← Back to Skills Marketplace
phucanh08

Codex Sub Agents 1

by phucanh08 · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1247
Downloads
0
Stars
4
Active Installs
2
Versions
Install in OpenClaw
/install codex-sub-agents-1
Description
Use OpenAI Codex CLI for coding tasks. Triggers: codex, code review, fix CI, refactor code, implement feature, coding agent, gpt-5-codex. Enables Clawdbot to delegate coding work to Codex CLI as a subagent or direct tool.
README (SKILL.md)

OpenAI Codex CLI Skill

Use OpenAI Codex CLI (codex) for coding tasks including code review, refactoring, bug fixes, CI repairs, and feature implementation. Codex CLI runs locally on your machine with full filesystem access.

When to Use

  • User asks for code changes, refactoring, or implementation
  • CI/build failures need fixing
  • Code review before commit/push
  • Large codebase exploration or explanation
  • Tasks requiring file editing + command execution
  • When GPT-5-Codex model strengths are needed (code generation, tool use)

Installation & Auth

Codex CLI requires ChatGPT Plus/Pro/Business/Enterprise subscription.

# Install
npm i -g @openai/codex

# Authenticate (opens browser for OAuth)
codex login

# Or use API key
printenv OPENAI_API_KEY | codex login --with-api-key

# Verify auth
codex login status

Core Commands

Interactive Mode (TUI)

codex                           # Launch interactive terminal UI
codex "explain this codebase"   # Start with a prompt
codex --cd ~/projects/myapp     # Set working directory

Non-Interactive (Scripting)

codex exec "fix the CI failure"                    # Run and exit
codex exec --full-auto "add input validation"      # Auto-approve workspace writes
codex exec --json "list all API endpoints"         # JSON output for parsing
codex exec -i screenshot.png "match this design"   # With image input

Session Management

codex resume               # Pick from recent sessions
codex resume --last        # Continue most recent
codex resume \x3CSESSION_ID>  # Resume specific session

Slash Commands (In TUI)

Command Purpose
/model Switch model (gpt-5-codex, gpt-5)
/approvals Set approval mode (Auto, Read Only, Full Access)
/review Code review against branch, uncommitted changes, or specific commit
/diff Show Git diff including untracked files
/compact Summarize conversation to free context
/init Generate AGENTS.md scaffold
/status Show session config and token usage
/undo Revert most recent turn
/new Start fresh conversation
/mcp List configured MCP tools
/mention \x3Cpath> Attach file to conversation

Approval Modes

Mode Behavior
Auto (default) Read/edit/run commands in workspace; asks for outside access
Read Only Browse files only; requires approval for changes
Full Access Full machine access including network (use sparingly)

Key Flags

Flag Purpose
--model, -m \x3Cmodel> Override model (gpt-5-codex, gpt-5)
--cd, -C \x3Cpath> Set working directory
--add-dir \x3Cpath> Add additional writable roots
--image, -i \x3Cpath> Attach image(s) to prompt
--full-auto Workspace write + approve on failure
--sandbox \x3Cmode> read-only, workspace-write, danger-full-access
--json Output newline-delimited JSON
--search Enable web search tool

Clawdbot Integration Patterns

Pattern 1: Direct exec Tool

Call Codex from Clawdbot's exec tool for coding tasks:

# In Clawdbot session
exec codex exec --full-auto --cd ~/projects/medreport "fix the TypeScript errors in src/components"

Pattern 2: Subagent Delegation

Spawn a coding subagent that uses Codex:

// In agents.defaults or per-agent config
{
  agents: {
    list: [
      {
        id: "coder",
        workspace: "~/clawd-coder",
        model: "openai-codex/gpt-5.2",  // Uses Codex auth
        tools: {
          allow: ["exec", "read", "write", "edit", "apply_patch", "process"]
        }
      }
    ]
  }
}

Pattern 3: CLI Backend Fallback

Configure Codex as a text-only fallback:

{
  agents: {
    defaults: {
      cliBackends: {
        "codex-cli": {
          command: "codex",
          args: ["exec", "--full-auto"],
          output: "text",
          sessionArg: null  // Codex manages its own sessions
        }
      }
    }
  }
}

