@@ -0,0 +1,56 @@
+---
+name: codex-imagegen
+description: Generate an image and write it to a local file by delegating to the Codex CLI agent, which calls OpenAI's images API (gpt-image-1) and saves the result. Use when the user asks for an image to be created/drawn/generated AND saved to a path (e.g. "幫我生一張戴墨鏡的柴犬，存成 tmp/shiba.png", "draw me X and save to images/y.png", "用 codex 生圖"). Requires `codex login` AND `$OPENAI_API_KEY` set in the environment.
+---
+
+# codex-imagegen
+
+## Overview
+
+This skill drives the Codex CLI agent (`codex exec`) and asks it to produce a PNG at a path the caller chooses. On this machine the agent does **not** invoke a built-in `image_generation` tool — instead it shells out to `https://api.openai.com/v1/images/generations` with model `gpt-image-1`, base64-decodes the response, and writes the PNG. The wrapper handles the friction: companion-env interception, sandbox/network confinement, path resolution, output verification.
+
+## When to use
+
+Trigger when the user's request has both:
+1. An image-generation intent — "生圖 / 畫一張 / generate / draw / create an image of …", and
+2. A target file path — "存成 X.png", "save to X.png", or an output directory.
+
+If only (1) is present, ask for the path before proceeding.
+
+## How to use
+
+Run the bundled script. It takes the output path as the first argument and the description as the rest:
+
+```bash
+bash {SKILL_DIR}/scripts/imagegen.sh <output-path> <description...>
+```
+
+`{SKILL_DIR}` is this skill's folder. From inside Claude Code use the absolute path
+`/Users/htlin/.claude/skills/codex-imagegen/scripts/imagegen.sh` (or the dotfiles
+source `/Users/htlin/.dotfiles/claude.symlink/skills/codex-imagegen/scripts/imagegen.sh`).
+
+The script:
+- Errors out if `codex` is missing or `codex login status` does not say "Logged in".
+- Resolves a relative output path against the current working directory and `mkdir -p` the parent.
+- Calls `codex exec -C "$(pwd)" -s workspace-write --skip-git-repo-check` with a Chinese prompt that instructs codex to use the image generation tool and save to the absolute output path.
+- Fails (exit 1) if no file was written, otherwise prints `wrote <path> (<bytes> bytes)`.
+
+## Smoke test
+
+The canonical smoke test from the article:
+
+```bash
+bash /Users/htlin/.claude/skills/codex-imagegen/scripts/imagegen.sh tmp/shiba.png 戴墨鏡的柴犬
+```
+
+Expected: a PNG (~1–3 MB, ~1024px square or larger) at `tmp/shiba.png` and a final line `wrote /…/tmp/shiba.png (<bytes> bytes)`.
+
+## Notes
+
+Things the wrapper does that aren't obvious from the article:
+
+- **Strips `CODEX_COMPANION_SESSION_ID` and `CLAUDE_PLUGIN_DATA`.** When this skill runs from inside Claude Code, those env vars are inherited from the Codex Companion plugin. Left alone, the companion intercepts `codex exec` and pipes the existing companion-session prompt into it (you'll see `user / reply with ok` in the codex log). Unsetting both forces a fresh exec.
+- **Uses `--dangerously-bypass-approvals-and-sandbox`.** The article uses `-s workspace-write`, but on this machine the codex agent does not have a built-in image_generation tool and instead `curl`s `https://api.openai.com/v1/images/generations` itself. `workspace-write` blocks that egress, so the agent gives up after exploration. Full bypass lets it through.
+- **Requires `$OPENAI_API_KEY`.** Despite the article's "ChatGPT login is enough" claim, the agent on this machine reads `$OPENAI_API_KEY` directly. The wrapper warns (does not abort) when missing, in case the user is running in a session where ChatGPT auth does work.
+- **Verifies the file landed.** Codex sometimes claims success without writing — the wrapper exits non-zero unless the target file exists and is non-empty.
+- First image-gen run can take 30–60 s; later runs are faster.
@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+# codex-imagegen: generate an image via the Codex CLI's image generation tool
+# and save it to a file. Auth is the user's existing ChatGPT login (codex login),
+# no OPENAI_API_KEY required.
+#
+# Usage:
+#   imagegen.sh <output-path> <description...>
+#
+# Example:
+#   imagegen.sh tmp/shiba.png 戴墨鏡的柴犬
+set -euo pipefail
+
+if [[ $# -lt 2 ]]; then
+  echo "usage: $(basename "$0") <output-path> <description...>" >&2
+  exit 2
+fi
+
+out="$1"; shift
+desc="$*"
+
+if ! command -v codex >/dev/null 2>&1; then
+  echo "error: codex CLI not found. Install with 'brew install --cask codex' or 'npm i -g @openai/codex'." >&2
+  exit 127
+fi
+
+if ! codex login status 2>&1 | grep -q "Logged in"; then
+  echo "error: codex is not logged in. Run 'codex login' first." >&2
+  exit 1
+fi
+
+if [[ -z "${OPENAI_API_KEY:-}" ]]; then
+  echo "warn: OPENAI_API_KEY is not set. The codex agent in this env tends to call the OpenAI" >&2
+  echo "      images API directly with that key; without it the agent may fail to write the file." >&2
+fi
+
+# Resolve absolute path so codex (running with -C cwd) writes where we expect,
+# and so we can verify it afterwards regardless of how codex resolved relatives.
+case "$out" in
+  /*) abs_out="$out" ;;
+  *)  abs_out="$(pwd)/$out" ;;
+esac
+mkdir -p "$(dirname "$abs_out")"
+
+prompt="請使用 image generation tool 生成一張圖：${desc}。將結果存成 ${abs_out}，不要做其他事。"
+
+# When run from inside Claude Code (or any host with the Codex Companion plugin),
+# the shell inherits CODEX_COMPANION_SESSION_ID / CLAUDE_PLUGIN_DATA. The companion
+# then hijacks `codex exec` and routes it back into the existing companion session
+# (which replaces our prompt). Unset them so this exec starts a fresh codex run.
+env -u CODEX_COMPANION_SESSION_ID -u CLAUDE_PLUGIN_DATA \
+  codex exec \
+    -C "$(pwd)" \
+    --dangerously-bypass-approvals-and-sandbox \
+    --skip-git-repo-check \
+    "$prompt"
+
+if [[ ! -s "$abs_out" ]]; then
+  echo "error: codex finished but no file was written to ${abs_out}" >&2
+  exit 1
+fi
+
+bytes=$(wc -c <"$abs_out" | tr -d ' ')
+echo "wrote ${abs_out} (${bytes} bytes)"