scripts/theme-config.mjs 5.6 KB runs code
- scripts/verification-contract.mjs 13 KB runs code
- scripts/verify-dream-skin-macos.sh 1.5 KB runs code
- scripts/version-backup-state.mjs 16 KB runs code
- scripts/write-theme.mjs 5.0 KB runs code
- security/network_policy.json 1005 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +17 lines · -4 tokens per session 3c86a4289c67
- 11d ago First seen · 45 lines · 117 tokens per session scan A c4c8fb66c444
codex-theme-studio is a skill published in the GitHub repository zjp1997720/zhijian-skills (595 stars, last pushed 5d ago), licensed MIT. It adds 113 tokens to every session and 1,161 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
html-ppt-zhangzara-retro-zine
A neighborhood zine on the disappearing corner shops — portraits, voices, and what a block loses when they close. Built as a decision-grade story deck for community, local readers.
html-ppt-zhangzara-studio
A photography studio's portfolio-and-rate deck — the signature work, the process, and the packages that win the brief. Built as a decision-grade design craft deck for prospective clients.
motion-frames
A single-frame motion-design composition with looping CSS animations — rotating type ring, animated globe, ticking timer, parallax labels. Renders as a hero video poster you can hand straight to HyperFrames or any keyframe-based exporter. Use when the brief asks for "motion design", "animated hero", "loop", "video…
webgl-halftone-drift
A self-contained WebGL2 hero: a flowing field screened through a rotated halftone dot grid into a duotone print aesthetic; move the cursor to bend the drift.
webgl-holographic-foil
A self-contained WebGL2 hero: thin-film interference over a crushed-foil surface whose palette shifts with the viewing angle; move the cursor to tilt the film.
motion-graphics
A short, design-led motion graphic where motion is the message — kinetic typography, stat count-up, chart/data-viz hit, logo sting / brand lockup, lower-third / callout / social overlay, animated map (highlight regions, connect places, zoom to a location), animated tweet / news-article / headline, webpage / UI…