by tigerless-labs · Codex Skill · ★ 5.8k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 5,825 |
| Forks | 375 |
| Language | Python |
| Category | Codex Skill |
| License | MIT |
| Quality Score | 73/100 |
| Open Issues | 14 |
| Last Updated | 2026-11-02 |
| Created | 2026-06-06 |
| Platforms | claude-code, cli, codex, python |
| Est. Tokens | ~16k |
cost-xray See what your AI coding agent actually sends to the API — and what each part costs. Most usage tools read local logs. That shows the total cost of a call or session, but it misses the request-time context assembled before the model is invoked: system prompts, tool schemas, MCP blocks, tool results, cache reads/writes, and previous thinking blocks.
Looking for a cost-xray alternative? If you're comparing cost-xray with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Orchestrate Claude, Codex and Grok in one app. Open-source (MIT), reuses the subscriptions you already pay for
CRS-自建Claude Code镜像，一站式开源中转服务，让 Claude、OpenAI、Gemini、Droid 订阅统一接入，支持拼车共享，更高效分摊成本，原生工具无缝使用。
Semi-automated research assistant for academic research and software development. Supports Claude Code, Codex
Agent Package Manager
Proxy that exposes Antigravity provided claude / gemini models, so we can use them in Claude Code and OpenClaw
An improved implementation of the Ralph Wiggum technique for autonomous AI agent orchestration
Explore other popular codex skill tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: