OpenAI Codex CLI is a terminal-based AI coding agent that can read, write, and execute code. SKILL.md files extend Codex with domain-specific knowledge for frameworks, APIs, and development workflows.
Every skill on this page has been security-verified through SkillsAI's 4-layer scan (mcp-scan, Semgrep, Trivy, VirusTotal). SKILL.md files are cross-platform — skills that work with Codex also work with Claude Code, Cursor, and other agents.
Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
developmentEnd-to-end Parallels smoke, upgrade, and rerun workflow for OpenClaw across macOS, Windows, and Linux guests. Use when Codex needs to run, rerun, debug, or interpret VM-based install, onboarding, gateway smoke tests, latest-release-to-main upgrade checks, fresh snapshot retests, or optional Discord roundtrip verification under Parallels.
developmentMaintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
developmentRun, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
developmentEnd-to-end Parallels smoke, upgrade, and rerun workflow for OpenClaw across macOS, Windows, and Linux guests. Use when Codex needs to run, rerun, debug, or interpret VM-based install, onboarding, gateway smoke tests, latest-release-to-main upgrade checks, fresh snapshot retests, or optional Discord roundtrip verification under Parallels.
developmentMaintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
developmentMaintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
developmentRun, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
developmentSend WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).
toolsControl Philips Hue lights and scenes via the OpenHue CLI.
toolsSearch GIF providers with CLI/TUI, download results, and extract stills/sheets.
toolsBluOS CLI (blu) for discovery, playback, grouping, and volume.
toolsQuery Google Places API (New) via the goplaces CLI for text search, place details, resolve, and reviews. Use for human-friendly place lookup or JSON output for scripts.
toolsA CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interact with any X API v2 endpoint.
toolsManage Apple Notes via the `memo` CLI on macOS (create, view, edit, delete, search, move, and export notes). Use when a user asks OpenClaw to add a note, list notes, search notes, or manage note folders.
toolsCreate, search, and manage Bear notes via grizzly CLI.
toolsMaintain an Obsidian-friendly memory wiki vault with wikilinks, frontmatter, and official Obsidian CLI awareness.
toolsEdit PDFs with natural-language instructions using the nano-pdf CLI.
toolsGemini CLI for one-shot Q&A, summaries, and generation.
toolsManage Things 3 via the `things` CLI on macOS (add/update projects+todos via URL scheme; read/search/list from the local Things database). Use when a user asks OpenClaw to add a task to Things, list inbox/today/upcoming, search tasks, or inspect projects/areas/tags.
toolsDelegate coding tasks to Codex, Claude Code, or Pi agents via background process. Use when: (1) building/creating new features or apps, (2) reviewing PRs (spawn in temp dir), (3) refactoring large codebases, (4) iterative coding that needs file exploration. NOT for: simple one-liner fixes (just edit), reading code (use read tool), thread-bound ACP harness requests in chat (for example spawn/run Codex or Claude Code in a Discord thread; use sessions_spawn with runtime:"acp"), or any work in ~/clawd workspace (never spawn agents here). Claude Code: use --print --permission-mode bypassPermissions (no PTY). Codex/Pi/OpenCode: pty:true required.
toolsRoute plain-language requests for Pi, Claude Code, Codex, Cursor, Copilot, OpenClaw ACP, OpenCode, Gemini CLI, Qwen, Kiro, Kimi, iFlow, Factory Droid, Kilocode, or ACP harness work into either OpenClaw ACP runtime sessions or direct acpx-driven sessions ("telephone game" flow). For coding-agent thread requests, read this skill first, then use only `sessions_spawn` for thread creation.
toolsCLI to manage emails via IMAP/SMTP. Use `himalaya` to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MIME Meta Language).
toolsUse CodexBar CLI local cost usage to summarize per-model usage for Codex or Claude, including the current (most recent) model or a full model breakdown. Trigger when asked for model-level usage/cost data from codexbar, or when you need a scriptable per-model summary from codexbar cost JSON.
toolsGoogle Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.
toolsSet up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
toolsiMessage/SMS CLI for listing chats, history, and sending messages via Messages.app.
