← 返回 Skills 市场
unknown-shu

Codex Account Switcher

作者 Unknown-shu · GitHub ↗ · v0.2.0 · MIT-0
cross-platform ✓ 安全检测通过
63
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install unknownshu-codex-account-switcher
功能描述
Query OpenAI Codex OAuth account quotas in OpenClaw, switch the preferred account by email/profile id, and optionally auto-switch when 5h quota drops below a...
安全使用建议
This skill appears to do what it says: it reads your OpenClaw auth profiles, uses each profile's OAuth access token to query the ChatGPT WHAM usage endpoint, and can reorder auth-state.json to make another profile primary. Before installing/running: 1) Inspect the scripts locally (they are bundled) and confirm the WHAM_URL (chatgpt.com) is acceptable for your environment. 2) Understand codex-cli-sync will import tokens from ~/.codex/auth.json into OpenClaw profiles (tokens end up on disk in auth-profiles.json) — ensure you trust the machine and repository. 3) Run with --dry-run first to confirm behavior and check backups created (profiles/state backups are made). 4) Confirm OpenClaw and the scripts run under an account with appropriate permissions; consider limiting runtime to a dedicated user or container if you are nervous. 5) If you use notifications, verify NapCat/sendUrl configuration so messages do not leak account details to unintended recipients. If you want higher assurance, run the scripts manually from a secure shell and audit network traffic during a dry-run.
功能分析
Type: OpenClaw Skill Name: unknownshu-codex-account-switcher Version: 0.2.0 The skill bundle is a legitimate utility designed to manage multiple OpenAI Codex OAuth accounts within the OpenClaw environment. It includes scripts for querying quotas, switching active accounts, and automatically failing over when rate limits are reached. While the scripts handle sensitive OAuth tokens and perform network requests to OpenAI and local notification endpoints (NapCat), the code logic is transparent, includes safety features like atomic file writes and backups, and explicitly avoids logging or printing secrets. No evidence of data exfiltration, malicious execution, or prompt injection was found; the capabilities are strictly aligned with the stated purpose of account management.
能力标签
requires-oauth-tokenrequires-sensitive-credentials
能力评估
Purpose & Capability
Name/description claim: manage openai-codex OAuth profiles and switch preferred account based on quota. The scripts read OpenClaw auth/profile files, query quota endpoints, and reorder auth-state.json. The declared required binary ('openclaw') and provided scripts match the stated purpose.
Instruction Scope
Runtime instructions and bundled scripts read local OpenClaw agent files (auth-profiles.json, auth-state.json, agent dir), optionally read ~/.codex/auth.json, call an external quota endpoint (https://chatgpt.com/backend-api/wham/usage) using each profile's access token, and may rewrite auth-state.json (to switch accounts). The SKILL.md promises tokens won't be printed; the code appears careful not to print token values. This is in-scope but is sensitive: the scripts do transmit local access tokens to the chatgpt.com usage endpoint (necessary for quota checks).
Install Mechanism
No install spec; the skill is instruction- and script-based and runs local Python scripts. Nothing is downloaded from external URLs or written to non-standard system locations beyond the OpenClaw agent directory and logs, so install risk is low.
Credentials
Registry metadata declares no required env vars; SKILL.md lists optional env vars the scripts use (OPENCLAW_HOME, OPENCLAW_AGENT_ID, etc.). The scripts access local auth/profile files (and may import ~/.codex/auth.json). They copy access/refresh tokens into OpenClaw profiles (codex-cli-sync) and use tokens to call the WHAM endpoint — this is proportional to the task but is sensitive access to local credentials and results in tokens being present in OpenClaw profile files.
Persistence & Privilege
Skill does not request always:true and does not attempt to modify other skills or system-wide settings beyond the OpenClaw auth state and profiles it legitimately manages. It writes backups before changing files. It can be run manually or as cron; autonomy is the platform default but not elevated here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install unknownshu-codex-account-switcher
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /unknownshu-codex-account-switcher 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.2.0
Add explicit Codex CLI sync: import current ~/.codex/auth.json login into OpenClaw auth profiles with dry-run and backups.
v0.1.0
Initial release: query OpenAI Codex OAuth quotas, switch preferred account, and auto-switch on low 5h quota.
元数据
Slug unknownshu-codex-account-switcher
版本 0.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Codex Account Switcher 是什么?

Query OpenAI Codex OAuth account quotas in OpenClaw, switch the preferred account by email/profile id, and optionally auto-switch when 5h quota drops below a... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 63 次。

如何安装 Codex Account Switcher?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install unknownshu-codex-account-switcher」即可一键安装,无需额外配置。

Codex Account Switcher 是免费的吗?

是的,Codex Account Switcher 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Codex Account Switcher 支持哪些平台?

Codex Account Switcher 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Codex Account Switcher?

由 Unknown-shu(@unknown-shu)开发并维护,当前版本 v0.2.0。

💬 留言讨论