skbx agent onboarding

Codex + Claude Code · plugin 0.1.0

Give your agent
a packet evidence
protocol.

One GitHub repository exposes native marketplaces for Codex and Claude Code. Both install the same skbx workflow: inspect first, bound the capture, ask before privilege, and never invent the missing middle.

Choose your agent See what was verified
MARKETPLACE SOURCE copyleftdev/skbx https://github.com/copyleftdev/skbx.git
CODEX .codex-plugin VALID
CLAUDE CODE .claude-plugin VALID
shared skill / use-skbx no connector · no secret

The official shape

Add the marketplace.
Then install the plugin.

A repository URL registers a catalog; it does not silently activate its contents. Both clients preserve that trust step by making plugin installation a second command.

Two clients · one source

Pick the lane
you are in.

These commands install the agent workflow. They do not install the native skbx binary or run a privileged capture.

01 / CODEX CLI + desktop
  1. 01
    Add the GitHub marketplace

    Codex snapshots the repository's marketplace catalog.

  2. 02
    Install skbx@skbx-tools

    The shared skill becomes available to new sessions.

  3. 03
    Start a new session

    Bundled skills load when the next Codex session begins.

shell / codex 
codex plugin marketplace add \
  https://github.com/copyleftdev/skbx.git

codex plugin add skbx@skbx-tools
02 / CLAUDE CODE CLI + editor
  1. 01
    Add the GitHub marketplace

    Claude Code reads the repository's marketplace catalog.

  2. 02
    Install skbx@skbx-tools

    The workflow is cached under the plugin namespace.

  3. 03
    Reload plugins

    Run /reload-plugins or restart Claude Code.

shell / claude 
claude plugin marketplace add \
  https://github.com/copyleftdev/skbx.git

claude plugin install skbx@skbx-tools

What the plugin changes

Instructions arrive.
Authority does not.

This is a skill-only plugin. It bundles no MCP server, connector, background hook, credential, or native executable.

THE AGENT MAY
  • Inspect the OS, architecture, and existing binary
  • Run doctor and a no-attach probe plan
  • Replay an existing trace without root
  • Propose the narrowest next capture
  • Explain evidence with stable handles
THE AGENT MUST NOT
  • Install packages without permission
  • Run sudo without explicit authorization
  • Capture traffic outside the user's authority
  • Call a partial trace complete
  • Invent ISP or target-host observations

First contact

Ask for a plan
before a trace.

starter prompt / safe boundary
Use skbx to check this Linux host, plan a bounded trace for an HTTPS request, and stop before any privileged capture.

Shared skill · open format

The same investigation
language on both sides.

  1. 01Inspect

    Read-only host and binary checks.

  2. 02Plan

    Resolve probes without attachment.

  3. 03Authorize

    Name scope before privilege.

  4. 04Capture

    Bound time, traffic, and output.

  5. 05Verify

    Read footer and loss counters.

  6. 06Explain

    Cite handles; preserve unknowns.

Verified 2026-07-27

Schemas checked.
Commands exercised.

The plugin and marketplace manifests pass the native validators for Codex CLI 0.145.0 and Claude Code 2.1.220.

OPENAI Package plugins + Git marketplaces ANTHROPIC Create + distribute plugin marketplaces SHARED CONTRACT Inspect the installed skill instructions

Installed is not observed

Give it a bounded
question to answer.

Trace a website request Debug a Linux packet drop