Skill · publish-only

Publish Codex pets through the CodexPetHub skill

Publish Codex pets through the CodexPetHub skill — the agent-side companion that validates pet.json + spritesheet.webp and drives the Agent Publish API. Most readers don't need it: installing a pet is `npx --yes codexpethub install <slug>`.

Copy publish setup for Codex (available at launch) View SKILL.md Agent skills discovery

What the publish skill can do

  • Validate pet.json + spritesheet.webp

    Checks pet.json schema (no external URLs, no scripts, length limits) and spritesheet WebP magic bytes + 1536×1872 atlas dimensions before any upload.

  • Drive the Agent Publish API

    End-to-end submission flow: validate → preview → confirm → presigned upload → status poll. Refuses to upload dotfiles, configs, secrets, or anything outside the listed roles.

  • Honor publish intents and HMAC keys

    Carries the short-lived `cph_pub_…` Bearer token from `/publish` (or signs requests with a trusted-agent HMAC API key) so submissions authenticate without storing the token on disk.

Install the publish skill (optional)

Most CodexPetHub readers don't need the skill. Use this section only if you plan to publish a pet through Codex. The Copy-publish-setup button above hands Codex the install commands as part of a single prompt; the commands below are the same install paths if you'd rather run them by hand.

Release: v0.1.0 · sha256: REPLACE_WITH_RELEASE_SHA256

Codex skills directory

The vercel-labs/skills CLI installs into the global Codex skills folder by default.

  • macOS: ~/.codex/skills/
  • Linux: ~/.codex/skills/
  • Windows: %USERPROFILE%\.codex\skills\ (use --copy with vercel-labs/skills)

Verify the install

  1. Ask Codex to list skills

    Inside Codex, run /skills (or ask 'list available skills'). codexpethub should appear in the list with its description.

  2. Run a publish dry-run

    Paste the publish-setup prompt above, then ask Codex to validate any local pet folder without uploading. The skill should report pet.json schema, spritesheet dimensions, and SHA-256 hashes — no network call until you confirm.

Agent resources