Codex app injects incorrect .system path for user-installed skills

Summary

Codex app generated an incorrect Skills list path for a user-installed skill.

Actual skill location

C:\Users\{USERNAME}\.codex\skills\vercel-react-best-practices\SKILL.md

Injected path

C:\Users\{USERNAME}\.codex\skills\.system\vercel-react-best-practices\SKILL.md

Expected

User-installed skills should be injected with their real path under:

$CODEX_HOME\skills\<skill-name>\SKILL.md

Only built-in/system skills should be injected from:

$CODEX_HOME\skills\.system\<skill-name>\SKILL.md

Observed

vercel-react-best-practices was injected as a .system skill path, even though it is installed as a normal user skill. The agent failed to open the skill until it manually searched under $CODEX_HOME\skills.

Suggested fix

When generating the session Skills list:

• Use the actual discovered SKILL.md path instead of reconstructing paths.
• Validate that the emitted file: path exists.
• Treat $CODEX_HOME\skills\.system\* as system skills only.
• Treat $CODEX_HOME\skills\* excluding .system as user-installed skills.

Local evidence

.system contains only:

• imagegen
• openai-docs
• plugin-creator
• skill-creator
• skill-installer

vercel-react-best-practices exists at:

C:\Users\{USERNAME}\.codex\skills\vercel-react-best-practices

Environment

• OS: Windows
• Codex app session
• $CODEX_HOME: C:\Users\{USERNAME}\.codex