Codex 0.147 ships portable Agent Plugins and cross-tool skills
OpenAI's CLI now pulls plugins from four catalogs and imports Cursor skills — and drops --full-auto. Plus Cursor's cheaper router and a Claude Code patch.
Copy markdown
Plugins from four catalogs, one install
Codex 0.147.0 installs portable Agent Plugins and searches local, personal, workspace, and remote catalogs — the first shippable payoff of last week's cross-vendor Agent Plugins spec. Your MCP-and-Skills folders now travel between agents instead of being re-wired per tool.
Codex now imports your Cursor skills
It can pull in skills managed by Cursor and sync conversation changes to Claude and Cursor without duplicating them. If you bounce between CLIs, one setup follows you across all three instead of forking per tool.
A flag that approves commands for you
The new --approve-for-me flag auto-approves commands so long agent runs stop stalling on prompts — real hands-off autonomy, and a real footgun. Pair it with --sandbox, not with a repo you can't afford to lose.
--full-auto is gone; MCP jumps a version
codex exec --full-auto is removed — migrate scripts to --sandbox workspace-write now. Under the hood Codex speaks MCP 2026-07-28, adding paginated tool discovery, multi-round requests, and non-blocking server startup.
Secrets stop leaking into your transcript
Bearer tokens and credentials are now redacted from displayed commands and history, unfamiliar local projects require explicit trust before running, and plugins lose network access if a policy update fails. Fewer ways to leak a key into a log.
Elsewhere: Cursor's router undercuts Opus
Cursor's Aug 6 update says Auto Intelligence beats Fable-level satisfaction at 68% lower cost, and Auto Balance now outperforms Opus 4.8 at 41% less — with Opus 5 added to the routing pool. If you're on Auto, you're likely paying less for the same work today.
Elsewhere: Claude Code 2.1.223 kills a command-hiding bug
Anthropic's Aug 6 release patches a Bash permission bypass where crafted commands could hide from security checks, plus a workflow sandbox escape via dynamic import(). It also adds a /teleport hint to move cloud sessions local. Update before your next agent run.