Pattern 4: MCP Server Mode

Run Codex as an MCP server for other agents:

codex mcp-server  # Exposes Codex tools via stdio MCP

Clawdbot Config: OpenAI Codex Provider

Use your ChatGPT Pro subscription via the openai-codex provider:

{
  agents: {
    defaults: {
      model: { primary: "openai-codex/gpt-5.2" },
      models: {
        "openai-codex/gpt-5.2": { alias: "Codex" },
        "anthropic/claude-opus-4-5": { alias: "Opus" }
      }
    }
  }
}

Auth syncs automatically from ~/.codex/auth.json to Clawdbot's auth profiles.

Code Review Workflow

# Interactive review
codex
/review  # Choose: branch, uncommitted, or specific commit

# Non-interactive
codex exec "review the changes in this PR against main branch"

Multi-Directory Projects

# Work across monorepo packages
codex --cd apps/frontend --add-dir ../backend --add-dir ../shared

# Or in TUI
codex --cd ~/projects/myapp --add-dir ~/projects/shared-lib

Custom Slash Commands

Create reusable prompts in ~/.codex/prompts/:

\x3C!-- ~/.codex/prompts/pr.md -->
---
description: Prepare and open a draft PR
argument-hint: [BRANCH=\x3Cname>] [TITLE="\x3Ctitle>"]
---

Create branch `dev/$BRANCH` if specified.
Stage and commit changes with a clear message.
Open a draft PR with title $TITLE or auto-generate one.

Invoke: /prompts:pr BRANCH=feature-auth TITLE="Add OAuth flow"

MCP Integration

Add MCP servers to extend Codex:

# Add stdio server
codex mcp add github -- npx @anthropic/mcp-server-github

# Add HTTP server
codex mcp add docs --url https://mcp.deepwiki.com/mcp

# List configured
codex mcp list

Web Search

Enable in ~/.codex/config.toml:

[features]
web_search_request = true

[sandbox_workspace_write]
network_access = true

Then Codex can search for current docs, APIs, etc.

Best Practices

  1. Start with /init to create AGENTS.md with repo-specific instructions
  2. Use /review before commits for AI code review
  3. Set /approvals appropriately — Auto for trusted repos, Read Only for exploration
  4. Use --add-dir for monorepos instead of danger-full-access
  5. Resume sessions to maintain context across coding sessions
  6. Attach images for UI work, design specs, error screenshots

Example Workflows

Fix CI Failure

codex exec --full-auto "The CI is failing on the lint step. Fix all ESLint errors."

Refactor Component

codex exec --cd src/components "Refactor UserProfile.tsx to use React Query instead of useEffect for data fetching"

Implement Feature from Spec

codex exec -i spec.png --cd ~/projects/app "Implement this feature based on the design spec"

Code Review PR

codex exec "Review the diff between main and feature/auth branch. Focus on security issues."

Troubleshooting

Issue Solution
Auth fails Run codex logout then codex login
Commands blocked Check /approvals, may need --full-auto
Out of context Use /compact to summarize
Wrong directory Use --cd flag or check /status
Model unavailable Verify subscription tier supports model

