by Jia-Ethan
Versioned Codex instruction deployment with preview, ownership manifests, hook isolation, scenario evaluation, and recovery.
# Add to your Claude Code skills
git clone https://github.com/Jia-Ethan/codex-keysmithGuides for using cli tools skills like codex-keysmith.
Last scanned: 7/15/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-07-15T06:12:47.365Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}codex-keysmith is an open-source cli tools skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Jia-Ethan. Versioned Codex instruction deployment with preview, ownership manifests, hook isolation, scenario evaluation, and recovery. It has 4,119 GitHub stars.
Yes. codex-keysmith passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/Jia-Ethan/codex-keysmith" and add it to your Claude Code skills directory (see the Installation section above).
codex-keysmith is primarily written in Python. It is open-source under Jia-Ethan on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other CLI Tools skills you can browse and compare side by side. Open the CLI Tools category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh codex-keysmith against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Keysmith 系列为本地 AI 工具安全部署、验证和撤销自定义指令。codex-keysmith 把一份 Markdown 部署到 Codex 配置目录（通常是 ~/.codex），让之后的新会话加载它。
[!WARNING] 这会改变该 Codex 配置下的全局行为，不是项目级开关：写入
config.toml的model_instructions_file，并默认把整份hooks.json隔离为hooks.json.disabled。部署、卸载和中断恢复先预览，确认后加--yes；--restore-hooks会立即执行且不接受--yes。先阅读examples/gpt-unrestricted.md和SECURITY.md。
| 项目 | 目标工具 | 部署面 | 稳妥安装 | Desktop |
|---|---|---|---|---|
| codex-keysmith | Codex | 全局 ~/.codex 指令 |
稳定 CLI Release | 未签名 Beta |
| claude-keysmith | Claude Code | 项目 / 用户 CLAUDE.md import |
源码 CLI | 未签名 Beta |
| grok-keysmith | Grok Build | 全局 ~/.grok/rules（不改 AGENTS.md） |
稳定 CLI Release | 未签名 Beta |
| zcode-keysmith | ZCode App | 用户目录 system-role + wrapper | 仅源码 | 无 |
codex-instruct-v*.py 与 SHA256SUMS，校验后再运行；当前稳定资产名为 codex-instruct-v0.3.9.py。不要 curl | python。CODE_SIGNING_POLICY.md。python3 codex-instruct.py。此源码树与最新稳定 Release 均为 0.3.9，以 Releases 页为准。# 把 vX.Y.Z 换成 Releases 页的最新稳定 tag
base='https://github.com/Jia-Ethan/codex-keysmith/releases/download/vX.Y.Z'
curl --fail --location --remote-name "$base/codex-instruct-vX.Y.Z.py"
curl --fail --location --remote-name "$base/SHA256SUMS"
awk '$2 == "codex-instruct-vX.Y.Z.py"' SHA256SUMS | shasum -a 256 -c -
python3 codex-instruct-vX.Y.Z.py --version
python3 codex-instruct-vX.Y.Z.py --codex-dir ~/.codex --status --lang zh-CN
python3 codex-instruct-vX.Y.Z.py --codex-dir ~/.codex --dry-run --lang zh-CN
# 确认目标目录、提示词来源和写入计划后：
python3 codex-instruct-vX.Y.Z.py --codex-dir ~/.codex --yes --lang zh-CN
源码路径：git clone https://github.com/Jia-Ethan/codex-keysmith.git && cd codex-keysmith，再把上述脚本名换成 codex-instruct.py。部署后关闭旧任务、开一个新 Codex 会话。省略 --codex-dir 会处理全部自动发现的配置目录。Windows 命令把 python3 换成 python。
| 路径 | 会发生什么 |
|---|---|
<codex-dir>/gpt-unrestricted.md（或 --name） |
新建，或先备份再替换 |
<codex-dir>/config.toml |
只改顶层 model_instructions_file |
<codex-dir>/hooks.json |
默认整体隔离为 hooks.json.disabled |
<codex-dir>/.codex-keysmith-manifest.json |
记录本层所有权，供卸载使用 |
场景部署另写 <target>/.codex-keysmith/，不改上述指令层文件。完整边界见 docs/reference.md。
以下以 Release 单文件为例；源码 checkout 请把文件名换成 codex-instruct.py。
python3 codex-instruct-vX.Y.Z.py --codex-dir ~/.codex --restore-hooks --lang zh-CN
python3 codex-instruct-vX.Y.Z.py --codex-dir ~/.codex --uninstall --lang zh-CN
python3 codex-instruct-vX.Y.Z.py --codex-dir ~/.codex --uninstall --yes --lang zh-CN
卸载每次只撤销最新一层。--reactivate 从 v0.3.9 开始提供：
python3 codex-instruct-vX.Y.Z.py --codex-dir ~/.codex --reactivate --lang zh-CN
python3 codex-instruct-vX.Y.Z.py --codex-dir ~/.codex --reactivate --yes --lang zh-CN
若 --status 显示 inactive-by-config，--reactivate 只补回缺失的顶层 model_instructions_file，不要手工改 config.toml，也不要为补字段再走一遍完整部署。它会回滚可捕获的批量失败，但不创建 durable journal；硬中断后先运行 --status，无冲突时重跑 --reactivate --yes 完成其余目录。--recover 只处理 deploy/uninstall 中断事务。不要手工删除 journal、备份或 manifest。
EXPLICIT_BETA。不要使用已发布的 v0.1.0。pip install，没有自动更新。CODE_SIGNING_POLICY.md 为准，不要以本页为版本源。指令通道把 Markdown 部署到 ~/.codex（默认 --preset unrestricted）。环境通道 --scaffold 把残缺 fixture 工作区写到 ~/.codex-fixture-workspace/<pack>，不修改 ~/.codex。两通道可叠用，互不写对方目录。默认安装步骤不变；scaffold 不是必做步骤。
python3 codex-instruct.py --scaffold-list
python3 codex-instruct.py --scaffold pytest_complete --dry-run
python3 codex-instruct.py --scaffold pytest_complete --yes
独立单文件脚本旁边没有 fixture_packs/ 时，--scaffold 会提示下载 Release bundle 或指定 --pack-dir。
docs/reference.md · docs/v0.3-scenario-deployment-design.mddocs/fixture-channel.mddocs/ccswitch.mddocs/hooks-transactions.mdgui/README.md · docs/agent-install.md提交前阅读 CONTRIBUTING.md。漏洞走 SECURITY.md 的 GitHub 私密渠道。官方反馈：GitHub Discussions；社区交流：LINUX DO。
~/.grok/rules/99-keysmith.md，不改 AGENTS.md）