toolsCapture frames or clips from RTSP/ONVIF cameras.
toolsCapture and automate macOS UI with the Peekaboo CLI.
toolsFoodora-only CLI for checking past orders and active order status (Deliveroo WIP).
toolsMaintainer workflow for OpenClaw GitHub Security Advisories (GHSA). Use when Codex needs to inspect, patch, validate, or publish a repo advisory, verify private-fork state, prepare advisory Markdown or JSON payloads safely, handle GHSA API-specific publish constraints, or confirm advisory publish success.
developmentInvestigate `pnpm test` memory growth, Vitest worker OOMs, and suspicious RSS increases in OpenClaw using the `scripts/test-parallel.mjs` heap snapshot tooling. Use when Codex needs to reproduce test-lane memory growth, collect repeated `.heapsnapshot` files, compare snapshots from the same worker PID, triage likely transformed-module retention versus likely runtime leaks, and fix or reduce the impact by patching cleanup logic or isolating hotspot tests.
toolsMaintainer workflow for reviewing, triaging, preparing, closing, or landing OpenClaw pull requests and related issues. Use when Codex needs to validate bug-fix claims, search for related issues or PRs, apply or recommend close/reason labels, prepare GitHub comments safely, check review-thread follow-up, or perform maintainer-style PR decision making before merge or closure.
developmentControl Sonos speakers (discover/status/play/volume/group).
toolsBest practices for using the oracle CLI (prompt + file bundling, engines, sessions, and file attachment patterns).
toolsUse the mcporter CLI to list, configure, auth, and call MCP servers/tools directly (HTTP or stdio), including ad-hoc servers, config edits, and CLI/type generation.
toolsMonitor blogs and RSS/Atom feeds for updates using the blogwatcher CLI.
toolsUse the ClawHub CLI to search, install, update, and publish agent skills from clawhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawhub CLI.
toolsManage Apple Reminders via remindctl CLI (list, add, edit, complete, delete). Supports lists, date filters, and JSON/plain output.
toolsExtract frames or short clips from videos using ffmpeg.
toolsTriage GitHub security advisories for OpenClaw with high-confidence close/keep decisions, exact tag and commit verification, trust-model checks, optional hardening notes, and a final reply ready to post and copy to clipboard.
toolsGenerate spectrograms and feature-panel visualizations from audio with the songsee CLI.
toolsGitHub operations via `gh` CLI: issues, PRs, CI runs, code review, API queries. Use when: (1) checking PR status or CI, (2) creating/commenting on issues, (3) listing/filtering PRs or issues, (4) viewing run logs. NOT for: complex web UI interactions requiring manual browser flows (use browser tooling when available), bulk operations across many repos (script with gh api), or when gh auth is not configured.
toolsRemote-control tmux sessions for interactive CLIs by sending keystrokes and scraping pane output.
toolsWork with Obsidian vaults (plain Markdown notes) and automate via obsidian-cli.
toolsLocal speech-to-text with the Whisper CLI (no API key).
toolsTriage GitHub security advisories for OpenClaw with high-confidence close/keep decisions, exact tag and commit verification, trust-model checks, optional hardening notes, and a final reply ready to post and copy to clipboard.
toolsExtract frames or short clips from videos using ffmpeg.
toolsGenerate spectrograms and feature-panel visualizations from audio with the songsee CLI.
toolsFoodora-only CLI for checking past orders and active order status (Deliveroo WIP).
toolsBest SKILL.md Files for OpenAI Codex CLI (2026) skills are SKILL.md instruction files that teach Best SKILL.md Files for OpenAI Codex CLI (2026) how to use specific tools, APIs, and services. They extend the AI assistant's capabilities beyond its built-in knowledge.
Download the SKILL.md file from SkillsAuth and place it in your project's configuration directory. For most tools, this is .cursor/skills/, .claude/, or a similar folder. See our Getting Started guide for tool-specific instructions.
Every skill on SkillsAuth passes 4 security scan layers (mcp-scan, Semgrep, Trivy, VirusTotal) before publishing. Skills that fail any scan are quarantined and never shown.