Codex CLI

Use the local codex CLI as a non-interactive worker with durable artifacts and exact session continuation. The wrapper runs Codex in the requested workspace; authorization for that workspace and any external data transfer belongs to the invoking agent. Let the parent agent own scope, validation, integration, and the user-facing verdict.

Authority Guard

Claude may choose this skill on its own when delegating implementation, review, or a second opinion would help the task the user asked for. Keep Codex inside that task's scope. A session UUID or a mention of Codex, by itself, is not a request to run it. If the user has declined sharing with OpenAI, do not choose it unless they ask for Codex again. Ask first when the workspace Codex can read includes secrets or personal data.