Manage Codex skills for your team
Approve a skill once and it lands in Codex on every developer's machine, at the approved version. Ban one and it's removed everywhere. Every run is recorded in a tamper-evident audit log.
- Skills, every project
- ~/.agents/skills
- Skills, in a repository
- .agents/skills
- Also installed
- Skills only
- Blocks at invocation
- No hook to refuse a skill; banned skills are removed
Codex reads skills from the shared ~/.agents/skills, not ~/.codex. Its subagents are TOML and its custom prompts are deprecated, so skillsvault installs skills only.
Set it up
Paste this into Codex. It reads the setup guide, installs what it needs and asks you to sign in once:
Or by hand, from a terminal:
Questions
- Where does Codex look for skills?
- For every project: ~/.agents/skills. Inside a repository: .agents/skills.
- Can skillsvault block a skill in Codex?
- skillsvault removes banned skills from Codex's folders on every machine and never installs them. Codex has no hook that can refuse a skill at the moment it runs, so a skill someone copies in by hand isn't stopped at invocation; skillsvault's scan reports it.
- What does skillsvault install into Codex?
- Your organisation's approved skills, each at the version the registry approves.
- Is it free?
- Free for one developer. Teams pay per member: €20 a month on Team, €40 on Business.
One registry for all of them
The same approved list reaches every agent your team uses.
Start with the skills you already have
skillsvault scan lists every skill on this machine across all your agents and flags the risky ones. It runs locally, with no account.