tkersey/accts
codex/skills/accts/SKILL.md
Manage local Codex account switching with a metadata-only TOML config, safe auth.json vault backups, pending manual account activation, and weekly reset-cycle rotation. Use when the user asks to manage Codex accounts, switch Codex accounts, inspect account status, or rotate through accounts after weekly limits reset.
$ install --global
skillsauthnpx skillsauth add tkersey/dotfiles acctsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 23, 2026, 4:49 AM163.8s4 files scanned
SKILL.md
- name:
- accts
- description:
- Manage local Codex account switching with a metadata-only TOML config, safe auth.json vault backups, pending manual account activation, and weekly reset-cycle rotation. Use when the user asks to manage Codex accounts, switch Codex accounts, inspect account status, or rotate through accounts after weekly limits reset.
Accts
Purpose
Use accts to manage multiple local Codex accounts without putting OAuth secrets in prompts, TOML, logs, or skill instructions. The skill owns only Codex CLI auth at ~/.codex/auth.json; do not extend it to Claude, Gemini, or unrelated agent CLIs.
The executable is:
python3 codex/skills/accts/scripts/accts.py --help
Safety Rules
- Treat
auth.jsonas secret OAuth material. Never print, summarize, paste, or store its contents outside the owner-only vault. - Keep
accts.tomlmetadata-only. If TOML contains token-like keys such asaccess_token,refresh_token,api_key,secret, orpassword, stop and fix the config rather than tolerating it. - Use temp
CODEX_HOMEandACCTS_HOMEfor tests, dry runs, or examples unless the user explicitly wants to mutate the live account setup. - Do not install Codex lifecycle hooks for account switching. Use
queue,next, and explicitactivatecommands so account changes are visible user-owned steps. - A direct
activatechangesauth.json, but the running turn may already have loaded credentials. Prefer activating before starting the turn that should use the new account.
Config
Default config location:
python3 codex/skills/accts/scripts/accts.py init --dry-run
python3 codex/skills/accts/scripts/accts.py init
Config schema:
[settings]
# codex_home = "~/.codex"
# vault_dir = "~/.local/share/accts/vault"
# state_dir = "~/.local/share/accts/state"
# cas_cwd = "/path/to/repo"
[accounts.personal]
label = "Personal"
enabled = true
reset_participates = true
vault = "personal/auth.json"
Core Workflow
Back up each account once:
python3 codex/skills/accts/scripts/accts.py backup personal --label "Personal"
python3 codex/skills/accts/scripts/accts.py ls
python3 codex/skills/accts/scripts/accts.py status
Switch immediately when no current turn depends on the old account:
python3 codex/skills/accts/scripts/accts.py activate personal --backup-current
Queue a switch, inspect the pending account, then activate it manually before the turn that should use it:
python3 codex/skills/accts/scripts/accts.py queue personal
python3 codex/skills/accts/scripts/accts.py next
python3 codex/skills/accts/scripts/accts.py activate personal --backup-current
Weekly Reset Rotation
Use reset-cycle rotation after the weekly Codex limit reset so each participating account receives one real turn near the same reset window.
python3 codex/skills/accts/scripts/accts.py reset-cycle status
python3 codex/skills/accts/scripts/accts.py reset-cycle start
python3 codex/skills/accts/scripts/accts.py next
reset-cycle start reads CAS account status and queues the first eligible vaulted account. Activate the account shown by next before using it. After that account has had a real turn, run reset-cycle advance --account <name> to mark it touched and queue the next untouched account. The cycle completes after every enabled reset_participates = true vaulted account has been marked touched.
If CAS is unavailable, do not invent reset timing. Use reset-cycle status --state-only to inspect local state, or ask the user before using an explicit offline --resets-at timestamp.
Related Skills
tkersey/fm
tools
VerifiedTrustedCommunity
Invokes Apple's macOS 27 fm command-line tool from a local Mac to use the on-device system model or Private Cloud Compute, including instructions, image prompts, schema-constrained JSON, and noninteractive automation. Use when the user asks to run Apple Foundation Models through fm, compare system versus pcc, generate structured output, or automate fm without Swift or an app.
64SKILL.mdUpdated Jul 20, 2026
tkersey/hylo
development
VerifiedTrustedCommunity
Compile historical Codex sessions into governed counterfactual evidence, evaluate an existing owner-applied candidate through blinded paired HCTP trials, and fold observable evidence into RUN, OBSERVE, or STOP. Use for `$hylo`, CRF extraction, counterfactual replay, source-governed direct or historical trials, sealed evidence, paired baseline/candidate evaluation, causal frontiers, or evidence-governed improvement.
64SKILL.mdUpdated Jul 13, 2026
tkersey/ledger
testing
VerifiedTrustedCommunity
Ensure a `ledger` command is available on PATH; materialize, validate, record, replay, and project requested Actuating artifacts without taking semantic or execution authority; coordinate the shared Learnings/Synesthesia/Negative Ledger lifecycle checkpoint and repo-local source-memory reconciliation; address Universalist plans and receipts; and perform pure artifact validation.
64SKILL.mdUpdated Jun 29, 2026
tkersey/review-fold
testing
VerifiedTrustedCommunity
Classify and quotient review findings, failing tests, incidents, bug reports, migration failures, and other witnessed falsifiers against accepted intent and the current Construction. Author counterexample-set/v1 without selecting repairs, counting review credit, or granting mutation.
64SKILL.mdUpdated Jun 28, 2026