Openclaw Codex CLI

Overview

Use this skill to give short, practical instructions for codex-cli in Openclaw contexts. Keep answers concise and command-focused. For Openclaw integrations, prefer codex exec because Openclaw should call Codex non-interactively rather than trying to type into the interactive TUI.

Core Commands

Use these as the default examples:

CODEBLOCK0

Mention codex "<prompt>" only when the user explicitly wants a human-driven interactive session.

Install and Update

When asked about installation or update:

• - Install with npm install -g @openai/codex.
• Check the version with codex --version.
• Update with the same package manager used for installation.
• If codex is not found, tell the user to check PATH and restart the terminal.

Login

When asked about login:

• - Use codex login for the standard login flow.
• Use codex login --device-auth when device authentication is preferred.
• If needed, API key auth can be used with OPENAI_API_KEY.
• The user must complete the sign-in flow.
• If login succeeds and codex works normally, the user does not need to log in again on every launch.
• Log in again only if the session expires, credentials are cleared, or the CLI asks for authentication.

Examples:

CODEBLOCK1

CODEBLOCK2

CODEBLOCK3

CODEBLOCK4

Authentication Errors

If codex exec returns 401 unauthorized or 500 internal server error, tell the user to reset authentication and log in again.

Use this recovery flow:

CODEBLOCK5

After login, run the codex exec command again.

Openclaw Integration Style

Use this distinction clearly:

• - Preferred for Openclaw integration: INLINECODE15
• Interactive only when a human wants to work directly in the Codex UI: INLINECODE16

For Openclaw, prefer codex exec because the default Codex CLI interface is interactive and not ideal for another tool to control by typing into the chat window.

Use codex exec when Openclaw needs to send a task programmatically as a one-off run.

Workspace Folder

Recommend creating a dedicated workspace folder for each Openclaw task or project.

Use this guidance:

• - Run Codex inside a dedicated workspace directory.
• Keep project files, generated files, and temporary outputs inside that workspace.
• Prefer workspace-write style execution in that workspace.
• If the workspace is not a git repository, add --skip-git-repo-check.
• Use --cd to point Codex at the intended working directory.
• Use --add-dir when Openclaw must allow writes in additional directories.

This makes file scope clearer and reduces the risk of changing unrelated files.

Examples:

CODEBLOCK6

CODEBLOCK7

Git Repository Check

If the target directory is not a git repository, mention --skip-git-repo-check.

Use this when Openclaw needs to run Codex in a folder that does not contain a .git directory.

Example:

CODEBLOCK8

Trust and Approvals

Explain these briefly:

• - Trust this folder: use for a known safe Openclaw workspace.
• INLINECODE26: use when the user wants one-time approval.
• INLINECODE27: use only for safe, repeatable command patterns.

Preferred guidance:

• - Trust only known folders.
• Prefer Allow once when unsure.
• Use Always allow carefully.

Approval and Sandbox Options

Mention these options when the user asks how Codex should run commands:

• - -a, --ask-for-approval: controls when Codex asks for approval before running commands.
• INLINECODE31: controls how restricted command execution is.
• INLINECODE32: convenience mode for lower-friction automatic execution.
• INLINECODE33: skips the git repository check when the folder is not tracked by git.

Use this practical guidance:

• - For Openclaw, prefer safer settings first.
• Use -a on-request when approvals should be requested as needed.
• Use -a never only when the environment is already controlled and non-interactive execution is intended.
• Use -s workspace-write as the normal default when Codex needs to edit files in the workspace.
• INLINECODE37 is a shortcut for a lower-friction setup and is useful when the user wants more automation with workspace-limited writes.
• Add --skip-git-repo-check when the working folder is not a git repository.
• Avoid --dangerously-bypass-approvals-and-sandbox.
• Avoid --sandbox danger-full-access unless the user explicitly wants that risk.

Examples:

CODEBLOCK9

CODEBLOCK10

CODEBLOCK11

Useful Exec Options

Mention these when relevant:

• - --json: use when Openclaw needs machine-readable output.
• INLINECODE42: attach image inputs for UI or design tasks.
• INLINECODE43: override the model when the user specifies one.
• INLINECODE44: enable web search when current information is needed.

Examples:

CODEBLOCK12

CODEBLOCK13

CODEBLOCK14

Prompt Examples

Use short examples like these:

CODEBLOCK15

CODEBLOCK16

CODEBLOCK17

CODEBLOCK18

CODEBLOCK19

If the user explicitly wants an interactive chat, use:

CODEBLOCK20

Prompting Rule

Prefer prompts that include:

• - The exact outcome
• The target file or component when known
• Important constraints
• Optional verification requests