References

Usage Guidance
This skill mostly describes how to integrate a local Codex CLI, which is reasonable — but it also tells the system to read and copy local authentication files, run Codex with flags that grant full filesystem and network access, and connect to arbitrary MCP servers/URLs. Before installing or using: 1) Verify you actually have an official codex binary from a trusted source (npm package identity, checksums). 2) Do not enable --full-auto / danger-full-access / --yolo unless you fully trust the repository and workspace; prefer read-only or explicit approval modes. 3) Disable or review any automatic auth sync: inspect ~/.codex/auth.json and ~/.clawdbot auth-profiles.json and back them up before allowing automatic copy. 4) Avoid adding unknown MCP servers or external URLs (they can receive code or data). 5) If you need to proceed, limit Codex to a confined workspace and require manual approvals for writes and network access. If you want a safer recommendation, provide the precise tooling and constraints you require and ask for a version that uses read-only workflows and explicit token provisioning.
Capability Analysis
Type: OpenClaw Skill Name: codex-sub-agents-1 Version: 1.0.1 This skill integrates the powerful 'codex' CLI tool, which is described as having 'full filesystem access' and can operate with 'danger-full-access' (full machine and network access) or `--yolo` (no approvals or sandbox) modes. The `SKILL.md` and `clawdbot-integration.md` files instruct the AI agent to use `codex exec` commands, frequently recommending the `--full-auto` flag, which allows unapproved workspace writes. This creates a significant prompt injection vulnerability, as a malicious prompt could lead to arbitrary code execution and file modification within the workspace without explicit user approval. Additionally, sensitive authentication tokens from `~/.codex/auth.json` are automatically synced.
Capability Assessment
Purpose & Capability
The skill claims to enable use of a local OpenAI Codex CLI for coding tasks — the commands and patterns described match that purpose. However the documentation also instructs automatic syncing of auth from ~/.codex/auth.json into Clawdbot auth profiles and describes granting 'full access' (network + filesystem) and adding external MCP servers, which are broader privileges than a minimal CLI wrapper strictly needs.
Instruction Scope
SKILL.md explicitly directs reading and copying credential files (~/.codex/auth.json → ~/.clawdbot/.../auth-profiles.json), running codex with --full-auto / danger-full-access / --yolo flags, and adding arbitrary MCP servers/URLs. These are concrete instructions that allow token movement, unrestricted file writes and network access, and connecting to external endpoints — all of which expand the agent's scope beyond simple code editing.
Install Mechanism
This is an instruction-only skill with no install spec or shipped code files, so nothing is downloaded or written by the skill itself. That lowers the mechanical install risk.
Credentials
The skill declares no required env vars, but its instructions reference OPENAI_API_KEY and require access to ~/.codex/auth.json and Clawdbot auth profiles. Implicitly reading and syncing sensitive tokens is requested without those credentials being declared or constrained, which is disproportionate and surprising to users who expect only CLI invocation guidance.
Persistence & Privilege
Although always:false and there's no installer, the guidance instructs modifying Clawdbot auth profiles (writing tokens into ~/.clawdbot/agents/.../auth-profiles.json) and running long-lived MCP servers — actions that change other agent configuration and enable persistent cross-agent privileges. That degree of configuration/credential modification should be explicit and limited.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install codex-sub-agents-1
  3. After installation, invoke the skill by name or use /codex-sub-agents-1
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Documentation updated; no functional changes to the skill's features or behavior. - SKILL.md reformatted and revised for clarity and readability.
v1.0.0
codex-sub-agents-1 v1.0.0 - Initial release, enabling Clawdbot to use OpenAI Codex CLI as a subagent or direct coding tool. - Supports code review, bug fixing, refactoring, CI repair, and feature implementation via Codex CLI. - Provides detailed workflows for integrating Codex with Clawdbot, including exec tool calls, subagents, CLI fallback, and MCP server mode. - Includes a comprehensive SKILL.md covering install/auth, commands, approval modes, flags, and configuration. - Documents best practices, troubleshooting steps, and integration patterns for multi-agent coding workflows.
Metadata
Slug codex-sub-agents-1
Version 1.0.1
License
All-time Installs 4
Active Installs 4
Total Versions 2
Frequently Asked Questions

What is Codex Sub Agents 1?

Use OpenAI Codex CLI for coding tasks. Triggers: codex, code review, fix CI, refactor code, implement feature, coding agent, gpt-5-codex. Enables Clawdbot to delegate coding work to Codex CLI as a subagent or direct tool. It is an AI Agent Skill for Claude Code / OpenClaw, with 1247 downloads so far.

How do I install Codex Sub Agents 1?

Run "/install codex-sub-agents-1" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Codex Sub Agents 1 free?

Yes, Codex Sub Agents 1 is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Codex Sub Agents 1 support?

Codex Sub Agents 1 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Codex Sub Agents 1?

It is built and maintained by phucanh08 (@phucanh08); the current version is v1.0.1.

💬 Comments