Clarify that selecting "No" on first run also disables project skills
Resolved 💬 2 comments Opened Jan 22, 2026 by shu-kitamura Closed Jan 22, 2026
💡 Likely answer: A maintainer (github-actions[bot], contributor)
responded on this thread — see the highlighted reply below.
What feature would you like to see?
TL;DR
Selecting "No" on Codex’s first-run trust prompt marks the project as untrusted and silently disables loading skills from $CWD/.codex/skills, but this behavior is not documented.
Description
When running Codex for the first time, Codex shows the following prompt:
> You are running Codex in /path/to/project
Since this folder is version controlled, you may wish to allow Codex to work in this folder without asking for approval.
› 1. Yes, allow Codex to work in this folder without asking for approval
2. No, ask me to approve edits and commands
If option 2. No... is selected, Codex adds an untrusted entry to ~/.codex/config.toml.
The following document states that skills are loaded in order from $CWD/.codex/skills.
However, if the project is untrusted, they are not loaded.
https://developers.openai.com/codex/skills
This behavior is currently undocumented and non-obvious.
There is someone who is having the same problem. (#9665)
Request
Either of the following:
- Clearly document that project-scoped skills are disabled when a project is marked as
untrusted. - Warn users that selecting "No" on first run will also disable skill loading from the project directory.
I'd be happy to submit a PR for option 2 if that's the preferred direction.
Additional information
_No response_
2 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
Starting with version 0.88 of the CLI, we filtered local skills for non-trusted projects. Based on user feedback and additional risk analysis, we've decided to reverse that decision. The next version will once again enumerate local skills even for untrusted projects. This is independent of the sandbox mode. Of course, skill execution will still be subject to the sandbox mode you choose.